Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EASPNET/S05X8v5gAsRVAtTel5_ilbaKOTM.roa
File: S05X8v5gAsRVAtTel5_ilbaKOTM.roa (raw, json)
Hash identifier: z92RjRHrYyDcWtvTDchxqyxeDBpTvaQO/UDqZIYtslk=
Subject key identifier: 4B:4E:57:F2:FE:60:02:C4:55:02:D4:DE:97:9F:E2:95:B6:8A:39:33
Certificate issuer: /CN=552B16164C361040D88F32D36509448CF3BB9D25
Certificate serial: 0A41
Authority key identifier: 55:2B:16:16:4C:36:10:40:D8:8F:32:D3:65:09:44:8C:F3:BB:9D:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VSsWFkw2EEDYjzLTZQlEjPO7nSU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/S05X8v5gAsRVAtTel5_ilbaKOTM.roa
Signing time: Thu 15 Sep 2022 02:50:14 +0000
ROA not before: Thu 15 Sep 2022 02:50:14 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 10135
IP address blocks: 61.64.48.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2625 (0xa41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552B16164C361040D88F32D36509448CF3BB9D25
Validity
Not Before: Sep 15 02:50:14 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4B4E57F2FE6002C45502D4DE979FE295B68A3933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4a:c6:b5:fd:79:9a:5a:71:fd:0f:63:4f:f7:
67:2d:e3:9d:ee:4a:2d:30:88:ab:1e:42:82:69:84:
aa:d7:ff:6f:5e:fc:69:fd:13:9c:82:13:d6:70:d7:
f9:3a:e2:19:b2:58:4a:3c:24:6b:cc:83:c0:b3:87:
12:17:1f:4c:d6:ba:76:da:25:f9:3b:f7:6e:fd:f9:
43:50:d9:a5:65:c6:80:5a:d0:23:1a:c8:f4:68:d3:
15:90:f8:d1:bc:fd:53:4a:24:3c:cb:be:ef:91:78:
4d:9a:e4:39:b7:e2:57:ed:3d:0a:c9:a9:6a:57:c6:
ad:bf:2b:4d:54:8b:8e:5b:f3:80:fa:71:f6:de:99:
a6:b3:c6:02:fa:b8:54:d1:f5:04:40:76:30:26:bf:
cf:ef:57:17:37:2b:cf:61:1b:d9:06:a9:a1:34:42:
d9:65:e9:b5:99:04:e2:6e:82:86:3d:ef:1e:d5:25:
9d:64:a2:19:d2:d5:41:73:60:0f:fe:bd:f8:a9:2e:
cd:21:e8:60:4f:76:8e:ae:67:72:4f:61:ef:62:39:
bf:0b:07:93:fd:36:5c:b3:a5:3a:cc:d4:1d:7e:e6:
1d:43:81:a8:c1:38:a3:32:7b:17:80:ba:6c:43:d3:
1f:37:6e:d4:b0:ab:4c:97:39:c4:78:fb:ad:dc:e9:
0a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4E:57:F2:FE:60:02:C4:55:02:D4:DE:97:9F:E2:95:B6:8A:39:33
X509v3 Authority Key Identifier:
keyid:55:2B:16:16:4C:36:10:40:D8:8F:32:D3:65:09:44:8C:F3:BB:9D:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/VSsWFkw2EEDYjzLTZQlEjPO7nSU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VSsWFkw2EEDYjzLTZQlEjPO7nSU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EASPNET/S05X8v5gAsRVAtTel5_ilbaKOTM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.64.48.0/20
Signature Algorithm: sha256WithRSAEncryption
73:d0:e1:bd:80:3e:22:b2:ca:ea:09:f6:46:a7:fe:12:97:26:
7a:ec:7a:27:8c:ae:9b:92:23:b3:65:a6:9f:0c:d3:99:82:12:
e9:a5:67:bb:71:f3:2c:ff:de:89:67:c7:21:1c:a1:c3:2d:f1:
c2:a6:f8:18:ad:45:42:92:7d:24:3f:da:23:61:e8:c3:4b:27:
66:93:df:20:bc:9f:93:88:96:78:71:13:49:3b:89:5c:a1:6e:
3d:07:fc:83:ca:ba:d2:50:42:d4:9d:fc:63:01:ac:0a:55:93:
ae:f5:e8:44:46:b4:70:22:79:e3:f7:91:48:9d:df:e1:09:ce:
e0:02:97:e1:85:3b:4f:75:9a:f3:26:0c:4f:78:3d:9b:3e:46:
f1:87:1c:92:85:79:a1:71:e8:b8:44:b1:6d:cb:0f:4b:9b:86:
70:ea:15:e0:80:f1:54:55:ea:66:ca:90:fc:bb:45:67:b3:5c:
a9:e3:64:70:4a:73:bc:79:31:39:93:5c:f1:82:08:f0:32:b6:
19:79:8e:e1:b8:bf:0d:65:1f:8d:35:ad:9f:d8:66:6a:56:98:
9e:b1:82:ff:d9:3f:d9:55:23:31:72:da:e0:41:c6:dd:38:38:
61:52:65:51:3b:03:6a:37:3b:52:4f:41:4c:62:da:33:96:e4:
9a:78:a6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:22:32 2025 by rpki-client