Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ULC/-rDysy1NBdX_GxSCYSCkMCVmp1k.roa
File: -rDysy1NBdX_GxSCYSCkMCVmp1k.roa (raw, json)
Hash identifier: wIx4rwmFRjlUqlVYjnFAtSAE3MTmXGlXw7UlPWP1vxY=
Subject key identifier: FA:B0:F2:B3:2D:4D:05:D5:FF:1B:14:82:61:20:A4:30:25:66:A7:59
Certificate issuer: /CN=BFBB7F7B5C58323490875849B8EDDA495EF17B1B
Certificate serial: 01B0
Authority key identifier: BF:BB:7F:7B:5C:58:32:34:90:87:58:49:B8:ED:DA:49:5E:F1:7B:1B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/v7t_e1xYMjSQh1hJuO3aSV7xexs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/-rDysy1NBdX_GxSCYSCkMCVmp1k.roa
Signing time: Sat 02 Oct 2021 04:31:07 +0000
ROA not before: Sat 02 Oct 2021 04:31:07 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18178
IP address blocks: 103.157.42.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 432 (0x1b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BFBB7F7B5C58323490875849B8EDDA495EF17B1B
Validity
Not Before: Oct 2 04:31:07 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=FAB0F2B32D4D05D5FF1B14826120A4302566A759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ea:c5:32:5d:a8:6a:93:2d:95:86:44:a8:d2:
45:cb:94:85:a1:83:e0:25:d2:d3:e1:49:09:c6:57:
ab:e4:d7:e2:96:4f:31:0c:79:aa:c0:7a:bb:15:c5:
ab:13:ab:ef:63:32:cd:d6:10:f8:73:28:97:f1:60:
ff:f5:8e:7e:fc:50:5c:84:a9:96:e3:be:67:a2:18:
f1:88:8f:08:95:0a:d2:18:42:ba:41:5e:6a:fe:b4:
b0:1f:3a:31:2a:eb:1a:2d:3e:26:44:29:00:4d:8c:
cb:3b:a3:89:e3:d5:04:e5:5b:ef:71:91:e8:6b:7f:
90:09:8e:a5:41:da:e7:17:31:f4:9a:76:1e:f2:09:
fb:e6:06:d1:a0:5e:f3:fc:1c:51:6d:e8:f6:53:f4:
17:c7:2b:91:58:29:e1:70:85:95:51:4a:ed:ef:34:
61:03:62:d9:62:af:34:3d:7a:57:d5:23:f1:02:54:
f0:cc:77:b6:33:8e:43:7f:62:04:f5:a6:15:00:98:
6a:c5:d4:d0:7a:89:6e:12:95:46:fb:53:1e:a9:7c:
47:b8:3b:55:cc:7e:45:27:4a:96:15:a0:67:56:75:
62:f5:e3:e4:12:39:d3:83:7b:de:5b:c1:bd:4d:7a:
74:2c:91:1f:ed:74:9d:fd:29:5b:8d:07:54:3f:8e:
98:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B0:F2:B3:2D:4D:05:D5:FF:1B:14:82:61:20:A4:30:25:66:A7:59
X509v3 Authority Key Identifier:
keyid:BF:BB:7F:7B:5C:58:32:34:90:87:58:49:B8:ED:DA:49:5E:F1:7B:1B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/v7t_e1xYMjSQh1hJuO3aSV7xexs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/v7t_e1xYMjSQh1hJuO3aSV7xexs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/-rDysy1NBdX_GxSCYSCkMCVmp1k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.157.42.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:7f:a9:7f:5e:e8:de:e7:c9:d8:0e:b4:05:a9:f1:68:af:f1:
33:12:1b:35:85:52:80:f1:7f:73:58:fb:00:20:6d:6c:17:4a:
ad:ba:89:49:21:4e:dc:49:6c:da:dd:b0:a2:66:3d:4f:c5:76:
1e:d8:44:ec:f3:df:0b:c8:8f:e7:92:f7:d2:ab:6e:aa:54:00:
0d:b7:70:a7:59:21:74:73:e4:10:74:c7:e0:70:3d:9d:43:19:
da:87:0e:86:a6:c4:57:8f:23:1d:70:49:a1:65:3e:43:c1:89:
8b:b1:38:d2:cc:3e:a0:d3:6d:ed:db:31:81:a8:b7:94:d3:d0:
20:21:e7:f2:e0:7d:bf:aa:62:9e:63:d9:51:4f:72:57:86:54:
47:39:91:88:5f:fe:b4:74:82:74:c5:cb:84:a5:9b:43:53:1e:
14:d6:9c:11:59:af:05:5a:36:37:c4:d0:c9:59:11:6b:66:d6:
68:06:5f:e0:a5:56:50:72:ce:8d:b8:75:c3:0d:0c:3b:c9:17:
65:62:e8:c8:09:b9:8c:70:05:60:24:ba:59:8e:76:d3:1d:7e:
84:dc:9f:d6:18:d8:5c:e7:80:d0:9f:db:35:f2:86:ab:33:ce:
2c:ff:22:0e:27:fe:a9:2f:c6:0c:bd:78:5d:0e:1e:53:6f:b9:
56:5d:4a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org