Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TIANSIN/y_QqHwBVv1lIx0ulBRkj0anTplk.roa
File: y_QqHwBVv1lIx0ulBRkj0anTplk.roa (raw, json)
Hash identifier: gE//52Pu647fUCIWjNooCe/GgT0naSsA8m5QbPraq9s=
Subject key identifier: CB:F4:2A:1F:00:55:BF:59:48:C7:4B:A5:05:19:23:D1:A9:D3:A6:59
Certificate issuer: /CN=9654330DD1FA2ED60FCD69F26F2138CA2C8BEC73
Certificate serial: 03
Authority key identifier: 96:54:33:0D:D1:FA:2E:D6:0F:CD:69:F2:6F:21:38:CA:2C:8B:EC:73
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/llQzDdH6LtYPzWnybyE4yiyL7HM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TIANSIN/y_QqHwBVv1lIx0ulBRkj0anTplk.roa
Signing time: Fri 04 Nov 2022 07:07:00 +0000
ROA not before: Fri 04 Nov 2022 07:07:00 +0000
ROA not after: Fri 03 Nov 2023 01:33:27 +0000
asID: 7483
IP address blocks: 103.24.52.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9654330DD1FA2ED60FCD69F26F2138CA2C8BEC73
Validity
Not Before: Nov 4 07:07:00 2022 GMT
Not After : Nov 3 01:33:27 2023 GMT
Subject: CN=CBF42A1F0055BF5948C74BA5051923D1A9D3A659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7d:8b:0a:79:19:75:f2:cd:06:0a:87:54:c8:
2f:de:a3:0b:af:20:56:66:ba:60:0b:57:f5:f2:63:
22:fc:7e:dd:1e:00:c7:2b:01:64:c2:09:f2:18:41:
5f:37:d2:c9:14:2a:92:db:24:87:10:f0:53:bb:df:
ec:22:ff:4e:a0:8e:a4:54:6b:b8:54:7a:fb:50:8b:
41:5c:d3:47:85:8d:4e:49:63:5f:b4:c2:0b:77:30:
3d:1b:6b:a3:ac:53:ef:3b:3d:a8:d6:bc:2d:6f:77:
37:ca:59:26:b4:ab:65:fc:c2:f4:9f:49:d4:b5:fa:
a2:68:8c:bf:f5:5e:a7:e0:79:ca:a3:17:32:5b:43:
cc:c6:28:db:03:df:60:c8:8a:b1:ed:ad:62:19:54:
fd:51:76:96:6a:08:4c:15:30:8e:49:b1:93:ec:0b:
2a:94:ea:52:52:23:63:06:ad:02:a1:75:a8:77:8a:
9a:c9:2e:ad:df:8c:8c:3f:10:41:46:5e:cc:bf:61:
92:d4:0e:10:fd:d9:88:06:31:6d:66:68:24:37:f4:
cf:3f:d3:b3:74:1d:bf:39:e3:a6:5e:fe:4f:99:fd:
0f:db:77:e0:70:42:0b:a3:84:16:bf:1c:0e:d2:5b:
8a:ca:1d:be:e1:5b:3e:5b:d7:b9:7a:02:f6:dd:10:
1e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F4:2A:1F:00:55:BF:59:48:C7:4B:A5:05:19:23:D1:A9:D3:A6:59
X509v3 Authority Key Identifier:
keyid:96:54:33:0D:D1:FA:2E:D6:0F:CD:69:F2:6F:21:38:CA:2C:8B:EC:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIANSIN/llQzDdH6LtYPzWnybyE4yiyL7HM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/llQzDdH6LtYPzWnybyE4yiyL7HM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIANSIN/y_QqHwBVv1lIx0ulBRkj0anTplk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.24.52.0/23
Signature Algorithm: sha256WithRSAEncryption
c8:27:c3:57:29:06:d8:f5:46:04:3e:b0:07:55:7d:66:ca:fb:
4e:01:82:3f:b7:0e:51:09:25:2e:2b:82:35:62:d7:ba:98:61:
9e:ae:85:ed:ef:67:45:b8:5b:a5:9e:fa:99:76:1c:79:b6:a8:
91:7b:f5:74:6b:ab:73:50:e6:14:38:c9:16:b2:01:f2:56:14:
3b:a8:56:d6:c6:e7:78:7e:2b:b6:0a:69:6a:59:cb:e3:44:57:
da:5c:47:9d:e5:93:a0:87:e5:40:76:a7:d7:1b:c1:85:c8:4c:
53:1b:d8:dd:80:23:44:f8:3e:47:43:ab:58:6a:65:39:1e:01:
8b:7f:d7:b7:a5:ff:7e:1b:85:9c:c3:1b:5d:0c:ff:6a:38:cd:
0e:9f:50:91:54:52:a5:fc:9b:dd:8a:db:f1:d9:8a:bb:5b:c0:
90:e7:1c:ed:c0:06:46:52:1b:40:8a:2f:b0:6b:43:cb:08:64:
13:ae:c8:ff:e1:ec:8f:f3:4e:48:36:21:05:16:06:ac:e8:45:
7e:5f:ad:af:b0:a9:f9:4d:3b:45:66:5a:5c:a2:2f:6f:3d:1e:
1a:81:84:9d:f6:4b:d9:a8:58:4e:6a:16:89:3b:e9:b3:2e:1b:
1e:ee:b4:ef:64:49:b4:5f:c9:e2:85:53:05:2e:cd:61:ca:80:
2d:b3:75:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:22 2024 by rpki-client on console-ams.rpki-client.org