Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EASPNET/7IYh-6CKOzgzqSs22n6_fG7gAks.roa
File: 7IYh-6CKOzgzqSs22n6_fG7gAks.roa (raw, json)
Hash identifier: AaTEU53kYbhDRH4oxFuIL54ky8tBHEJl5C9h/REyCyc=
Subject key identifier: EC:86:21:FB:A0:8A:3B:38:33:A9:2B:36:DA:7E:BF:7C:6E:E0:02:4B
Certificate issuer: /CN=552B16164C361040D88F32D36509448CF3BB9D25
Certificate serial: 08AF
Authority key identifier: 55:2B:16:16:4C:36:10:40:D8:8F:32:D3:65:09:44:8C:F3:BB:9D:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VSsWFkw2EEDYjzLTZQlEjPO7nSU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/7IYh-6CKOzgzqSs22n6_fG7gAks.roa
Signing time: Sun 07 Feb 2021 11:54:30 +0000
ROA not before: Sun 07 Feb 2021 11:54:30 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 10135
IP address blocks: 202.168.192.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2223 (0x8af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552B16164C361040D88F32D36509448CF3BB9D25
Validity
Not Before: Feb 7 11:54:30 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=EC8621FBA08A3B3833A92B36DA7EBF7C6EE0024B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ca:b7:dd:ae:57:2f:76:ee:9c:86:65:e5:9d:
5d:e3:ef:12:40:15:f8:9d:ec:7d:61:6a:a1:c1:e5:
94:72:be:f6:47:5b:f0:2c:f6:68:6a:e6:78:4b:bf:
0b:23:62:57:59:51:b1:a6:cc:9b:77:fb:c2:a2:b3:
a5:e7:9e:44:00:53:e8:e1:85:bf:6a:fe:91:fb:14:
9a:7b:60:25:32:e3:ef:de:8c:f5:a8:55:2e:6a:02:
97:a6:3f:12:0a:8d:47:6a:69:85:6f:e3:99:9e:fa:
c2:eb:67:e6:32:8c:35:fe:71:62:b6:6d:1b:3a:eb:
05:2a:93:50:24:00:21:89:41:eb:2f:d5:d1:21:c6:
59:1f:3c:6e:e4:08:78:83:0f:f1:fc:ff:6a:c1:2e:
4e:76:ed:e0:cf:b1:a9:bc:05:a7:13:c1:60:b4:63:
9a:98:57:c3:50:c3:14:cf:e0:30:d0:09:72:59:1c:
64:6e:81:59:b4:d8:e6:65:67:21:ab:1e:5b:db:78:
56:a5:bd:42:ae:1c:11:54:20:a3:71:f8:90:de:88:
2d:8c:ce:98:a8:0b:e4:b5:10:d1:09:8b:be:48:92:
57:11:bc:6a:d4:3c:a0:d6:a8:f3:39:d0:88:66:a9:
52:4e:8c:9c:45:18:72:78:5c:48:bf:e2:32:98:e1:
1e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:86:21:FB:A0:8A:3B:38:33:A9:2B:36:DA:7E:BF:7C:6E:E0:02:4B
X509v3 Authority Key Identifier:
keyid:55:2B:16:16:4C:36:10:40:D8:8F:32:D3:65:09:44:8C:F3:BB:9D:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/VSsWFkw2EEDYjzLTZQlEjPO7nSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VSsWFkw2EEDYjzLTZQlEjPO7nSU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/7IYh-6CKOzgzqSs22n6_fG7gAks.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.168.192.0/20
Signature Algorithm: sha256WithRSAEncryption
52:ca:82:70:bf:2c:d1:c6:b3:3d:f2:a2:67:20:3f:78:39:d3:
07:13:a0:73:52:32:0c:49:05:3e:a1:00:f8:dd:48:21:a4:ca:
c1:fa:4e:ae:30:53:e8:ed:78:dc:3a:d1:b8:db:26:b7:7c:d7:
99:bf:06:4e:d0:21:22:e2:a1:6d:f6:86:b6:dc:12:9e:ac:91:
7d:8d:60:bb:5d:82:f8:af:f7:83:49:0b:c4:30:ef:ef:0d:ef:
63:e2:3d:9f:05:98:2b:05:64:ab:02:fd:71:22:42:ae:04:47:
f0:93:e8:38:a5:73:f2:bd:92:3e:13:85:6b:0b:e8:16:cc:b1:
8f:c4:b6:27:07:1f:ae:e7:72:69:56:a1:e8:8d:66:43:0c:ad:
76:7f:bd:df:3f:ab:73:ea:3a:c9:d8:6b:c7:2f:5b:93:63:5a:
0e:a7:58:08:49:2d:39:5d:8e:60:d2:e9:fa:7d:16:2d:58:09:
05:5d:59:a2:1e:cf:8f:8d:66:85:f2:be:0f:f1:9d:50:4a:0c:
12:87:61:f3:8f:d7:d1:c5:35:68:7c:46:d4:00:0f:d9:95:46:
7c:8d:4f:fa:e4:76:b9:d5:f5:a1:49:46:fe:75:e2:5d:8a:60:
11:4b:8e:1d:58:1b:cc:a3:29:25:19:f3:e2:03:51:b0:62:45:
c5:73:9e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:12:46 2025 by rpki-client