Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ULC/ICnIKI4WdhLgkF0ExdPwtrAXFOQ.roa
File: ICnIKI4WdhLgkF0ExdPwtrAXFOQ.roa (raw, json)
Hash identifier: m1tmzPMOC5IQQrtUEdypUXbIrfenTTZQ25jZBiAUVKI=
Subject key identifier: 20:29:C8:28:8E:16:76:12:E0:90:5D:04:C5:D3:F0:B6:B0:17:14:E4
Certificate issuer: /CN=BFBB7F7B5C58323490875849B8EDDA495EF17B1B
Certificate serial: 0299
Authority key identifier: BF:BB:7F:7B:5C:58:32:34:90:87:58:49:B8:ED:DA:49:5E:F1:7B:1B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/v7t_e1xYMjSQh1hJuO3aSV7xexs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/ICnIKI4WdhLgkF0ExdPwtrAXFOQ.roa
Signing time: Thu 15 Sep 2022 02:38:03 +0000
ROA not before: Thu 15 Sep 2022 02:38:03 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18178
IP address blocks: 103.157.42.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 665 (0x299)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BFBB7F7B5C58323490875849B8EDDA495EF17B1B
Validity
Not Before: Sep 15 02:38:03 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2029C8288E167612E0905D04C5D3F0B6B01714E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:04:fd:b3:cf:aa:ee:9e:f7:2b:7f:e9:c6:17:
f1:44:85:80:cf:8c:d2:68:f4:f2:9a:ef:9e:5c:66:
c2:ff:a3:55:ea:8b:ca:29:61:ad:c0:d8:41:2e:06:
f9:a1:47:2f:d7:19:b5:d2:30:fc:ce:40:14:aa:1e:
25:09:3f:be:2b:ba:3f:39:83:42:7c:01:c8:0f:ee:
12:a6:d9:68:e8:a2:8a:22:35:77:7e:2b:7f:ae:5d:
64:55:87:0d:88:9b:77:72:10:f9:72:ca:0e:39:e3:
fe:fe:fc:0e:0c:d4:2b:e2:39:a7:de:8b:74:04:c7:
20:60:59:7d:60:00:7d:73:d1:da:39:fb:8d:e1:7e:
9a:76:af:c7:56:08:3e:42:09:87:69:23:8e:e9:37:
90:5b:d1:99:f4:e8:90:3b:f6:3a:93:61:0d:6f:13:
b0:81:82:a0:db:9e:11:7a:cb:25:3e:84:81:38:c1:
78:7f:8c:db:1d:02:49:9f:31:46:ae:29:79:59:30:
4c:bd:7b:01:b6:09:22:65:42:f1:ac:85:3d:ba:54:
8f:fe:93:dd:c9:95:4a:05:05:6c:4d:77:8b:1d:f9:
9b:82:e0:9f:0e:ac:ac:ac:62:65:72:b9:0e:d7:1a:
e8:5c:6b:bb:98:6c:cf:c7:ba:e0:53:47:66:53:6e:
0e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:29:C8:28:8E:16:76:12:E0:90:5D:04:C5:D3:F0:B6:B0:17:14:E4
X509v3 Authority Key Identifier:
keyid:BF:BB:7F:7B:5C:58:32:34:90:87:58:49:B8:ED:DA:49:5E:F1:7B:1B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/v7t_e1xYMjSQh1hJuO3aSV7xexs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/v7t_e1xYMjSQh1hJuO3aSV7xexs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/ICnIKI4WdhLgkF0ExdPwtrAXFOQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.157.42.0/23
Signature Algorithm: sha256WithRSAEncryption
c0:76:2e:5b:91:bd:97:5b:d5:04:8b:d4:cb:81:74:7f:c1:f6:
0e:0f:01:e9:34:0a:fb:fa:eb:01:96:64:53:d1:75:e5:9a:a6:
a7:6f:ea:06:98:c5:48:d3:e6:b9:84:7b:d6:07:c7:7a:02:ed:
73:ff:9b:f6:73:44:7f:7f:30:df:9c:30:72:70:c2:52:42:61:
46:61:b7:ff:a9:47:ea:99:55:1f:15:ff:87:8a:aa:a3:13:7a:
37:2b:d3:a9:f0:62:0e:80:e3:f2:34:4b:85:36:95:1b:ed:13:
2c:be:ba:f8:e5:db:19:af:f7:76:d7:e4:5f:3a:cc:02:65:10:
98:33:dc:d0:9c:bd:56:b7:e1:5e:b2:6d:cb:83:b9:bd:86:55:
b3:ba:d5:e6:93:f1:fb:59:04:1d:49:f5:21:cc:35:ca:e8:52:
89:ec:69:5c:90:40:4b:ec:51:98:a4:3b:7b:0f:df:48:54:40:
b5:b2:27:d7:eb:78:3a:db:6a:df:fc:0c:c3:02:c9:b8:87:08:
e2:e4:12:81:da:a9:74:65:d2:ce:6d:5f:de:41:3c:d7:c1:5c:
8e:17:02:85:98:8f:fd:ae:00:9d:81:3e:48:b3:db:22:bf:8a:
14:5c:2e:f7:6a:61:02:99:17:7c:f8:9d:25:58:da:dc:b4:2b:
01:6e:01:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-fra.rpki-client.org