Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/uJNBCMZw_h3O2ver4AsolLGX_1k.roa
File: uJNBCMZw_h3O2ver4AsolLGX_1k.roa (raw, json)
Hash identifier: PgJUuP0lj2VW6QpJPjhT7NCfZd6Z7+CTYdIx9p+bNGo=
Subject key identifier: B8:93:41:08:C6:70:FE:1D:CE:DA:F7:AB:E0:0B:28:94:B1:97:FF:59
Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial: 107E
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/uJNBCMZw_h3O2ver4AsolLGX_1k.roa
Signing time: Thu 13 Oct 2022 08:50:38 +0000
ROA not before: Thu 13 Oct 2022 08:50:38 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131621
IP address blocks: 101.102.103.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4222 (0x107e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Validity
Not Before: Oct 13 08:50:38 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B8934108C670FE1DCEDAF7ABE00B2894B197FF59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6b:74:22:02:ec:fe:8a:80:7d:32:5b:47:81:
eb:40:0d:1d:f7:30:d3:c6:67:7f:89:73:c3:1b:ea:
67:2f:7a:63:e3:e9:20:7b:d3:d9:12:84:0a:ad:b3:
7c:23:78:8f:0e:ae:39:45:84:57:4b:24:09:39:e8:
58:f5:91:9f:48:6a:bc:49:4c:13:03:41:91:29:2e:
db:0a:68:ae:f7:6e:8b:6e:1d:ea:77:ac:3c:6b:b9:
52:cc:f5:23:a7:e1:ce:b0:41:33:d3:61:d6:ce:62:
0a:a3:d9:1c:cc:96:3d:85:6c:7a:9d:67:dc:3c:f0:
62:37:96:19:55:39:d7:28:52:9b:1f:71:58:77:9e:
29:7d:04:3f:f3:b6:09:a7:37:d5:c1:21:1e:14:cc:
67:7e:32:32:7c:35:5e:43:dc:a0:e0:14:c8:e3:e8:
88:3c:18:64:09:04:3c:10:91:57:de:ef:da:00:22:
34:00:ad:64:25:24:83:12:25:9b:43:43:c0:de:4f:
a3:ef:c1:53:87:55:9a:fa:53:2f:a7:c5:03:43:e0:
37:f4:40:ef:b3:fb:c9:0b:29:7a:6e:33:bc:ba:bc:
41:c7:0e:6b:ca:76:a2:c8:a9:cb:79:53:16:1c:af:
b1:2c:13:d9:a6:80:21:2b:ab:90:31:68:61:36:e1:
18:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:93:41:08:C6:70:FE:1D:CE:DA:F7:AB:E0:0B:28:94:B1:97:FF:59
X509v3 Authority Key Identifier:
keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/uJNBCMZw_h3O2ver4AsolLGX_1k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.102.103.0/24
Signature Algorithm: sha256WithRSAEncryption
28:61:71:29:ec:fa:fb:56:01:79:cd:55:5e:cc:d0:6f:2b:fe:
c1:2f:a8:8d:ad:7f:9f:9e:cb:b5:a8:d2:63:50:09:7c:20:44:
be:84:d5:94:ad:47:ec:29:8e:00:66:00:68:06:5f:98:b7:80:
7f:c8:16:b7:1e:78:34:06:6e:7a:a4:bd:c8:85:e6:b3:0b:15:
1d:bb:c4:f3:15:12:09:55:d9:94:94:d8:03:10:a3:c8:9c:e0:
b0:3e:6c:22:97:22:82:d0:85:24:2b:59:e0:b9:d8:21:a4:ac:
a3:f4:2f:a3:87:55:70:5c:af:06:cb:0b:c1:3a:1b:d9:4f:2a:
9e:63:9a:08:e5:ac:ac:91:60:de:28:c6:24:f1:4f:e9:37:6b:
ec:fa:a3:91:bb:ad:86:ca:ee:85:f7:3e:70:d3:93:6f:2d:26:
af:14:ec:c5:d6:39:77:e8:88:ce:24:3a:01:98:01:74:42:b7:
99:43:df:47:a9:6a:16:f9:ec:bb:a6:e5:38:cf:dc:4a:4a:d4:
3f:60:0c:0b:9d:ed:52:bb:a2:33:97:b0:9f:3a:8f:ab:e9:5b:
8c:3d:37:69:21:31:cc:b7:2c:fc:93:de:3b:43:02:7a:54:13:
d2:2b:84:61:03:4b:99:37:1b:36:b9:c9:2f:95:9f:80:74:a8:
13:af:3b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:13:03 2025 by rpki-client