Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/SOvjPnkB0LKovlE3QbmVfnHYz0c.roa
File: SOvjPnkB0LKovlE3QbmVfnHYz0c.roa (raw, json)
Hash identifier: OKpko/DOEKfnIVA3P4qIMXjN4JemVTP0iV267JhLBeE=
Subject key identifier: 48:EB:E3:3E:79:01:D0:B2:A8:BE:51:37:41:B9:95:7E:71:D8:CF:47
Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial: 0EDF
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/SOvjPnkB0LKovlE3QbmVfnHYz0c.roa
Signing time: Wed 29 Sep 2021 02:56:14 +0000
ROA not before: Wed 29 Sep 2021 02:56:14 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 16509
IP address blocks: 103.235.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3807 (0xedf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Validity
Not Before: Sep 29 02:56:14 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=48EBE33E7901D0B2A8BE513741B9957E71D8CF47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:71:b2:ef:8f:cf:ca:68:fb:36:0e:b0:cb:55:
f1:0a:14:52:bb:14:a5:12:98:40:b3:b0:c1:95:0e:
0d:c9:17:56:8e:60:40:11:0d:bb:ab:9e:d5:16:3f:
b1:4b:dc:8e:7d:4c:46:c3:5e:23:93:7c:b9:e1:06:
df:99:86:36:b1:a0:41:5f:10:2a:c0:a3:7a:6a:c8:
c1:7b:83:87:e5:a9:cb:6e:e7:c7:7c:c8:ca:f8:eb:
01:51:d0:fd:f4:9e:11:03:33:72:a9:67:4c:32:e4:
ee:d3:d0:5b:c4:36:8e:94:d7:9f:64:44:44:20:72:
ca:f7:88:26:09:2c:4a:a7:cf:71:22:42:b7:59:cd:
71:d2:bf:6c:72:73:c5:99:29:98:16:74:26:5d:56:
e6:ac:08:f5:8f:2d:e3:ff:4c:df:ad:4e:9a:e3:e1:
98:0d:25:f9:19:64:90:0d:a8:a8:b7:39:c5:90:dd:
1c:a5:53:40:12:e8:1d:94:17:2d:c2:3b:68:d8:ab:
67:46:da:a3:e8:5a:51:c7:16:a1:79:fa:2c:1a:9d:
06:8d:37:08:02:6c:74:dd:63:85:ff:9a:21:e6:a9:
06:4b:07:fd:65:76:0f:bb:40:37:85:88:89:28:72:
fd:a6:1f:a0:d5:93:9b:90:da:e1:ff:69:06:fe:69:
de:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:EB:E3:3E:79:01:D0:B2:A8:BE:51:37:41:B9:95:7E:71:D8:CF:47
X509v3 Authority Key Identifier:
keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/SOvjPnkB0LKovlE3QbmVfnHYz0c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.235.88.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:69:af:85:ba:31:30:82:41:0c:0d:bf:7a:55:89:33:ea:96:
d0:42:2b:91:b0:58:1f:2d:ef:72:54:85:b5:0c:49:4b:1e:22:
26:a6:40:f0:9d:11:b4:d4:9c:db:c6:00:c0:4c:2f:6b:34:4e:
b6:9f:af:ab:f2:15:c5:2c:9a:31:d1:40:f9:68:69:3c:39:56:
ed:13:5a:8a:7b:9f:2d:7c:14:54:d0:15:a4:31:af:65:f8:ff:
f7:5b:f2:fe:53:5a:71:7c:2d:d2:2b:cd:f8:81:26:8f:7f:d5:
e4:4b:f2:25:c2:51:69:80:25:0f:37:2d:4a:fb:2e:11:86:ab:
db:8c:fb:5f:5e:3a:ef:b4:8d:1e:c2:75:8f:39:42:60:f9:2e:
2f:69:c0:68:92:1a:62:a5:b0:6a:99:5d:5a:43:4d:12:4e:32:
4b:84:92:3b:03:15:bd:c3:04:16:f3:1e:dc:b0:d6:9c:02:34:
36:99:9f:03:0b:e6:15:2d:95:1c:46:44:b8:f9:72:ac:03:06:
d6:02:c1:89:59:11:92:dd:eb:22:07:b7:61:3a:ec:96:da:c5:
8f:95:7d:ce:2e:49:72:b1:4d:0d:e8:89:fb:17:4a:2c:04:76:
07:3b:0a:bf:b6:aa:f3:b3:0e:17:21:29:4f:03:7b:27:b4:ae:
e1:dd:80:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:24:11 2025 by rpki-client