Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/Aqo46VYZ2ya5g5iuDzZeP5cY_cU.roa
File: Aqo46VYZ2ya5g5iuDzZeP5cY_cU.roa (raw, json)
Hash identifier: OSOOs3+NLBUVRPFlg0k1PVaAcdHh09k/LlURgKB36hU=
Subject key identifier: 02:AA:38:E9:56:19:DB:26:B9:83:98:AE:0F:36:5E:3F:97:18:FD:C5
Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial: 1179
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/Aqo46VYZ2ya5g5iuDzZeP5cY_cU.roa
Signing time: Fri 01 Sep 2023 03:14:24 +0000
ROA not before: Fri 01 Sep 2023 03:14:24 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17718
IP address blocks: 150.242.102.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4473 (0x1179)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Validity
Not Before: Sep 1 03:14:24 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=02AA38E95619DB26B98398AE0F365E3F9718FDC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f3:91:18:a5:f6:dc:41:36:01:17:e6:15:cc:
51:fb:f8:2b:ab:0f:fe:6f:81:b8:bc:cd:f7:16:9d:
c0:9d:31:c2:37:4b:ab:f4:23:dd:b8:6d:1d:77:42:
3e:1a:0f:93:58:ba:82:55:b4:e4:4d:ce:90:49:ae:
6b:e7:55:e6:24:3a:73:cb:5d:c8:c8:12:1f:f4:55:
e4:3b:d7:e5:62:f0:c4:5c:e3:ec:0d:81:a0:f3:99:
93:74:f8:d3:70:d0:36:6e:a1:a7:da:51:00:cf:7e:
4d:64:7d:bb:35:4f:13:33:e6:2f:19:a8:94:d6:e4:
09:9f:02:60:95:40:cf:f8:3b:b2:df:9f:c3:29:d6:
55:cf:9b:04:2e:36:81:de:48:0f:16:82:07:93:59:
63:06:60:f8:ab:42:02:44:53:f7:25:91:f2:ce:b6:
c7:00:e1:f4:5c:6d:d4:1e:3b:fc:9e:61:30:04:d8:
86:1c:29:32:f6:97:3c:d2:e9:7e:fe:e3:84:73:60:
78:a7:a9:7e:b2:97:52:5b:c7:68:31:f2:1f:65:6e:
1c:1b:e6:56:8b:a1:06:22:3e:a0:0c:08:d9:a0:cb:
e2:7e:e9:49:ab:00:7c:10:e5:c8:8c:a7:8b:7c:ae:
ad:12:9d:42:87:b3:68:d1:59:9f:9f:b8:ab:6e:f4:
c4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AA:38:E9:56:19:DB:26:B9:83:98:AE:0F:36:5E:3F:97:18:FD:C5
X509v3 Authority Key Identifier:
keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/Aqo46VYZ2ya5g5iuDzZeP5cY_cU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.242.102.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:73:56:01:c5:f4:5a:77:b4:47:99:8f:d6:08:72:61:4b:9d:
56:71:c7:7d:00:b1:79:c2:98:9f:c8:57:82:91:eb:db:8d:3b:
bf:f7:4c:b3:f8:ed:ff:0c:78:8f:40:d1:1c:2d:9e:dd:17:d2:
6c:58:c2:a0:24:58:49:b5:8b:0f:af:c0:c9:d2:0e:f3:7d:58:
fc:75:a1:c4:4e:9f:5a:66:3c:8b:ea:fc:eb:42:73:65:9b:6e:
a6:73:0e:fa:53:e3:51:c7:9e:82:6d:ea:ce:45:62:a8:10:36:
4b:90:e7:8d:7f:11:b6:83:bb:f8:ca:36:ed:aa:74:23:d2:ad:
28:88:f9:32:8f:57:91:a9:c0:0c:29:ea:7a:7a:c4:d8:5a:2c:
3d:44:d5:ed:82:8f:eb:1f:46:5a:11:5c:0b:9e:1f:31:36:6b:
21:9b:77:8f:8d:79:1c:f7:e6:ad:90:df:af:34:c6:8e:f8:0d:
a3:d8:64:ee:e0:99:68:74:7a:d9:0c:5c:5c:02:38:b0:80:9a:
c0:4a:1f:b2:1e:56:8e:0b:05:2a:c5:d9:12:90:9e:6f:27:20:
a5:76:00:3b:2d:45:19:50:1d:60:38:ba:8c:89:5b:c2:8e:7b:
68:15:00:a3:f8:01:0e:0b:ff:ee:f1:8a:7b:e5:2b:4d:d4:88:
f2:27:63:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:26:07 2025 by rpki-client