Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ULC/izIsQgUCedhgcDYAUsAnUakI548.roa
File: izIsQgUCedhgcDYAUsAnUakI548.roa (raw, json)
Hash identifier: 5P8J68grvT/5eUzCd1BHTlVILcYEQS3rJPn/qf3LrFw=
Subject key identifier: 8B:32:2C:42:05:02:79:D8:60:70:36:00:52:C0:27:51:A9:08:E7:8F
Certificate issuer: /CN=BFBB7F7B5C58323490875849B8EDDA495EF17B1B
Certificate serial: 0299
Authority key identifier: BF:BB:7F:7B:5C:58:32:34:90:87:58:49:B8:ED:DA:49:5E:F1:7B:1B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/v7t_e1xYMjSQh1hJuO3aSV7xexs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/izIsQgUCedhgcDYAUsAnUakI548.roa
Signing time: Thu 15 Sep 2022 02:38:04 +0000
ROA not before: Thu 15 Sep 2022 02:38:04 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 134823
IP address blocks: 103.157.42.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 665 (0x299)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BFBB7F7B5C58323490875849B8EDDA495EF17B1B
Validity
Not Before: Sep 15 02:38:04 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8B322C42050279D86070360052C02751A908E78F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:98:f3:9e:7b:a9:f7:23:3c:81:84:17:db:c1:
53:ef:a5:c8:02:19:cd:84:a4:86:7e:38:93:56:b8:
1f:ff:0d:42:15:95:ab:2d:29:74:09:f7:8d:76:e2:
35:eb:17:5e:c9:fb:e3:1c:a3:d6:83:28:47:9b:01:
ba:17:f0:de:9b:eb:d9:1f:ff:51:a4:99:9d:f0:32:
5e:db:da:69:29:02:25:25:f1:5a:07:4e:72:11:c5:
bd:03:cd:78:e7:f1:2f:44:c3:4a:56:3a:50:31:29:
f9:65:3c:16:23:78:49:be:0b:24:dc:01:41:02:b1:
25:de:1b:3b:0b:ff:d5:26:40:c2:50:50:f2:bc:7b:
4a:4d:8e:c5:e0:a3:9c:7c:6e:f5:06:fb:cd:0a:4c:
f9:c8:9e:62:70:30:bd:27:87:e9:40:20:2e:26:db:
15:1e:a1:66:5e:f1:c8:44:c8:5d:96:34:05:b6:58:
10:49:15:f0:82:d9:ff:39:3d:41:49:1a:db:21:41:
fa:0d:79:89:70:5e:f8:3c:7d:df:da:39:ae:53:5f:
06:08:05:1a:41:14:00:80:de:d6:a8:ea:11:33:b5:
76:50:4e:6a:39:4e:37:59:7e:7c:17:e6:02:ab:68:
24:f7:38:52:d6:52:1b:24:66:84:40:44:01:d5:9f:
ac:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:32:2C:42:05:02:79:D8:60:70:36:00:52:C0:27:51:A9:08:E7:8F
X509v3 Authority Key Identifier:
keyid:BF:BB:7F:7B:5C:58:32:34:90:87:58:49:B8:ED:DA:49:5E:F1:7B:1B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/v7t_e1xYMjSQh1hJuO3aSV7xexs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/v7t_e1xYMjSQh1hJuO3aSV7xexs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ULC/izIsQgUCedhgcDYAUsAnUakI548.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.157.42.0/23
Signature Algorithm: sha256WithRSAEncryption
41:14:99:8c:92:20:29:e4:14:30:79:3a:b8:24:ee:28:ce:4d:
13:f2:5f:4e:68:a6:16:d7:c8:5d:6f:e1:28:af:0f:dc:f0:c0:
70:07:3f:b3:9a:dd:ca:1b:1f:ad:df:af:95:c6:c8:46:c4:c5:
08:63:4e:85:56:98:b4:10:55:ad:b6:97:8f:8a:c1:ef:7e:bc:
5b:b2:e7:e5:26:c2:5f:31:b1:0a:e0:86:51:77:32:62:e6:4b:
2a:cb:33:27:e6:3d:d4:02:24:5d:14:b2:81:e6:44:a0:97:d5:
45:94:89:08:b7:ab:71:19:b2:6a:cc:6e:e0:47:64:fa:2e:9b:
d1:7a:7f:79:07:bd:79:ab:e8:e5:5d:25:99:a2:c0:58:8d:bc:
91:4e:20:e8:c2:23:95:1d:3e:39:e1:7f:48:50:da:f7:cc:16:
6b:74:9e:9b:dd:cb:f9:76:25:e8:91:50:2b:d0:1f:b0:5b:33:
06:29:8a:d1:5f:84:ab:da:0e:3c:18:c9:cb:02:40:f3:30:ea:
ac:68:be:70:d2:16:49:eb:5c:cb:8e:9b:26:08:55:fc:b7:3a:
de:79:32:54:ce:79:7d:da:18:f3:c2:ed:96:76:ea:c9:50:b0:
43:00:93:0b:3d:c6:03:32:5a:86:65:45:e0:e1:82:44:11:7d:
13:0c:6a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:23:02 2025 by rpki-client