Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/ARdlET1yX17QsaPwa0lqrvo2hIs.roa
File: ARdlET1yX17QsaPwa0lqrvo2hIs.roa (raw, json)
Hash identifier: DW5801K3n3IkHdeETLE7qXfXoJEWxVruDVfwBO7pasY=
Subject key identifier: 01:17:65:11:3D:72:5F:5E:D0:B1:A3:F0:6B:49:6A:AE:FA:36:84:8B
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0C54
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/ARdlET1yX17QsaPwa0lqrvo2hIs.roa
Signing time: Mon 15 Jan 2024 21:09:03 +0000
ROA not before: Mon 15 Jan 2024 21:09:03 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 7482
IP address blocks: 203.79.192.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3156 (0xc54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:09:03 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=011765113D725F5ED0B1A3F06B496AAEFA36848B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d4:13:15:fd:7b:a2:c5:23:04:dc:27:e9:04:
bd:1d:74:1e:c3:a5:85:7a:09:04:4e:fb:11:3c:bf:
ed:cb:e2:cf:2a:be:7c:7d:6d:a0:8c:e1:23:63:11:
dc:a4:80:5a:90:f7:a2:3a:d0:4e:83:d0:04:29:ea:
5f:50:5d:97:f7:9e:74:fa:bf:81:e9:03:f9:16:93:
2d:8d:26:77:84:f2:19:e5:35:81:ce:0e:b4:5f:b8:
96:b1:76:6f:24:f9:bb:f1:ab:55:87:8f:76:48:35:
c1:9a:3f:25:e5:17:5c:1d:2c:72:4c:5a:21:9d:7b:
3e:fc:12:1d:94:d8:e2:0d:1b:7e:01:19:a5:f6:a0:
4a:38:52:e3:98:69:8f:b1:89:60:6b:f7:58:da:4a:
53:81:2e:ff:ae:90:38:4b:fc:a1:ea:71:ad:98:8e:
ec:6a:60:dc:d0:fd:65:41:40:48:35:e9:7c:3d:5f:
cc:02:74:9b:d7:18:98:e4:2e:6e:b3:11:51:d2:7b:
e3:84:b7:51:c9:4e:ac:1f:07:c4:1c:8a:e2:c8:48:
0d:0b:46:15:24:de:1c:8e:8d:94:10:f0:69:f3:84:
8a:29:65:a9:13:3b:c1:dc:9f:c3:d4:1c:c0:ba:1c:
8d:68:59:ab:26:67:7f:96:31:89:97:80:87:9a:1a:
e4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:17:65:11:3D:72:5F:5E:D0:B1:A3:F0:6B:49:6A:AE:FA:36:84:8B
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/ARdlET1yX17QsaPwa0lqrvo2hIs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.79.192.0/18
Signature Algorithm: sha256WithRSAEncryption
ba:6e:20:8c:9e:96:90:88:39:18:64:e4:7f:11:93:fc:18:63:
54:20:8b:6c:31:8c:47:0c:e1:c2:f2:10:a4:10:cd:06:c3:cf:
0d:30:0e:31:98:6b:be:42:34:0a:f6:05:69:ef:9f:98:9b:4f:
73:08:40:18:10:7f:89:f7:6b:ec:ba:73:ca:48:b2:c4:0e:79:
63:92:ae:23:85:48:12:e9:4d:14:c5:14:c8:64:d2:d4:2b:a3:
77:f2:de:a9:3d:d7:f1:b1:40:63:df:a4:fd:b1:0e:8c:36:39:
bc:0e:57:c9:4b:39:db:93:18:0c:64:f9:76:0b:a8:c4:fd:3f:
0f:fb:ac:0c:f9:8b:1a:c8:01:5b:03:43:78:fe:73:c4:5a:a9:
45:77:94:14:91:0d:66:87:e0:a7:46:c5:27:db:55:a7:4f:77:
9d:24:b8:f3:5c:5c:5f:09:eb:3b:40:33:08:99:14:4b:db:ca:
cb:34:82:c0:a0:66:aa:70:46:1e:3c:80:1e:9d:62:ca:b0:3d:
48:47:51:b3:2c:4a:6e:c7:f3:64:31:8e:e4:ea:a3:d7:6c:33:
8e:c8:a8:40:ea:c7:f4:f1:0b:57:ee:bc:36:b6:09:77:a3:48:
c0:5e:63:66:e3:7b:c7:30:0e:b1:74:3f:e6:be:3e:74:7a:09:
9a:6e:89:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:55:19 2025 by rpki-client