Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/RdnXmbHp2-FVLOSfe6PcONYoStE.roa
File: RdnXmbHp2-FVLOSfe6PcONYoStE.roa (raw, json)
Hash identifier: Nr3ZZGouyE/2YsOGzLitudbebF3xlgg7aqaXx5vfOTM=
Subject key identifier: 45:D9:D7:99:B1:E9:DB:E1:55:2C:E4:9F:7B:A3:DC:38:D6:28:4A:D1
Certificate issuer: /CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
Certificate serial: 0778
Authority key identifier: 6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/RdnXmbHp2-FVLOSfe6PcONYoStE.roa
Signing time: Tue 29 Sep 2020 10:00:15 +0000
ROA not before: Tue 29 Sep 2020 10:00:15 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4780
IP address blocks: 61.58.48.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1912 (0x778)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6FDEA34707152290C1D2606FFBFC69B927D40A5B
Validity
Not Before: Sep 29 10:00:15 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=45D9D799B1E9DBE1552CE49F7BA3DC38D6284AD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f8:27:e4:dd:b8:45:21:aa:a0:64:24:f9:93:
26:8d:d9:88:0d:2c:ac:96:da:ba:d2:95:c6:61:67:
73:d2:55:2d:df:fc:6c:0e:ba:6a:e2:44:e8:25:7b:
b9:db:8f:01:ae:cd:62:08:c3:26:90:8a:51:7c:8d:
d0:b9:08:05:cc:a8:09:62:7f:2f:18:ea:a2:b4:a7:
1c:50:a2:34:44:28:82:e9:36:8e:6f:c6:bd:85:4b:
c3:cc:88:3c:d1:cd:25:19:3c:2a:9f:3e:09:80:ce:
e7:f8:0a:b9:f9:8a:3a:cc:c4:a6:6c:11:59:a1:12:
ac:be:2d:4d:10:c2:34:a2:47:a8:a9:2a:2a:4e:25:
b4:9c:35:3a:c1:aa:90:8c:86:e6:fe:a3:03:ad:c6:
22:0d:2a:ca:04:21:bc:03:97:96:32:d8:1f:a4:43:
74:fb:27:ae:6b:3d:48:c5:5c:01:92:be:11:0c:23:
a7:30:af:33:14:21:b5:60:98:6b:69:ad:cc:cb:5a:
97:53:c4:04:84:af:34:33:06:de:91:5f:44:ec:bb:
25:5e:eb:94:4e:09:06:e1:93:10:4d:d8:60:d9:29:
31:cd:10:ca:df:07:7b:d8:d2:51:6f:bb:fd:0b:1e:
58:4f:61:5e:5c:2a:51:10:3e:cb:e1:af:08:96:f2:
82:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D9:D7:99:B1:E9:DB:E1:55:2C:E4:9F:7B:A3:DC:38:D6:28:4A:D1
X509v3 Authority Key Identifier:
keyid:6F:DE:A3:47:07:15:22:90:C1:D2:60:6F:FB:FC:69:B9:27:D4:0A:5B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/b96jRwcVIpDB0mBv-_xpuSfUCls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/b96jRwcVIpDB0mBv-_xpuSfUCls.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CYCCATV/RdnXmbHp2-FVLOSfe6PcONYoStE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.48.0/20
Signature Algorithm: sha256WithRSAEncryption
6f:d9:3e:34:6c:f3:3d:4a:19:89:a9:27:e3:5f:0e:0c:a1:aa:
84:71:fb:3b:93:ea:5d:43:2e:be:38:c2:41:90:cc:5c:2e:85:
c1:b2:37:bb:36:1e:7e:e4:56:df:a2:d8:c9:a3:34:d4:ca:ff:
1a:e7:a9:f0:ac:5b:8d:5f:0c:63:bb:ff:6d:ab:5c:10:b3:82:
53:c1:6e:a8:09:86:5d:de:fc:72:d5:95:51:fe:b9:a2:cc:c3:
18:22:44:b6:0e:0c:bb:f5:6c:1c:4e:e0:f8:43:46:21:3b:4c:
16:bd:71:8b:61:64:f6:7a:48:70:5b:02:15:bf:3e:de:2d:2a:
58:9e:2b:0c:82:e3:97:54:c1:b0:34:0f:5b:07:0f:e9:66:7c:
67:b1:9f:f6:1a:f9:59:b1:da:22:09:3b:36:ea:89:b0:9a:10:
93:8c:3a:de:16:92:fd:79:c7:be:5b:dc:13:2e:39:e8:60:53:
bc:24:12:bb:54:18:3a:f9:26:1f:54:ac:f4:63:d7:88:01:98:
43:cd:76:d7:6d:db:2e:e7:c8:30:a9:bf:5d:3a:13:f9:db:85:
cc:0e:11:24:52:77:40:e6:cf:cb:7d:4f:da:ab:9a:41:b7:90:
c3:4a:73:32:12:03:ff:5a:32:19:5c:5a:36:e7:89:ad:17:3e:
e3:7b:ad:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:37:28 2025 by rpki-client