Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UNIONISME/zBaAubw7-r8sOm0PQU3Tm0IyCtM.roa
File: zBaAubw7-r8sOm0PQU3Tm0IyCtM.roa (raw, json)
Hash identifier: C4NXlYOjLfOzmCZTprz5cRhnCxHhezTLHSgnzYEg6aE=
Subject key identifier: CC:16:80:B9:BC:3B:FA:BF:2C:3A:6D:0F:41:4D:D3:9B:42:32:0A:D3
Certificate issuer: /CN=33A80E75BA2F2B0FD4312189A7E43E4353E8D3A8
Certificate serial: 08F6
Authority key identifier: 33:A8:0E:75:BA:2F:2B:0F:D4:31:21:89:A7:E4:3E:43:53:E8:D3:A8
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/M6gOdbovKw_UMSGJp-Q-Q1Po06g.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIONISME/zBaAubw7-r8sOm0PQU3Tm0IyCtM.roa
Signing time: Wed 29 Sep 2021 02:52:43 +0000
ROA not before: Wed 29 Sep 2021 02:52:43 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18046
IP address blocks: 103.16.240.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2294 (0x8f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33A80E75BA2F2B0FD4312189A7E43E4353E8D3A8
Validity
Not Before: Sep 29 02:52:43 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=CC1680B9BC3BFABF2C3A6D0F414DD39B42320AD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2c:3c:31:f4:75:f5:e9:67:03:75:a2:95:4d:
30:5f:a6:1a:6e:e3:48:7a:4b:93:fd:42:b6:78:b3:
09:f8:ca:48:40:ec:b5:ef:7f:12:b0:af:59:16:c5:
a5:68:b1:b7:b5:38:83:39:3a:ba:07:49:83:92:ee:
59:5f:25:aa:37:75:5f:3a:1b:2b:bd:b1:fe:7b:93:
f5:7c:a8:d7:f3:fe:ea:8f:a5:8c:9d:e0:29:ec:a3:
ee:78:69:c0:17:99:de:dc:8f:9b:0b:7e:84:b1:93:
5a:af:64:64:61:e3:6a:4d:6f:a1:d3:a5:28:52:b6:
f6:84:87:70:32:30:26:dc:26:79:79:9f:fb:6a:4f:
98:6a:dd:8e:c9:b9:0f:3a:4f:c7:ea:07:89:8a:8f:
ef:9e:c8:86:8b:01:ef:22:f6:95:9d:7a:5f:57:ab:
b0:20:e8:0c:c5:f2:52:a6:48:a6:35:49:6e:ac:6d:
4a:10:57:a6:74:2a:6b:80:52:eb:84:c1:e5:d3:00:
8f:86:39:34:85:bf:5c:4c:4a:13:b3:b3:bc:46:bc:
5c:46:c0:3f:9e:f5:fb:e4:38:e1:a0:73:24:0b:db:
e7:fe:7d:6f:5a:7d:aa:83:66:db:ab:a3:65:e0:f4:
8e:7f:46:e0:0c:cc:f4:2e:9e:84:2a:45:d6:ed:bf:
2d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:16:80:B9:BC:3B:FA:BF:2C:3A:6D:0F:41:4D:D3:9B:42:32:0A:D3
X509v3 Authority Key Identifier:
keyid:33:A8:0E:75:BA:2F:2B:0F:D4:31:21:89:A7:E4:3E:43:53:E8:D3:A8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIONISME/M6gOdbovKw_UMSGJp-Q-Q1Po06g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/M6gOdbovKw_UMSGJp-Q-Q1Po06g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UNIONISME/zBaAubw7-r8sOm0PQU3Tm0IyCtM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.16.240.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:b9:79:fe:0c:4c:00:2b:35:b7:78:7a:6e:a7:aa:52:f5:fa:
a6:82:9e:fb:11:d7:6d:94:c6:17:b5:7c:d2:97:20:0e:bb:59:
1b:dd:75:5a:d4:ef:59:f2:7a:40:2f:e0:2d:85:e0:b1:8e:ed:
3d:c1:2f:d0:0a:b9:1b:46:df:bf:eb:7c:fa:32:0e:0a:b4:35:
9d:ac:e3:5d:b1:a4:1a:09:4f:db:db:bf:70:6c:cc:b5:c6:f9:
f9:cf:fd:ff:e0:d8:bf:7e:6a:92:db:12:46:22:16:74:1a:ea:
37:cc:ec:f1:2b:39:5f:72:b2:32:a0:63:48:94:87:15:93:36:
bf:e3:7c:98:aa:ae:17:c3:ae:5b:65:ca:0c:57:5a:b6:c5:6d:
a5:5d:ff:62:b9:cd:7a:dc:83:25:19:2f:64:ba:fe:7c:25:30:
ae:bc:64:89:22:c6:3d:74:45:c6:14:8f:36:e8:00:d2:e0:41:
97:7d:c6:41:d9:ad:49:bb:05:6a:6f:2b:b7:7a:02:4a:23:d4:
cf:14:28:7b:a9:92:db:30:7a:2d:5a:82:9f:0d:e0:86:7c:37:
47:e7:cc:a1:70:68:8b:7b:29:96:ec:39:ad:c2:3e:89:fc:aa:
02:c9:a0:28:30:00:2b:69:31:f9:7d:f4:7a:c6:88:f6:58:ce:
1e:58:90:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:43:47 2025 by rpki-client