Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/-0hHPP-BWbHkh7dWJrp4yBzfXCo.roa
File: -0hHPP-BWbHkh7dWJrp4yBzfXCo.roa (raw, json)
Hash identifier: DiKYdSQzmHExxoXcWYeTAVnq0Hprsxk+9nQ8AQl1g/k=
Subject key identifier: FB:48:47:3C:FF:81:59:B1:E4:87:B7:56:26:BA:78:C8:1C:DF:5C:2A
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 08E0
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/-0hHPP-BWbHkh7dWJrp4yBzfXCo.roa
Signing time: Sun 07 Feb 2021 05:54:39 +0000
ROA not before: Sun 07 Feb 2021 05:54:39 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9674
IP address blocks: 210.241.192.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2272 (0x8e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Feb 7 05:54:39 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=FB48473CFF8159B1E487B75626BA78C81CDF5C2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:02:4f:16:87:06:09:e7:56:ba:08:cf:31:1a:
ab:20:1b:e5:bc:22:c6:f8:95:15:81:a2:02:b4:53:
c0:a4:8c:c6:22:aa:be:d3:5a:a4:95:0f:0a:b2:74:
c5:39:78:3a:bd:2f:31:d6:8f:58:44:d3:6e:8e:37:
2c:bf:f6:b6:5c:89:ff:40:31:f6:a5:29:17:3c:33:
4e:c6:d7:fa:27:22:71:b1:5e:58:ea:7f:66:59:9e:
21:ac:6c:a2:f1:6d:ad:42:03:bf:49:71:58:8f:d2:
fd:67:38:a3:31:ed:c4:a8:1b:5f:e7:66:40:b5:fa:
84:50:3e:98:c7:a6:e7:2d:3d:49:e1:2f:ab:11:48:
f5:f6:ae:a2:e6:d0:bb:57:12:2a:f0:d8:74:dd:81:
2c:00:5c:4e:a6:a5:29:dd:03:9b:eb:be:21:53:30:
dd:6b:07:28:4f:73:5f:f8:1d:bf:6f:04:0d:49:0f:
9d:ef:f3:b9:e4:f6:f4:94:ba:d1:7b:cc:7f:db:5e:
c7:d5:4a:c0:b1:bc:41:e2:12:4f:40:74:64:00:04:
cc:5a:23:1a:6a:4c:e5:85:c6:ea:84:07:bc:6f:c8:
81:56:74:27:ca:b3:01:54:7b:54:8a:9f:18:1e:6a:
39:34:1a:e3:0d:59:97:9f:8b:68:49:13:ff:d8:5f:
59:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:48:47:3C:FF:81:59:B1:E4:87:B7:56:26:BA:78:C8:1C:DF:5C:2A
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/-0hHPP-BWbHkh7dWJrp4yBzfXCo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.241.192.0/19
Signature Algorithm: sha256WithRSAEncryption
c0:5d:ef:3a:20:f6:d9:58:a0:0f:b5:11:68:29:8b:38:1e:20:
3c:88:e2:75:e1:1a:c1:9f:bc:7d:a0:18:14:df:7a:98:f4:6b:
ec:09:44:b3:95:0d:23:dc:94:1a:47:bc:b6:40:22:17:7b:29:
24:f4:e9:be:da:c5:92:78:12:05:3c:da:9d:51:ee:8f:1f:55:
d7:66:c8:5f:ba:c2:c4:e8:88:1f:a1:dd:fe:56:c8:fb:99:f2:
4a:6b:06:59:eb:95:10:50:c9:6a:d6:e5:d7:b6:ad:6f:73:42:
c3:24:ce:6e:e8:31:59:30:61:64:25:c6:10:8c:58:ff:0b:ed:
6c:bb:f7:a7:18:f4:ec:5f:df:6e:a2:a3:ea:cb:02:4d:ca:ad:
1b:a9:c0:00:16:86:37:71:e7:6f:7a:cc:e7:3a:96:ef:a0:3b:
3e:66:35:dd:c9:5f:55:b2:b5:07:89:97:ae:e3:81:3a:27:56:
e2:af:63:db:83:d2:fe:4a:f4:1a:8e:06:b8:99:4b:86:d2:ce:
88:56:47:8c:0d:8a:33:3c:50:22:eb:69:5c:a7:9b:24:cb:8a:
55:58:a8:48:0e:03:54:9a:9d:38:ba:97:6f:cf:31:f5:49:0a:
ba:f7:33:c4:52:8a:4c:ab:19:83:1b:99:36:07:88:8e:90:27:
70:d3:49:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:01:25 2025 by rpki-client