Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/iOS42_h0w3gPuUrz1QE9bgW1lFw.roa
File: iOS42_h0w3gPuUrz1QE9bgW1lFw.roa (raw, json)
Hash identifier: MCD8fq3r+Lla/SypB66V4TS9Bj5pgtUcyS0LVcMMbmw=
Subject key identifier: 88:E4:B8:DB:F8:74:C3:78:0F:B9:4A:F3:D5:01:3D:6E:05:B5:94:5C
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0C86
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/iOS42_h0w3gPuUrz1QE9bgW1lFw.roa
Signing time: Mon 15 Jan 2024 21:09:55 +0000
ROA not before: Mon 15 Jan 2024 21:09:55 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 7482
IP address blocks: 210.200.83.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3206 (0xc86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:09:55 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=88E4B8DBF874C3780FB94AF3D5013D6E05B5945C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:76:c9:da:97:7c:5a:41:d1:90:98:3c:41:5c:
6a:d0:42:47:9a:44:e0:80:80:6a:e6:63:5d:ae:02:
ee:2b:50:7a:1e:86:be:44:2c:5c:6d:f9:e3:11:c6:
04:74:3d:a8:fd:7d:11:f8:17:cd:c8:1c:f5:2f:d7:
f8:c8:9b:9b:b9:c8:a5:fb:67:26:04:a3:08:17:b5:
c8:fa:e6:f6:52:a5:86:b2:d7:24:1c:3c:d7:6e:4b:
0e:9d:cd:20:3e:80:f0:0f:9b:54:71:23:c4:a9:a6:
81:15:de:2f:cb:c2:36:50:a6:4d:51:68:38:31:8f:
c2:27:8c:49:3c:48:3e:f0:0f:af:9f:bd:e1:5e:d5:
39:dd:cf:23:b1:5c:5c:ae:24:cf:34:63:bb:f3:c4:
a8:73:b9:1e:ef:df:89:b9:a5:13:b5:00:fc:7c:a6:
86:52:0e:1c:ac:c0:d8:c0:43:15:6c:d6:63:6d:9d:
f8:9f:dc:6b:b0:13:18:77:94:1e:b4:fb:4b:0d:30:
cb:52:cb:ef:b7:22:b2:a4:87:e3:fe:69:bd:5d:7c:
bc:05:2b:38:3c:6d:de:6d:5e:11:58:74:50:ab:fb:
2a:70:a3:41:ec:8f:57:a2:fa:55:4a:73:b4:12:0d:
ba:e7:74:c6:8f:a3:3e:13:ac:ea:55:f3:b2:cf:41:
a5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E4:B8:DB:F8:74:C3:78:0F:B9:4A:F3:D5:01:3D:6E:05:B5:94:5C
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/iOS42_h0w3gPuUrz1QE9bgW1lFw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.200.83.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:9f:1a:e7:6d:2e:74:f2:7e:13:c4:87:b1:24:84:a2:60:f7:
7d:5d:d5:56:bb:91:f0:ef:c1:c5:e4:5a:ac:50:b9:e5:bd:b8:
35:c9:f6:d5:78:a2:53:21:86:c0:f9:66:42:b5:eb:e4:40:a4:
ba:f4:c9:1d:8d:9f:65:fe:3d:59:3c:81:0f:a0:eb:16:65:42:
be:f7:87:3b:b2:f6:41:a9:03:13:a8:e9:c5:83:51:b4:38:e8:
10:82:0e:62:61:31:7b:76:97:a8:45:17:b5:be:7a:fc:6e:cc:
50:06:d9:c1:44:63:27:d7:a8:88:16:ee:b9:e9:4d:ea:4b:14:
99:07:b6:ce:67:91:41:74:b9:3a:24:5a:dc:cd:5e:3a:fc:f4:
ea:fe:8e:29:1e:55:2b:92:24:86:37:79:71:f6:3d:ec:2f:88:
53:50:77:98:07:57:b6:50:e0:ad:70:20:79:b4:a4:bb:87:b1:
d4:89:ee:c1:ee:49:06:c1:58:67:4a:c5:b7:08:a9:f7:63:6e:
64:1e:c9:22:d5:a6:77:46:1a:23:b3:ae:ea:3d:15:46:62:24:
a3:70:64:a7:29:0f:0d:89:89:8f:b4:67:ac:9b:3d:71:87:3c:
81:4f:46:48:98:1e:04:d2:15:ef:fe:4f:de:b5:a2:42:71:b2:
10:e7:e9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:48:59 2025 by rpki-client