Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EASPNET/3ic_Pjsv0RMvurK4RauDo4E02kg.roa
File: 3ic_Pjsv0RMvurK4RauDo4E02kg.roa (raw, json)
Hash identifier: P5AtE1S2qVQfcXCaUneJSHB2q9CxcDlYxkPA/7zk7Tw=
Subject key identifier: DE:27:3F:3E:3B:2F:D1:13:2F:BA:B2:B8:45:AB:83:A3:81:34:DA:48
Certificate issuer: /CN=552B16164C361040D88F32D36509448CF3BB9D25
Certificate serial: 08B3
Authority key identifier: 55:2B:16:16:4C:36:10:40:D8:8F:32:D3:65:09:44:8C:F3:BB:9D:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VSsWFkw2EEDYjzLTZQlEjPO7nSU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/3ic_Pjsv0RMvurK4RauDo4E02kg.roa
Signing time: Sun 07 Feb 2021 11:54:33 +0000
ROA not before: Sun 07 Feb 2021 11:54:33 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 10135
IP address blocks: 115.85.144.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2227 (0x8b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552B16164C361040D88F32D36509448CF3BB9D25
Validity
Not Before: Feb 7 11:54:33 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=DE273F3E3B2FD1132FBAB2B845AB83A38134DA48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e8:5a:a5:46:7a:a3:40:27:d9:61:30:e0:0c:
1c:96:e6:ba:ee:56:14:64:df:2e:b7:be:35:e4:e6:
4c:6c:d6:7b:ef:85:0b:73:10:be:2f:33:f5:03:63:
47:e6:fa:2f:72:0f:4b:f0:04:8f:a2:1d:86:f4:ca:
02:b3:ee:41:28:49:32:67:49:af:40:b5:8f:a7:9a:
d3:d9:29:dd:84:c2:c8:39:31:70:e4:fe:c8:a4:32:
be:0b:c8:45:f6:1c:3d:25:76:35:ab:46:4f:2f:0f:
40:27:88:e4:9b:53:bb:96:7a:54:0b:9c:7f:5e:3b:
37:0a:8c:56:9e:35:2b:27:da:4f:6f:96:01:37:cc:
f4:2d:84:81:f5:b6:14:a2:d7:b6:9b:37:55:1d:dd:
b4:2a:ed:1e:71:30:8f:e5:b3:d0:63:dd:24:ed:e6:
e1:09:98:d4:c6:2c:85:48:cc:c4:df:97:73:73:ad:
41:2c:ad:76:41:f8:0a:06:76:38:1f:f8:89:b0:93:
99:76:92:18:a0:bb:a3:c3:c2:17:2f:31:70:0c:2d:
4b:e9:d6:6d:5f:9d:98:22:14:00:1f:23:a1:94:38:
c1:69:3a:c5:5c:ef:d3:92:c7:57:ef:53:c8:cd:35:
24:31:20:cd:50:37:66:b3:cd:a1:26:5f:3a:7a:af:
cf:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:27:3F:3E:3B:2F:D1:13:2F:BA:B2:B8:45:AB:83:A3:81:34:DA:48
X509v3 Authority Key Identifier:
keyid:55:2B:16:16:4C:36:10:40:D8:8F:32:D3:65:09:44:8C:F3:BB:9D:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/VSsWFkw2EEDYjzLTZQlEjPO7nSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VSsWFkw2EEDYjzLTZQlEjPO7nSU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/3ic_Pjsv0RMvurK4RauDo4E02kg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.85.144.0/20
Signature Algorithm: sha256WithRSAEncryption
15:77:3f:da:88:2c:00:32:fa:d4:81:89:68:e1:33:2e:f2:41:
d2:9b:2c:c3:1f:a1:de:ca:75:50:83:21:30:70:ef:6b:bc:3c:
70:3e:66:54:55:d7:55:a1:ad:47:14:ed:ec:5f:58:be:b6:5e:
18:28:c1:5d:9c:1b:ce:84:04:19:d7:06:44:29:22:67:01:8a:
29:2b:a8:19:2e:82:95:86:26:81:c3:32:43:b3:06:45:0d:71:
0c:c4:5f:87:d5:62:98:01:bf:93:30:dc:ea:7b:5a:dd:74:1e:
63:77:b1:9d:47:49:71:7b:dc:c2:a9:9d:c6:09:58:c7:53:18:
d5:1e:7c:1b:9e:a4:03:20:0d:9d:f5:02:96:92:a3:40:6d:6c:
f8:26:dd:7c:c3:71:fb:3b:33:2f:d3:bc:b5:16:91:e5:d6:fe:
5d:6b:21:80:10:c5:53:72:9a:b2:c4:c2:4d:bf:6c:0d:10:76:
91:dc:41:e5:9a:d8:3c:9d:63:e1:67:d2:dd:f2:42:6e:32:fc:
ab:e0:ad:c3:75:9e:ad:68:4e:1e:b4:97:ac:30:53:14:f9:f2:
18:3e:83:ad:2f:9d:46:88:29:73:a9:c2:06:53:02:40:c5:5c:
af:5c:a2:2a:7f:a4:6e:fb:55:3b:bb:76:53:94:1a:9d:c2:89:
07:e7:6f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:27:55 2025 by rpki-client