Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/7xGD3jwHdiuWvfa0Fo7ueyoZjc0.roa
File: 7xGD3jwHdiuWvfa0Fo7ueyoZjc0.roa (raw, json)
Hash identifier: nhONAJi5Neh9RPEZD9a/QsmKKzt6o3TnVlnAoI3/Gzk=
Subject key identifier: EF:11:83:DE:3C:07:76:2B:96:BD:F6:B4:16:8E:EE:7B:2A:19:8D:CD
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0C9C
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/7xGD3jwHdiuWvfa0Fo7ueyoZjc0.roa
Signing time: Mon 15 Jan 2024 21:10:19 +0000
ROA not before: Mon 15 Jan 2024 21:10:19 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9311
IP address blocks: 210.201.60.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3228 (0xc9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:10:19 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=EF1183DE3C07762B96BDF6B4168EEE7B2A198DCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b8:91:68:e8:95:25:04:07:65:4b:f9:23:48:
9a:1c:87:05:d4:0f:9f:dd:89:7d:fa:ed:0e:5e:24:
3a:d0:e2:62:dc:4a:42:e1:79:a9:91:af:8d:54:74:
8d:31:1d:39:ee:c2:12:da:2e:ad:e9:01:be:7c:6e:
4a:44:a5:8d:a2:77:7d:aa:01:7b:94:e8:7f:95:4f:
1f:ee:a0:bb:d8:70:8f:68:2f:0f:49:12:f5:df:fb:
58:a2:d3:52:65:05:1c:3f:7b:3b:ac:6d:c2:b3:f1:
24:bf:70:86:08:1d:97:ca:2d:16:67:a8:49:a2:6e:
19:c9:9b:82:cf:63:00:5d:b3:dd:6a:5e:1e:76:b0:
15:b5:09:71:1b:f0:39:fe:c1:96:97:5a:09:87:b7:
cd:0d:cb:e9:5d:f7:e3:1e:80:c0:47:fe:02:58:68:
79:2e:55:33:46:9f:2e:ea:be:84:9f:09:02:ee:55:
da:ec:a2:38:4e:f4:51:66:1c:a9:b3:40:4f:f6:d4:
25:c4:b2:58:b6:d8:72:3a:46:db:18:d4:74:51:dd:
1c:08:e3:b6:c3:51:92:f6:2b:eb:e5:42:72:94:2d:
bf:d3:68:b3:d0:3c:ec:c7:5c:fb:a7:17:0d:7b:d8:
1e:b9:0c:39:1b:6d:4d:4c:73:0b:4c:fc:38:98:1e:
0a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:11:83:DE:3C:07:76:2B:96:BD:F6:B4:16:8E:EE:7B:2A:19:8D:CD
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/7xGD3jwHdiuWvfa0Fo7ueyoZjc0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.201.60.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:17:9a:b9:2c:6a:52:e0:68:da:fd:40:3e:eb:38:c3:ed:6d:
db:66:03:9c:83:d6:83:48:0a:47:da:9b:26:9a:3e:e1:d7:8c:
5f:2b:a0:b7:0c:bc:37:a8:de:b9:8c:1e:28:10:52:69:dc:7f:
5c:03:74:5c:f5:4d:22:f2:f4:56:e4:30:9b:cb:38:82:1d:d4:
e2:1b:31:86:dc:52:d9:9d:ea:07:41:a5:38:7b:8f:2b:e1:f1:
ef:2e:9e:b5:75:f6:38:b3:00:e4:5f:aa:c6:71:33:56:1e:86:
0d:54:b8:4f:d1:58:5e:70:ee:96:1f:e2:9d:4f:14:63:a1:8d:
37:92:e8:78:b4:49:e0:d1:16:97:41:d7:d2:73:36:65:78:02:
33:43:cb:02:9b:d4:7f:69:63:ab:21:68:e4:56:08:0c:b2:69:
c6:f5:ad:20:13:c6:ee:72:60:9b:9d:b0:8c:94:8d:e8:1b:6c:
eb:66:19:1c:d8:b1:61:5d:cf:96:d5:42:76:d2:63:f5:9e:20:
0e:b4:45:6f:ac:77:e0:fc:35:28:1b:29:19:24:44:50:07:47:
39:84:f5:1e:ca:b8:c1:64:59:b7:90:54:22:0e:94:a5:9a:2f:
70:a9:f2:de:cb:b2:78:3e:ee:bd:2f:9f:29:75:03:1d:18:aa:
8d:49:d7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:43:02 2025 by rpki-client