Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/--WSe664BCpvd60hPEZ8nj4bDZQ.roa
File: --WSe664BCpvd60hPEZ8nj4bDZQ.roa (raw, json)
Hash identifier: HDx3f7BhLpBQVakFMyY/JdXtDTAk/aXXeurGNAuI8pQ=
Subject key identifier: FB:E5:92:7B:AE:B8:04:2A:6F:77:AD:21:3C:46:7C:9E:3E:1B:0D:94
Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial: 1068
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/--WSe664BCpvd60hPEZ8nj4bDZQ.roa
Signing time: Thu 13 Oct 2022 08:36:48 +0000
ROA not before: Thu 13 Oct 2022 08:36:48 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 16509
IP address blocks: 103.235.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4200 (0x1068)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Validity
Not Before: Oct 13 08:36:48 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FBE5927BAEB8042A6F77AD213C467C9E3E1B0D94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a7:56:8c:6e:f6:81:0f:22:c9:d4:09:0d:e7:
97:17:a8:8a:ce:ff:64:01:67:fd:ac:61:65:06:b0:
56:c0:ac:37:54:2f:4e:9d:29:6f:c8:84:9f:2f:12:
48:bb:97:2f:03:58:85:cf:c8:e3:4a:93:32:62:7e:
e7:83:72:2f:5f:b5:8d:db:a7:13:cb:df:9e:76:d9:
70:92:7d:ee:e7:9a:86:ce:c6:d6:8f:24:81:2b:e7:
b4:f1:2a:45:88:ec:2e:09:89:05:9e:4b:4a:48:f1:
31:0e:7f:fb:44:76:5e:32:bc:db:64:5f:bf:73:21:
8a:49:fa:c1:41:b3:75:02:10:02:ba:a8:c8:65:03:
ce:b3:29:61:f6:e2:ec:e0:8b:58:b9:61:d1:ad:8e:
a8:68:5f:71:a8:9e:79:a3:56:c8:34:26:1c:13:3f:
2a:fa:8e:b7:88:8f:dd:85:31:64:8f:be:41:8e:fc:
67:01:42:fc:43:25:8e:79:61:f2:77:5b:42:92:25:
a1:bc:20:6d:c7:7d:07:b1:2b:18:f8:db:c6:06:cb:
6c:42:da:9f:a1:ba:d2:53:9c:17:fc:35:ba:78:f2:
0e:65:c3:8b:c5:6b:b1:39:bd:14:48:88:20:cd:6a:
2d:42:4d:e7:3f:17:23:c2:34:2e:b3:68:9c:c3:d7:
92:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E5:92:7B:AE:B8:04:2A:6F:77:AD:21:3C:46:7C:9E:3E:1B:0D:94
X509v3 Authority Key Identifier:
keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/--WSe664BCpvd60hPEZ8nj4bDZQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.235.88.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:15:12:73:4c:43:c6:ce:83:42:b1:13:32:8a:75:14:99:b4:
00:24:91:d2:47:4b:6e:b2:62:8d:cd:ab:3c:26:f8:53:6c:93:
7f:ce:97:98:cc:74:d8:ec:ea:1d:e9:2a:ba:b9:c8:9d:d2:07:
0a:da:3c:16:5f:31:da:e8:41:51:00:fb:ac:7a:33:75:e5:25:
f3:f9:ec:ba:f6:05:80:2e:73:9a:54:5e:9b:64:22:88:d9:3a:
ef:f8:57:fc:92:6b:e9:34:17:b2:7a:9c:9b:01:bb:c0:e2:b0:
09:52:60:3a:a8:11:ed:01:db:52:e5:1a:09:b8:f8:87:d3:3d:
27:bd:0d:93:d8:61:c6:39:f4:50:03:bd:9e:33:55:43:d3:59:
09:26:dc:9c:e0:e4:62:b8:fc:1b:34:50:c1:46:38:2e:d1:84:
4c:84:9b:4d:41:ca:a0:59:40:43:a4:78:0f:d6:65:37:24:92:
0e:0e:eb:db:55:64:b4:6c:13:76:33:7b:1c:74:02:a1:45:b6:
32:22:1d:d1:11:36:27:d4:10:b8:40:f5:c3:16:5a:5f:12:27:
bf:ac:f1:da:16:88:62:e4:84:bb:92:8e:0e:db:a9:96:5a:ae:
2c:3b:3b:a1:56:f7:0f:4f:aa:0c:54:a6:60:21:96:f0:f3:0c:
fe:74:7e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:19:58 2025 by rpki-client