Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EASPNET/Cd0fVe5mzkP4WpM_BzK2CBqjP8E.roa
File: Cd0fVe5mzkP4WpM_BzK2CBqjP8E.roa (raw, json)
Hash identifier: +aLTf0X/0YNEb8rZMdNr3kJ7itO4EpAWBJ+A/svg8wQ=
Subject key identifier: 09:DD:1F:55:EE:66:CE:43:F8:5A:93:3F:07:32:B6:08:1A:A3:3F:C1
Certificate issuer: /CN=552B16164C361040D88F32D36509448CF3BB9D25
Certificate serial: 0A41
Authority key identifier: 55:2B:16:16:4C:36:10:40:D8:8F:32:D3:65:09:44:8C:F3:BB:9D:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VSsWFkw2EEDYjzLTZQlEjPO7nSU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/Cd0fVe5mzkP4WpM_BzK2CBqjP8E.roa
Signing time: Thu 15 Sep 2022 02:50:14 +0000
ROA not before: Thu 15 Sep 2022 02:50:14 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 10135
IP address blocks: 115.85.144.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2625 (0xa41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552B16164C361040D88F32D36509448CF3BB9D25
Validity
Not Before: Sep 15 02:50:14 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=09DD1F55EE66CE43F85A933F0732B6081AA33FC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:27:00:c0:4b:d0:74:09:f5:b9:8c:00:c4:69:
8d:fa:c9:3f:3a:b9:22:96:ef:80:b4:a2:c3:59:89:
db:f6:06:bb:a1:1c:01:a7:d0:ec:ff:3e:83:ac:40:
51:1f:46:d8:f1:7a:ed:15:1e:c1:ed:5c:df:0a:ec:
6b:57:15:c1:19:79:8d:98:5a:99:61:33:29:2d:24:
28:70:d3:f5:0a:5e:3d:94:be:bf:6e:db:fb:60:0b:
1b:31:9b:0f:5c:f8:b1:41:2c:63:5f:5d:1e:f7:d2:
88:ef:73:4f:67:ca:ff:37:04:b0:28:96:9a:cc:cb:
fb:04:b6:b0:5b:85:f8:36:fd:45:5b:1e:23:db:a6:
ac:06:b4:15:28:88:aa:12:3a:84:db:1e:45:71:91:
3f:d3:c0:9d:00:3f:3c:3b:a4:77:9b:b5:47:8c:c3:
1b:79:96:ad:cb:5c:3c:e1:88:42:b4:ce:e9:5b:33:
b4:4b:44:4b:5c:cb:3c:e7:e6:96:f0:8f:f0:0a:8c:
73:99:70:a9:ba:34:4c:14:57:9e:92:68:30:07:70:
4e:cd:01:8a:30:8d:ca:9f:cb:f5:de:5f:61:6a:4d:
af:51:6d:a4:9c:0c:58:3f:6b:ad:f0:c0:53:20:73:
91:71:bf:4e:e2:e9:7e:15:c7:95:77:ad:08:99:a8:
7e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DD:1F:55:EE:66:CE:43:F8:5A:93:3F:07:32:B6:08:1A:A3:3F:C1
X509v3 Authority Key Identifier:
keyid:55:2B:16:16:4C:36:10:40:D8:8F:32:D3:65:09:44:8C:F3:BB:9D:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/VSsWFkw2EEDYjzLTZQlEjPO7nSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VSsWFkw2EEDYjzLTZQlEjPO7nSU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/Cd0fVe5mzkP4WpM_BzK2CBqjP8E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.85.144.0/20
Signature Algorithm: sha256WithRSAEncryption
3e:90:2e:9b:6c:8e:9e:6f:0c:b9:6f:42:44:39:f6:a9:82:b4:
d4:2b:bc:7b:19:1f:0d:b4:41:a8:d9:d1:8f:4f:3a:c3:67:7a:
c6:ac:23:a9:25:e5:4b:38:3f:6c:3e:31:04:46:8b:a0:11:b1:
08:44:3d:c1:96:7b:61:c3:89:25:c6:74:ac:e6:27:e2:55:d4:
ca:4e:98:e8:4d:9d:43:d2:b0:c8:60:19:e3:09:41:d6:ad:76:
52:11:a9:a1:7f:ef:5f:80:e2:48:2d:8c:f1:8e:d4:f2:c0:60:
a2:67:6b:38:51:a6:24:da:83:09:fd:b3:30:e7:b9:29:d5:cc:
cf:19:91:aa:63:44:77:72:59:e3:a0:df:82:d7:11:9e:99:40:
c6:e4:55:78:ad:f6:dc:b0:62:e5:38:71:bc:c7:57:52:a1:ef:
17:2c:4b:da:f6:32:c8:33:e5:49:49:df:71:ac:e1:52:7b:f0:
c2:50:dd:34:4d:56:f5:9d:12:55:d8:73:73:0b:27:3f:9b:cf:
d6:b1:d8:d2:cb:6a:98:2d:8f:98:89:c8:ac:a1:80:08:1f:ec:
ba:33:b7:f5:f5:54:ab:a2:6b:ef:30:5f:2a:64:94:d5:9d:7f:
98:cd:28:5f:66:79:d9:2d:e2:d3:af:b0:b8:04:43:15:47:c2:
fd:8a:0c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:30:25 2025 by rpki-client