Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TIH/-X_6zXfu_kdhLxTuqHNEHZcu-Vs.roa
File: -X_6zXfu_kdhLxTuqHNEHZcu-Vs.roa (raw, json)
Hash identifier: BpwxxZIpNClB9BAYcOrkKL6Ee5QQhhuS/waKhs2Zhlo=
Subject key identifier: F9:7F:FA:CD:77:EE:FE:47:61:2F:14:EE:A8:73:44:1D:97:2E:F9:5B
Certificate issuer: /CN=2D7204617354D70523B6F65A270712B6B19D815E
Certificate serial: 0A54
Authority key identifier: 2D:72:04:61:73:54:D7:05:23:B6:F6:5A:27:07:12:B6:B1:9D:81:5E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LXIEYXNU1wUjtvZaJwcStrGdgV4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TIH/-X_6zXfu_kdhLxTuqHNEHZcu-Vs.roa
Signing time: Thu 15 Sep 2022 02:51:07 +0000
ROA not before: Thu 15 Sep 2022 02:51:07 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131639
IP address blocks: 103.129.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2644 (0xa54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D7204617354D70523B6F65A270712B6B19D815E
Validity
Not Before: Sep 15 02:51:07 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F97FFACD77EEFE47612F14EEA873441D972EF95B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:92:4f:6d:4f:45:e1:e1:44:16:55:7b:0d:28:
52:9d:64:02:a9:30:24:85:e1:44:1d:70:19:fe:96:
53:64:95:ec:50:17:f0:bb:ac:b5:9d:b1:ea:26:d5:
99:7e:5a:84:c1:0f:f4:a7:bb:c8:09:b4:e1:1b:8a:
dc:b0:6b:2b:f0:f8:a6:11:6a:e3:28:03:bc:f8:f3:
79:0b:b6:72:10:84:47:21:b9:06:ef:d9:93:12:4a:
de:c6:0b:ee:37:d0:9f:aa:f6:1c:b7:8b:ca:9d:81:
84:f8:84:16:9b:40:ef:30:30:91:60:fb:28:74:38:
70:ef:ef:f8:13:64:b4:c2:13:e4:7e:95:8c:2a:52:
02:c7:89:c8:6d:e1:6d:24:15:b7:4f:fd:bc:b6:52:
05:5f:d7:4c:80:82:86:f8:9a:ce:b2:28:81:7a:0a:
04:8f:4f:18:0d:42:26:31:26:68:06:f9:d8:83:3c:
27:6c:0e:c3:ed:fb:bf:a5:b0:bb:ac:7c:35:29:83:
96:b2:57:0e:4a:01:8c:d7:cf:22:59:30:c0:08:46:
51:0e:f3:81:f6:b1:df:87:fe:06:4b:ee:c0:f4:b8:
4b:6a:97:ac:b9:15:97:d3:be:b5:72:f8:53:a7:c2:
fd:b4:6c:d3:60:9b:7d:2d:7c:90:8c:cd:17:76:1e:
d3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7F:FA:CD:77:EE:FE:47:61:2F:14:EE:A8:73:44:1D:97:2E:F9:5B
X509v3 Authority Key Identifier:
keyid:2D:72:04:61:73:54:D7:05:23:B6:F6:5A:27:07:12:B6:B1:9D:81:5E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIH/LXIEYXNU1wUjtvZaJwcStrGdgV4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LXIEYXNU1wUjtvZaJwcStrGdgV4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TIH/-X_6zXfu_kdhLxTuqHNEHZcu-Vs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.129.146.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:35:79:74:c9:c9:9a:56:5b:a5:28:4e:fa:96:11:43:56:eb:
8a:4d:8d:2b:5b:f4:06:56:4b:8d:24:31:1d:fa:9c:ae:d7:ed:
64:5e:a5:14:b6:b5:10:8f:ce:39:f5:db:23:95:c3:3a:1f:57:
b2:42:2f:e4:5b:2d:00:02:1b:4d:e7:b8:50:30:1c:83:dc:cf:
bd:de:74:8a:85:05:e8:dc:66:d6:db:5b:1f:05:fb:86:65:9d:
7c:1c:68:31:2c:7a:74:71:5f:71:c2:2e:7c:cd:bf:89:2c:47:
b3:f8:7e:37:c3:f6:d8:2e:ce:0b:3f:89:e9:13:35:f7:f4:98:
b9:05:3e:d4:2b:1c:aa:d3:c2:91:79:a2:8d:bb:0a:a6:96:ae:
7d:a7:80:8a:17:2e:c8:a2:4c:3e:a2:31:9b:2b:98:21:1f:68:
7a:f7:d3:6b:35:c4:f3:74:30:4d:44:4a:72:03:6c:ac:b3:6d:
e3:75:50:39:22:66:c5:d6:bf:5a:af:1a:9d:9b:0a:ec:dd:f1:
e1:b2:49:9d:40:ea:64:74:5e:ba:4d:c2:e0:e9:ef:48:95:8c:
8f:49:a2:7d:15:65:48:f7:8b:9c:fa:59:91:d1:df:e5:e1:f1:
5b:a1:4f:55:1a:14:23:2a:c5:2e:a8:6e:ed:b2:fe:ee:f8:3f:
ce:a3:ba:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org