Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WANIN/AvS17flLFPJ0gBSYawCTIldFmqo.roa
File: AvS17flLFPJ0gBSYawCTIldFmqo.roa (raw, json)
Hash identifier: Hup6u0IR8Nzy4KO7qNhSv5cAC7NzNVuIQqtgqt5BZwg=
Subject key identifier: 02:F4:B5:ED:F9:4B:14:F2:74:80:14:98:6B:00:93:22:57:45:9A:AA
Certificate issuer: /CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D
Certificate serial: 10AD
Authority key identifier: C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/AvS17flLFPJ0gBSYawCTIldFmqo.roa
Signing time: Thu 15 Sep 2022 02:49:16 +0000
ROA not before: Thu 15 Sep 2022 02:49:16 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131636
IP address blocks: 103.130.126.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4269 (0x10ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C0D2C8C3D4C2FBBA24D3D83508AB142F2D49427D
Validity
Not Before: Sep 15 02:49:16 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=02F4B5EDF94B14F2748014986B00932257459AAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:72:07:cc:91:67:fd:25:1b:9d:0e:c3:8c:cc:
6f:30:74:bd:a8:18:96:af:bc:d8:c0:9f:d7:81:e0:
e5:67:38:32:9a:5d:14:58:75:f6:0b:f9:8b:5e:3e:
ee:25:38:e7:bc:68:af:54:ca:ee:1d:54:2a:61:df:
74:90:e9:df:ab:80:a3:9e:00:61:99:09:70:7f:9c:
75:1e:00:49:bd:42:3a:8e:80:af:60:2c:9f:5e:77:
6d:da:25:60:4e:10:0b:66:68:0e:10:19:b5:34:9d:
87:ca:2b:e5:0a:d9:1b:1f:e1:58:49:db:54:73:0e:
4d:76:cd:e6:fd:7a:d6:f4:8d:53:42:9b:46:0f:e8:
a3:f9:ac:fc:1f:bf:cf:aa:a0:d6:e8:63:42:e7:d1:
79:ab:7d:12:7f:5d:6f:56:a6:e1:a4:bc:a8:a3:14:
63:f6:9a:c7:59:60:5a:65:75:e1:bc:41:6d:68:9b:
98:ea:23:4e:64:c7:81:4d:d4:d5:74:3a:50:18:3e:
b4:80:10:f8:2c:1d:9a:f9:8d:65:8d:5c:fe:fa:30:
d9:e3:58:b0:d3:d1:e2:1b:11:c1:c0:d2:3d:4b:49:
5d:70:84:74:88:bf:8e:43:26:44:bf:37:8b:77:6a:
c1:39:2d:72:78:ac:cd:c9:10:9c:47:d4:f9:0e:4f:
6d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F4:B5:ED:F9:4B:14:F2:74:80:14:98:6B:00:93:22:57:45:9A:AA
X509v3 Authority Key Identifier:
keyid:C0:D2:C8:C3:D4:C2:FB:BA:24:D3:D8:35:08:AB:14:2F:2D:49:42:7D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/wNLIw9TC-7ok09g1CKsULy1JQn0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wNLIw9TC-7ok09g1CKsULy1JQn0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANIN/AvS17flLFPJ0gBSYawCTIldFmqo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.126.0/24
Signature Algorithm: sha256WithRSAEncryption
96:c7:92:28:44:2f:a9:14:d4:71:30:ba:5a:78:14:92:16:4e:
ff:1c:20:e4:10:fa:ee:44:47:a5:69:9f:a3:a4:59:0b:d7:79:
77:32:14:05:40:c1:0d:d3:76:80:1c:0e:db:52:8f:91:56:9b:
2a:a9:1b:0f:8c:09:fb:15:56:38:22:7d:58:c2:32:a1:31:f3:
6c:c5:ef:4f:78:e4:cc:e6:05:17:3d:44:a6:03:06:37:a8:27:
4f:f9:cb:d3:9a:b9:54:a0:f0:ca:7e:12:6b:fa:f3:9c:d2:57:
3b:8d:e8:eb:8e:f2:20:e8:9e:4f:6c:1e:c7:c1:43:c6:59:38:
68:db:fb:5f:1a:fd:f5:68:18:73:1c:a7:00:69:5b:6d:4e:e1:
3f:f9:25:13:ef:0c:b9:ca:2d:46:33:56:db:72:ad:6f:b6:2c:
38:c2:fb:24:45:fa:4b:61:28:fa:86:cd:75:91:96:25:4d:99:
da:45:fb:6c:ca:06:a7:1b:49:bc:21:32:c3:68:66:80:a8:5b:
ef:e3:28:f7:c2:db:19:6e:ae:aa:fa:c6:ee:35:40:e4:6b:94:
83:87:54:f3:19:b1:8a:85:7b:6a:d7:f5:44:ca:c9:2e:7b:88:
68:59:d2:d5:cb:25:0b:3c:6e:9a:2c:81:3c:f1:d5:b4:fe:9f:
c6:18:41:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:51 2024 by rpki-client on console-ams.rpki-client.org