Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/dQniQHaOzaKQS5dNX0kIiHT4VA8.roa
File: dQniQHaOzaKQS5dNX0kIiHT4VA8.roa (raw, json)
Hash identifier: IzsmwDUbz0NKpFmcyYvJiEFVvWdHxoVvgudis7nnmz8=
Subject key identifier: 75:09:E2:40:76:8E:CD:A2:90:4B:97:4D:5F:49:08:88:74:F8:54:0F
Certificate issuer: /CN=2855973672B1EED71760C0942C27FD5F7569019C
Certificate serial: 0A6F
Authority key identifier: 28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/dQniQHaOzaKQS5dNX0kIiHT4VA8.roa
Signing time: Thu 15 Sep 2022 02:49:57 +0000
ROA not before: Thu 15 Sep 2022 02:49:57 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 101.0.240.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2671 (0xa6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2855973672B1EED71760C0942C27FD5F7569019C
Validity
Not Before: Sep 15 02:49:57 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7509E240768ECDA2904B974D5F49088874F8540F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:03:5b:8f:71:e8:1d:7e:6f:98:1c:21:92:67:
ae:48:52:fa:17:51:98:e8:e2:f8:d3:7e:0b:65:31:
66:04:23:47:c2:a0:7e:5c:9a:9f:6d:c6:af:09:1e:
18:e6:84:dd:27:9a:8e:6c:7b:23:87:ac:a5:65:8d:
a0:a4:10:94:59:69:30:9f:17:6e:46:2b:bf:46:6d:
70:27:a5:f2:a2:e4:c2:4f:1e:9a:f9:cf:c1:d0:6e:
07:1b:db:78:66:65:81:b4:2c:9b:0f:63:f0:00:e0:
4d:75:b1:4d:24:a1:7e:2c:0b:ea:43:99:68:f0:b7:
67:c8:63:ae:c5:3e:9a:79:95:94:3c:7c:4d:6f:02:
8e:e0:16:23:7d:ad:64:de:86:e2:88:ec:57:ca:83:
70:de:79:80:03:c5:c7:6c:eb:b6:26:05:4f:f4:16:
73:fa:b4:4f:8f:04:d9:67:12:a9:07:29:d8:49:7b:
dc:43:a6:3c:f9:33:8f:cf:30:b8:ef:8e:37:a0:c6:
4b:b7:c5:9e:c4:23:5e:e2:93:02:b7:f4:f0:42:b2:
83:51:d1:0a:f1:c6:51:36:f9:bc:ad:97:7c:6c:91:
ef:16:fe:fe:74:03:cb:d7:18:19:df:6e:5d:f0:b5:
81:51:fe:ac:e0:32:37:f7:af:e9:e0:22:39:ce:2d:
8e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:09:E2:40:76:8E:CD:A2:90:4B:97:4D:5F:49:08:88:74:F8:54:0F
X509v3 Authority Key Identifier:
keyid:28:55:97:36:72:B1:EE:D7:17:60:C0:94:2C:27:FD:5F:75:69:01:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/KFWXNnKx7tcXYMCULCf9X3VpAZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KFWXNnKx7tcXYMCULCf9X3VpAZw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHUAN-CHAN/dQniQHaOzaKQS5dNX0kIiHT4VA8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.0.240.0/20
Signature Algorithm: sha256WithRSAEncryption
4b:3e:f4:9d:fc:53:4f:22:db:b7:5d:41:8d:9d:62:33:7a:0a:
9c:56:23:91:e7:e9:22:f7:37:73:64:96:da:05:9a:44:bc:f6:
47:00:76:d4:88:ae:62:b3:8e:0d:aa:db:42:37:50:4f:86:73:
a2:7b:af:59:6b:04:27:a9:fb:b5:3f:fa:a2:12:5f:7e:c9:25:
47:92:de:47:d9:1f:43:c7:3f:a5:44:91:f8:8d:5e:bc:45:f1:
1f:6f:ea:5c:07:86:4b:4d:cf:a9:c6:f2:56:be:63:71:08:59:
d9:6e:87:38:9b:67:51:6a:7d:85:06:d5:e5:06:9e:2e:a6:ce:
86:bd:fc:c2:d4:16:be:30:ab:ce:58:43:c0:dd:ab:96:7d:17:
43:fe:70:9a:d3:16:69:57:95:61:85:47:3b:2f:85:14:22:70:
6a:75:93:55:ca:6e:d3:4f:58:1c:9b:81:7a:00:74:d3:74:68:
d0:8b:5c:f9:0c:c3:22:0b:55:a6:38:20:6f:fa:eb:a0:2f:47:
45:93:2b:86:69:a1:11:b9:aa:3a:a4:9a:8a:1e:54:29:3e:81:
de:28:ac:51:85:b0:0c:38:c2:8a:6d:f3:a3:34:b1:d2:32:56:
4d:84:03:4b:6f:85:03:a3:27:62:50:d4:63:0d:02:1b:fa:8b:
ad:7c:fa:8d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:26:33 2025 by rpki-client