Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/Ud8PvDY6nj6fhCUxM8prLSn9uw4.roa
File: Ud8PvDY6nj6fhCUxM8prLSn9uw4.roa (raw, json)
Hash identifier: G6LAvVVeemPfca9YNhEWfwcNZ0YMCCvdm+3msIWgQgk=
Subject key identifier: 51:DF:0F:BC:36:3A:9E:3E:9F:84:25:31:33:CA:6B:2D:29:FD:BB:0E
Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial: 116C
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/Ud8PvDY6nj6fhCUxM8prLSn9uw4.roa
Signing time: Fri 01 Sep 2023 03:14:20 +0000
ROA not before: Fri 01 Sep 2023 03:14:20 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 16509
IP address blocks: 103.235.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4460 (0x116c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Validity
Not Before: Sep 1 03:14:20 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=51DF0FBC363A9E3E9F84253133CA6B2D29FDBB0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:26:7f:99:64:9c:11:50:0c:97:78:11:a3:c3:
29:06:48:bc:6a:bc:00:15:06:65:68:d0:cb:f9:9c:
50:f3:48:1b:8d:38:94:14:e3:6f:0f:51:8c:c9:4b:
ec:85:cb:ec:a7:42:38:e5:68:41:77:22:17:22:92:
8e:cd:58:61:4d:70:ff:b7:2a:d0:c9:d3:07:2e:83:
23:fa:bc:c5:e1:89:62:b3:3b:26:b0:51:ae:19:5f:
04:b8:a1:e5:b3:3f:21:fb:51:f3:4a:fd:8b:a0:72:
be:c9:44:e4:61:1c:cc:59:57:a9:ed:7d:17:b5:af:
5b:fe:53:fa:cc:47:25:d6:84:8c:19:4b:77:22:4b:
37:4e:11:de:1f:50:33:80:4e:99:42:75:f2:97:72:
12:75:d1:06:d8:12:10:ee:e9:33:56:3f:bc:72:cf:
f8:60:79:80:a4:a8:e5:f7:8c:b4:5a:a3:c2:7d:71:
50:32:9b:96:8f:28:0b:6d:08:69:79:ad:44:d2:a9:
76:cc:c4:b9:79:5c:18:e5:17:75:64:04:17:3e:b4:
80:0f:24:5f:4b:ad:92:d9:08:62:06:9e:d8:92:b7:
6d:11:f6:29:cc:c8:45:c1:2d:1f:d2:85:02:c2:5a:
a4:0f:66:38:4b:8a:c2:ac:aa:ca:ed:a1:e2:79:89:
df:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DF:0F:BC:36:3A:9E:3E:9F:84:25:31:33:CA:6B:2D:29:FD:BB:0E
X509v3 Authority Key Identifier:
keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/Ud8PvDY6nj6fhCUxM8prLSn9uw4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.235.88.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:db:9a:57:ac:a9:25:8e:0b:03:16:b0:5f:f7:93:77:27:e4:
2c:41:33:9a:57:60:10:ad:49:c6:d1:19:3c:48:c3:f2:de:21:
05:92:a1:33:ac:24:71:17:f9:86:ee:11:a3:34:9a:46:c5:00:
c9:81:0b:9d:b9:23:56:10:53:67:d2:6e:07:0f:71:02:de:3a:
ea:f5:a2:f1:e5:b5:d0:f1:02:88:dc:8f:22:bf:66:b1:22:27:
95:c4:11:2a:d2:e3:db:e2:1d:93:00:cd:3f:64:7d:1e:4c:a4:
79:5c:d3:57:f8:0d:a8:83:b8:2c:38:82:be:b0:7c:0a:52:11:
65:d1:53:1b:59:0e:80:57:ac:eb:55:40:db:84:2b:33:99:14:
48:10:70:ce:be:50:94:79:e0:97:0c:c5:a9:7a:a7:04:10:28:
b4:10:f4:ef:e4:45:44:6c:0f:dd:c5:ad:47:6a:c9:7d:d6:df:
21:6a:b4:02:54:a9:8b:c0:39:6e:92:2c:50:f6:ab:5e:a4:97:
e0:a9:92:b0:2d:6c:e9:c3:de:b9:c7:3b:32:22:04:15:5b:b5:
7b:8a:cc:03:7a:87:63:74:41:c7:31:a0:55:8d:fa:38:68:75:
14:0f:9a:fb:7d:b6:82:0b:1a:ad:ad:2b:69:a5:5b:39:4e:96:
18:64:ab:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:22:35 2025 by rpki-client