Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/GtOtIeadcYFhljSSh7bRvXHc6_Y.roa
File: GtOtIeadcYFhljSSh7bRvXHc6_Y.roa (raw, json)
Hash identifier: 7AW9OMnzJcsXCaUKuKhVWYntDLMWFYXJsVPVESM4fVc=
Subject key identifier: 1A:D3:AD:21:E6:9D:71:81:61:96:34:92:87:B6:D1:BD:71:DC:EB:F6
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 08E2
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/GtOtIeadcYFhljSSh7bRvXHc6_Y.roa
Signing time: Sun 07 Feb 2021 05:54:56 +0000
ROA not before: Sun 07 Feb 2021 05:54:56 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9674
IP address blocks: 211.73.128.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2274 (0x8e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Feb 7 05:54:56 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1AD3AD21E69D71816196349287B6D1BD71DCEBF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d9:03:79:82:b0:fc:16:13:0b:59:52:ee:b6:
b2:a3:b3:6b:34:e7:73:09:b9:34:3f:f5:9e:80:26:
2c:83:2b:a3:ff:5e:1e:bd:23:34:c3:45:19:79:d7:
f8:54:7e:d7:64:2d:6e:2e:d6:02:6d:3f:28:1d:a1:
6d:72:d2:de:bb:44:e3:dc:24:1a:73:ea:02:8f:99:
db:d4:2e:f8:df:5c:e0:e0:66:49:d7:2e:a8:69:44:
c1:b6:70:7e:7c:f2:5b:15:75:16:e5:27:1b:4c:dd:
db:36:24:0f:10:98:c8:68:2c:f7:0f:76:05:e3:3e:
a1:b6:31:48:3c:ed:03:3d:2a:24:da:15:76:41:d9:
6c:0f:d0:cf:bc:e5:d0:e0:d0:88:c3:9a:a0:d5:87:
d6:ee:90:35:82:c6:b3:0c:3d:2d:a1:60:53:3a:24:
18:aa:b8:bd:6d:b5:db:34:c9:4c:e8:49:55:d0:2e:
83:3f:20:45:d7:df:f5:74:6c:5b:b4:34:6b:df:4d:
5a:57:bf:4d:32:0d:b3:bf:01:d8:58:54:46:55:70:
c7:be:f0:ae:9f:51:fe:5f:f9:d4:3b:88:e4:24:fd:
14:62:01:da:81:1c:ea:2a:f6:a6:3d:46:dc:44:c0:
35:5b:da:88:e3:ef:9f:e2:f9:97:84:54:75:1a:cf:
67:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D3:AD:21:E6:9D:71:81:61:96:34:92:87:B6:D1:BD:71:DC:EB:F6
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/GtOtIeadcYFhljSSh7bRvXHc6_Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.73.128.0/19
Signature Algorithm: sha256WithRSAEncryption
1a:71:26:d4:27:e8:85:19:2a:29:5d:0f:c1:6a:a7:93:ca:1d:
21:a9:1c:70:ab:2e:9e:1b:4e:c3:c3:6c:bc:44:1c:ea:35:d6:
c9:9e:77:1b:ae:a5:06:e9:9b:55:11:55:57:ab:ed:b6:5d:09:
bd:2c:1a:1c:bd:34:5e:d8:01:a0:de:86:0b:c1:5d:9a:de:2a:
6f:22:78:35:2b:e7:24:4b:d7:e1:82:6e:e1:22:74:cc:0e:13:
3f:8a:fe:1b:a7:a1:f8:87:c9:c9:4e:17:8e:ab:c8:dd:c8:53:
64:40:79:13:f0:bf:ba:9e:9c:f0:03:8a:69:0a:5c:1f:2b:ae:
87:46:1e:83:40:e0:5b:d6:2d:5e:37:73:7d:46:cc:d8:e6:e4:
bb:43:43:00:a2:95:65:75:63:ad:e7:ce:62:6b:ab:7c:d8:a6:
27:57:ca:8b:fa:48:d9:08:4d:36:39:cb:84:35:05:2e:dc:77:
0c:d2:6e:1c:e9:a2:aa:89:c5:53:27:6d:2b:b2:b1:40:d8:ad:
15:98:96:60:ff:3c:55:97:f0:3f:9e:78:f1:5f:89:5c:74:67:
70:49:b7:cd:31:80:ee:04:7b:d6:67:bd:49:e1:46:a3:ad:08:
93:28:e4:68:70:1d:de:fd:7c:58:03:b2:61:2c:41:df:5e:d3:
19:36:e1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:59:24 2025 by rpki-client