Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TCB/o_uQcQOCy2E4GEy-JBGMIKcMqj4.roa
File: o_uQcQOCy2E4GEy-JBGMIKcMqj4.roa (raw, json)
Hash identifier: wqUNqBvUifjsxXweaG/97XI2cMiE7mhfWh1BGOpbfJo=
Subject key identifier: A3:FB:90:71:03:82:CB:61:38:18:4C:BE:24:11:8C:20:A7:0C:AA:3E
Certificate issuer: /CN=BF82A3AC11455030743C0A743711F8A0D8EBAE28
Certificate serial: 08CE
Authority key identifier: BF:82:A3:AC:11:45:50:30:74:3C:0A:74:37:11:F8:A0:D8:EB:AE:28
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/v4KjrBFFUDB0PAp0NxH4oNjrrig.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TCB/o_uQcQOCy2E4GEy-JBGMIKcMqj4.roa
Signing time: Sun 07 Feb 2021 11:49:07 +0000
ROA not before: Sun 07 Feb 2021 11:49:07 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131590
IP address blocks: 103.227.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2254 (0x8ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF82A3AC11455030743C0A743711F8A0D8EBAE28
Validity
Not Before: Feb 7 11:49:07 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A3FB90710382CB6138184CBE24118C20A70CAA3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f0:2a:bb:62:49:be:13:2f:ee:9d:2e:75:ec:
9a:9c:99:fe:5c:cf:ee:45:26:27:76:91:40:84:b6:
67:65:47:8d:d2:dc:27:36:59:8a:91:4a:39:7c:d4:
f5:73:a3:12:77:1c:35:43:5e:a9:17:1d:ef:db:84:
ed:af:0b:e8:e4:86:99:d1:48:8b:84:4b:35:0c:41:
d0:2a:72:05:5e:de:9b:e2:10:26:a6:a3:cc:98:8a:
60:49:23:c5:ca:bf:9e:44:86:a9:4f:35:82:12:b9:
73:e1:58:da:7f:3b:48:a4:d6:4a:ec:f1:9b:bf:d9:
9e:78:f9:d6:5d:2f:22:b1:df:e6:d1:f9:75:7e:cd:
8f:4c:da:7d:57:83:7f:ff:0c:cd:38:82:b9:ce:e9:
de:cc:16:0f:77:b2:99:ab:b3:cf:f5:78:93:c0:a0:
83:06:d5:a7:a6:ad:27:9e:88:5d:fd:01:a7:7b:63:
4e:97:c1:03:40:88:00:e1:74:aa:5c:3f:03:33:00:
6c:ae:bc:06:60:75:91:e8:03:35:14:91:24:85:74:
37:4d:f1:58:03:27:4f:79:46:3b:40:d3:c3:68:2b:
39:aa:e9:99:93:44:b0:57:3c:7e:50:64:fa:25:34:
9f:ab:41:22:32:32:68:6a:51:e6:3b:63:77:89:0f:
8d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FB:90:71:03:82:CB:61:38:18:4C:BE:24:11:8C:20:A7:0C:AA:3E
X509v3 Authority Key Identifier:
keyid:BF:82:A3:AC:11:45:50:30:74:3C:0A:74:37:11:F8:A0:D8:EB:AE:28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TCB/v4KjrBFFUDB0PAp0NxH4oNjrrig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/v4KjrBFFUDB0PAp0NxH4oNjrrig.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TCB/o_uQcQOCy2E4GEy-JBGMIKcMqj4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.227.226.0/24
Signature Algorithm: sha256WithRSAEncryption
dc:76:1f:91:b7:f7:10:e1:c2:96:6f:ea:5d:0f:fd:59:cf:de:
49:77:ca:96:c2:3f:f6:df:de:c5:3b:9e:25:d7:0d:39:64:af:
77:bd:8b:22:10:ea:5a:f7:1a:b8:d6:4a:d6:5a:f6:58:08:a2:
70:63:15:04:38:14:9f:10:a7:3a:8a:b1:14:72:5c:aa:0e:c4:
f5:af:90:2b:53:f9:c4:52:ee:1b:3f:5e:e6:40:47:e5:d0:ea:
78:5f:c3:c9:66:af:a5:2f:1c:62:72:b2:8f:77:3a:cc:3a:56:
0f:1b:eb:df:32:2d:30:37:c1:08:66:08:18:df:e0:c8:46:37:
40:46:7c:ce:a3:c4:c4:1c:99:2c:fe:32:67:e4:d3:64:8f:32:
b9:f0:58:b9:1b:3a:46:70:08:8c:52:b0:ea:d6:11:2a:1c:44:
49:b6:6a:68:b5:5b:1c:f1:a7:c9:90:2e:cf:fa:8e:f0:37:9a:
d7:f2:35:48:20:5c:d9:e6:ca:81:73:44:98:99:96:b5:28:72:
ac:63:f2:f2:7e:69:c0:4f:f5:b9:fa:c8:4a:11:49:c9:f5:42:
68:ea:de:75:55:a6:be:34:54:3c:28:9d:70:5b:03:be:2f:35:
51:ac:28:b0:80:c9:66:01:7a:3d:dc:d0:80:e5:02:c8:15:33:
26:22:00:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:22 2024 by rpki-client on console-ams.rpki-client.org