Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/N5t2EPG8xE5Iybs3L-75LhQxS3A.roa
File: N5t2EPG8xE5Iybs3L-75LhQxS3A.roa (raw, json)
Hash identifier: BWl2ZLArbDPJrUmUzexBf9XIXRQaDx4xu9PWWCNoiDo=
Subject key identifier: 37:9B:76:10:F1:BC:C4:4E:48:C9:BB:37:2F:EE:F9:2E:14:31:4B:70
Certificate issuer: /CN=CA1B71EFAC6F6AA43027609C18A734982764554B
Certificate serial: 0B2D
Authority key identifier: CA:1B:71:EF:AC:6F:6A:A4:30:27:60:9C:18:A7:34:98:27:64:55:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/yhtx76xvaqQwJ2CcGKc0mCdkVUs.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/N5t2EPG8xE5Iybs3L-75LhQxS3A.roa
Signing time: Wed 29 Sep 2021 02:56:06 +0000
ROA not before: Wed 29 Sep 2021 02:56:06 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 17408
IP address blocks: 103.138.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2861 (0xb2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA1B71EFAC6F6AA43027609C18A734982764554B
Validity
Not Before: Sep 29 02:56:06 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=379B7610F1BCC44E48C9BB372FEEF92E14314B70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:dc:b4:46:49:e5:b8:bd:fa:86:59:11:8c:5f:
54:2c:54:75:ab:89:ed:d9:fe:b1:4d:40:11:df:be:
cd:df:44:c3:8c:1c:93:ed:57:aa:36:af:cc:04:67:
41:10:b6:50:b7:54:6f:08:c9:07:42:3b:5f:8b:37:
10:27:50:ef:10:1e:bc:e4:bd:3d:8a:6a:7b:2c:ba:
7e:5f:a2:20:29:d2:76:3b:d6:23:f5:3b:1d:b5:5a:
dc:83:f9:d9:ed:52:c8:ae:69:a1:ce:e3:e6:6f:0e:
d0:86:01:2f:1a:a1:ac:d6:2e:ef:4c:94:03:b3:0d:
0e:c2:b1:e9:bf:8b:b3:3b:46:19:ae:9c:3f:fb:4e:
9f:ea:6d:ef:88:ae:df:10:1f:16:35:69:ad:b6:38:
d4:30:45:f2:6c:f3:5a:58:2f:ab:7e:5d:ee:80:92:
53:47:eb:66:28:b9:b0:51:3e:1a:05:e9:a2:67:c5:
d8:c5:2c:8d:0a:94:1c:5b:47:f4:0e:4a:76:8e:7c:
5e:3f:90:2c:38:5c:16:f3:a4:5a:de:45:17:61:b8:
4e:f2:db:c9:89:4b:c2:c5:4b:9c:b6:95:7b:80:a9:
86:f4:a3:62:fb:fc:e9:aa:54:03:98:44:31:cc:54:
f8:e8:3b:14:75:13:93:7a:83:fb:11:7f:82:7e:93:
cb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:9B:76:10:F1:BC:C4:4E:48:C9:BB:37:2F:EE:F9:2E:14:31:4B:70
X509v3 Authority Key Identifier:
keyid:CA:1B:71:EF:AC:6F:6A:A4:30:27:60:9C:18:A7:34:98:27:64:55:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/yhtx76xvaqQwJ2CcGKc0mCdkVUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/yhtx76xvaqQwJ2CcGKc0mCdkVUs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WANTEASY/N5t2EPG8xE5Iybs3L-75LhQxS3A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.107.0/24
Signature Algorithm: sha256WithRSAEncryption
90:b9:2d:0c:98:df:80:bf:81:fe:8e:da:3f:31:0b:21:40:31:
43:44:c6:97:2c:5f:38:b5:52:ce:11:66:10:b1:37:ca:19:62:
e9:63:98:ba:f7:22:fc:25:19:d3:de:bc:98:39:61:1f:6a:c4:
4b:7a:50:5a:78:42:40:84:ff:e4:8c:6d:60:51:0d:ba:0e:a5:
25:77:ca:ed:e6:42:74:95:3e:35:b0:f5:a7:cb:b0:64:3c:9c:
c1:c1:6e:c7:9e:0b:ab:a5:57:ad:cc:39:12:30:50:54:f3:68:
49:1b:cc:d1:a6:91:fd:e3:ef:63:7f:fd:3d:b5:f1:12:7e:61:
bc:01:03:ee:5e:d3:bf:17:4d:5f:42:db:5d:68:97:f8:af:7a:
b1:aa:b7:e0:bc:81:3a:74:41:2f:e6:f1:2d:dc:55:e8:d8:9c:
11:09:29:4d:45:89:21:49:16:12:13:29:8e:f6:f6:0c:99:92:
af:c8:7c:e7:99:45:17:36:2a:ce:f4:ce:12:43:e0:b6:b2:07:
87:51:83:c1:e3:fe:bc:47:18:83:1f:83:68:87:63:f2:93:3a:
58:9c:65:f9:6d:48:a6:83:06:6e:0e:a7:ba:91:ea:1d:bd:a5:
4e:1b:58:3c:ac:d9:5e:ee:8c:37:68:64:c1:37:68:39:29:12:
9b:5c:36:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:23:42 2025 by rpki-client