Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/GwY3wrFNBo3QKzl5hQ0zzFbwwNQ.roa
File: GwY3wrFNBo3QKzl5hQ0zzFbwwNQ.roa (raw, json)
Hash identifier: 4t6Y1VOaeD0wsYzamxH7vFipCN9M9JpFNcAWB/GG5Wk=
Subject key identifier: 1B:06:37:C2:B1:4D:06:8D:D0:2B:39:79:85:0D:33:CC:56:F0:C0:D4
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0D61
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/GwY3wrFNBo3QKzl5hQ0zzFbwwNQ.roa
Signing time: Thu 15 Sep 2022 02:39:12 +0000
ROA not before: Thu 15 Sep 2022 02:39:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17408
IP address blocks: 113.21.80.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3425 (0xd61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Sep 15 02:39:12 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1B0637C2B14D068DD02B3979850D33CC56F0C0D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4c:07:02:b0:df:ed:bd:7c:a8:bb:bb:04:9e:
53:e8:c7:10:b3:16:cd:25:f2:d2:3e:77:98:e3:4a:
bb:a0:46:70:35:d7:2e:ca:c3:4e:05:9d:85:e8:34:
78:18:91:3d:8f:bb:be:54:19:6b:9d:a6:9c:a4:0d:
0e:0b:a1:c9:9d:90:52:1a:dd:81:d5:7f:cc:7e:49:
f6:9e:43:b2:64:e4:a9:4f:26:72:32:67:19:b8:27:
82:bb:2d:1f:74:35:f7:53:e7:70:b9:26:ab:ec:41:
62:19:ef:1d:6d:e4:84:48:98:71:df:81:1f:b4:60:
70:12:59:11:b3:c5:cf:21:dd:26:6a:fc:1c:cf:fe:
3b:38:c2:ee:1b:74:8f:63:0b:37:9b:55:42:c5:f6:
ed:30:37:85:15:66:57:96:60:07:9c:33:9e:ca:fb:
c8:43:9e:cb:c2:40:72:ac:16:93:1e:5c:8e:80:a2:
19:61:7f:fe:c7:68:95:c7:b0:e5:2a:a3:7e:b8:ee:
e4:a0:63:71:f1:c1:72:4a:d7:3d:ee:c3:3b:97:2e:
b0:89:46:b3:b5:32:c2:81:22:31:67:08:e3:31:38:
a4:06:dd:07:c5:95:f3:73:1f:30:3a:e2:9c:71:f4:
84:c2:6a:df:5b:63:af:70:d3:99:fa:85:d2:5a:14:
64:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:06:37:C2:B1:4D:06:8D:D0:2B:39:79:85:0D:33:CC:56:F0:C0:D4
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/GwY3wrFNBo3QKzl5hQ0zzFbwwNQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.21.80.0/21
Signature Algorithm: sha256WithRSAEncryption
07:52:11:46:87:fa:1e:1c:f8:ca:0e:af:e0:6c:54:2b:96:7a:
16:af:b1:7c:80:18:b9:d8:9b:20:86:99:8c:c0:40:c7:41:15:
69:96:3c:31:4a:df:5b:01:02:86:c0:69:3f:cd:00:a4:f7:f3:
c4:e1:ed:d4:8d:d3:53:5f:be:8a:8a:a6:6e:73:fa:0d:5e:de:
7c:f1:3d:b0:50:89:71:cf:eb:04:26:55:85:e2:58:e6:45:df:
b0:29:6e:fb:fe:30:36:b3:f2:8a:88:d8:fd:c0:eb:7e:9f:79:
69:0d:96:2b:c2:cf:cc:6e:ad:ce:e1:79:14:bc:3e:76:53:57:
3b:e3:b5:2e:98:1a:08:08:f7:0b:25:1b:57:e1:c6:bd:40:6a:
8d:1e:2a:f2:ec:fd:97:a5:db:29:d6:dc:73:b4:37:bb:40:cc:
80:3e:e1:4a:ce:28:94:05:77:5e:86:14:dd:1b:9c:61:ed:9c:
51:66:0c:6a:39:1e:bd:9b:c4:cf:7f:29:20:8e:94:45:a0:ab:
c3:fc:61:3d:bd:a2:18:69:f2:32:dc:d9:7f:3d:a4:9d:8b:f9:
d0:a4:92:25:b2:cc:54:33:90:21:49:de:80:7c:0d:88:fc:c3:
ea:77:3d:66:17:87:b6:e9:e2:ea:13:ce:54:06:22:bb:0b:aa:
33:89:a2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:20:04 2025 by rpki-client