Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/vmu_QvTOa7_J3ltykcW-wDI7GIY.roa
File: vmu_QvTOa7_J3ltykcW-wDI7GIY.roa (raw, json)
Hash identifier: G0NAPuZRENvmXJ5CTBQyt0TB31gZg7BPU7sTB5ZezXg=
Subject key identifier: BE:6B:BF:42:F4:CE:6B:BF:C9:DE:5B:72:91:C5:BE:C0:32:3B:18:86
Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial: 1066
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/vmu_QvTOa7_J3ltykcW-wDI7GIY.roa
Signing time: Thu 13 Oct 2022 08:36:20 +0000
ROA not before: Thu 13 Oct 2022 08:36:20 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 14618
IP address blocks: 103.235.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4198 (0x1066)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Validity
Not Before: Oct 13 08:36:20 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=BE6BBF42F4CE6BBFC9DE5B7291C5BEC0323B1886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:74:c5:1a:ab:1a:d0:05:a8:93:7f:dc:5d:0a:
35:3a:54:f9:63:1c:40:f4:10:5d:69:2a:f0:3f:5c:
07:d2:4f:c8:70:e1:ca:14:c1:6e:4f:b1:45:fd:6c:
23:12:e9:97:e7:b6:c0:3c:64:9a:90:49:1d:8f:c8:
67:37:71:21:ad:a1:59:86:e7:c0:cc:52:9e:e1:98:
95:c8:ca:a7:15:30:1a:55:b9:7f:5b:88:53:34:6f:
c8:da:61:d9:4c:46:05:b0:03:2a:fa:49:00:1d:8e:
43:e9:53:ff:23:15:b0:78:30:02:11:22:e5:cd:43:
1e:6d:0d:a1:1f:f4:5f:43:46:82:c2:0c:a4:b8:92:
08:7c:c4:5c:f2:ce:cc:85:6f:7d:56:24:ce:01:36:
53:a2:dc:04:18:de:16:90:90:c2:cd:ee:20:3e:07:
87:54:8b:94:8f:50:e0:a8:0d:61:16:7a:7d:df:13:
06:3b:c7:da:36:bc:ee:d5:4b:b2:62:94:65:a7:46:
23:54:72:c8:f0:90:19:8c:45:df:99:67:d4:e0:e9:
f9:ce:15:dd:8c:d1:78:4f:a3:17:52:62:7b:14:59:
4e:f7:79:c5:4a:d6:d2:94:50:36:b5:81:a3:61:fe:
da:32:e7:e9:5f:f6:4a:98:12:01:27:b0:7e:a4:1a:
23:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6B:BF:42:F4:CE:6B:BF:C9:DE:5B:72:91:C5:BE:C0:32:3B:18:86
X509v3 Authority Key Identifier:
keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/vmu_QvTOa7_J3ltykcW-wDI7GIY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.235.88.0/24
Signature Algorithm: sha256WithRSAEncryption
55:e3:aa:d3:c0:47:75:ae:c0:72:56:70:28:3a:ce:15:34:06:
7d:bd:dc:76:53:d6:58:33:28:01:ee:c9:76:61:e3:42:9b:82:
9e:4f:73:a3:3f:a3:f3:05:9b:b5:a0:81:48:6f:56:27:8e:fa:
3c:fe:13:4e:f2:d8:f8:5d:c2:af:02:7a:07:a9:04:43:71:23:
33:ed:6a:7b:f8:55:94:ee:03:e7:be:f5:3e:79:d1:2d:a8:5e:
6e:aa:7e:e0:d6:86:20:21:46:d9:06:32:3e:28:ec:d6:75:60:
33:46:4c:9f:68:08:77:68:e8:fc:67:60:74:b4:46:7e:80:a2:
46:14:18:27:a3:af:07:a3:07:8a:b8:57:46:94:7f:e6:3e:f0:
16:25:34:39:6d:f9:ca:a6:58:50:fe:bd:a2:c4:01:8c:e7:00:
e0:b5:56:c3:3a:65:e6:8c:8f:db:09:56:9d:b7:cd:81:da:d3:
dd:1d:ef:26:05:15:0b:80:30:b5:c0:d8:66:b7:6f:27:63:cb:
35:d0:02:c6:da:29:cf:a9:3c:8e:e6:ed:9f:41:35:45:a5:c1:
eb:39:80:a3:be:9b:9c:42:66:f0:01:64:15:74:26:c4:40:3d:
10:b9:a6:75:6b:af:35:3e:be:a0:10:91:c0:b3:9a:9a:2c:a4:
8f:50:b3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:16:35 2025 by rpki-client