Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/DKmDH3CPqWL9aJPtmyT3MjGFgKM.roa
File: DKmDH3CPqWL9aJPtmyT3MjGFgKM.roa (raw, json)
Hash identifier: N99exl+fbRtrRRx1Fh7vEIViTTVqBNgtpggjJ7oFzCQ=
Subject key identifier: 0C:A9:83:1F:70:8F:A9:62:FD:68:93:ED:9B:24:F7:32:31:85:80:A3
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0D30
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/DKmDH3CPqWL9aJPtmyT3MjGFgKM.roa
Signing time: Mon 15 Jan 2024 21:25:12 +0000
ROA not before: Mon 15 Jan 2024 21:25:12 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 24154
IP address blocks: 210.200.0.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3376 (0xd30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:25:12 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=0CA9831F708FA962FD6893ED9B24F732318580A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0d:c8:e3:a6:04:2c:3a:0d:a2:73:79:bf:ad:
07:14:bd:fb:74:e4:e5:53:e9:1d:3a:43:be:b2:4e:
e0:b9:83:7b:9c:13:de:67:94:52:26:7f:29:c1:37:
e5:55:27:1f:2f:70:e7:6a:b0:ff:bd:58:a4:51:99:
b2:d0:b0:ab:32:f5:c5:ef:5c:f1:ed:6b:05:6b:b8:
7f:a3:6f:32:9e:a5:5a:1e:53:a7:fc:e6:56:bd:24:
01:de:f2:d6:ed:26:17:eb:fb:8c:37:98:f8:32:ce:
ab:34:b3:71:5a:7b:b1:5b:44:8b:da:84:b1:4b:39:
67:12:b5:b6:b7:5c:de:ad:8e:87:d8:89:b7:9e:e1:
af:0d:ef:94:a7:9c:30:0e:c8:0b:ba:e9:b1:93:13:
27:f8:e2:aa:e0:eb:5e:b9:79:e1:7e:60:2e:ec:d6:
c5:e1:7b:91:64:05:cc:04:7e:30:90:1f:ba:f2:c7:
01:7a:7d:a4:09:e6:da:22:34:17:c9:3c:96:74:b2:
08:90:a4:51:4c:41:67:45:1a:12:e5:93:48:12:2b:
b4:5a:5a:2e:54:50:d0:bc:1f:99:92:ec:38:0e:11:
b5:c5:c7:13:90:2f:d1:0d:9f:97:ad:ea:6f:cc:5b:
6b:31:66:be:25:a6:d4:89:d0:70:97:0d:ba:dc:e5:
12:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A9:83:1F:70:8F:A9:62:FD:68:93:ED:9B:24:F7:32:31:85:80:A3
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/DKmDH3CPqWL9aJPtmyT3MjGFgKM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.0.0/19
Signature Algorithm: sha256WithRSAEncryption
14:6a:ac:27:ba:d4:23:bb:9a:d2:5c:f9:af:f3:f1:36:52:14:
b8:88:e2:5e:2d:9a:4d:4a:42:e4:32:64:25:65:e6:12:f6:7d:
04:ec:8d:da:a9:01:e1:d9:f1:20:fb:bd:60:de:4d:d5:32:ea:
27:5f:2b:fc:d1:db:73:a0:d2:da:fa:9e:ad:9a:aa:4d:d0:db:
7d:54:d3:56:f9:03:cc:54:d1:10:c8:18:88:09:81:a1:1a:5f:
95:15:69:c5:c5:d0:cd:3b:b2:88:17:58:1c:9d:db:e2:15:78:
11:da:82:36:91:09:bb:5d:52:bd:3a:b6:c9:6a:9b:a4:41:97:
bb:37:fd:ed:c2:1a:97:90:4e:6b:6b:6a:9e:0a:c7:4b:9d:5b:
42:61:41:b3:b9:c3:09:75:7d:15:60:a3:b6:17:41:b3:ac:1e:
b0:88:8e:32:02:da:c0:4f:1e:b3:47:5f:ac:e7:c2:d2:48:a2:
cc:cc:8c:af:09:bd:ad:18:4d:d3:16:cd:cf:ea:67:48:58:68:
d6:9b:62:36:78:83:1c:ba:70:54:c5:bc:6d:e4:f0:fe:0c:6b:
90:aa:e8:d2:12:2d:7e:27:cf:47:ad:44:73:f8:d9:4b:4d:51:
09:bb:8c:28:06:1c:4d:ba:1c:dc:73:00:df:8c:59:a0:f6:bb:
46:c0:83:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:59:08 2025 by rpki-client