Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/iRcvhm9OJNbB6LTlkkLeUdd2Q-c.roa
File: iRcvhm9OJNbB6LTlkkLeUdd2Q-c.roa (raw, json)
Hash identifier: yZNngDdclplDyWoSP1c9wam6MwU4kuncEEJ/BXfX0D0=
Subject key identifier: 89:17:2F:86:6F:4E:24:D6:C1:E8:B4:E5:92:42:DE:51:D7:76:43:E7
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0BAF
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/iRcvhm9OJNbB6LTlkkLeUdd2Q-c.roa
Signing time: Fri 01 Sep 2023 08:50:53 +0000
ROA not before: Fri 01 Sep 2023 08:50:53 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9674
IP address blocks: 211.77.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2991 (0xbaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Sep 1 08:50:53 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=89172F866F4E24D6C1E8B4E59242DE51D77643E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a0:0b:10:3e:06:ef:4a:6e:3c:d5:e3:a5:c5:
a8:22:df:12:1e:e6:6d:14:da:5b:dd:fd:ac:be:c2:
30:49:da:a4:f0:a0:a8:3c:6b:8d:ed:c0:3e:b2:1d:
fa:7e:2e:dd:ef:21:dd:3c:d9:c7:5a:ef:51:2c:b3:
6f:1f:f2:a7:02:c6:c7:9e:a8:50:60:d8:b0:c6:91:
92:1b:5f:88:4f:c7:43:2f:e5:ff:ed:e8:80:d3:87:
a0:3b:28:5f:a1:1b:a8:63:df:8c:19:5c:2b:f7:d8:
fd:60:b6:5d:9b:72:6c:51:ba:de:44:4b:ce:45:53:
5b:94:36:a9:2d:26:94:7e:d8:aa:85:1f:de:85:1a:
73:61:b6:7b:06:e9:bb:55:41:4f:5f:1a:dd:bf:32:
01:e7:b1:5c:db:45:5c:50:69:b4:8a:98:ab:62:25:
8f:87:44:67:1d:1a:55:f5:30:db:92:3e:e1:5e:58:
78:43:2b:bc:02:1c:c3:9a:53:8d:6e:36:4d:ec:1e:
e8:28:05:06:bd:8c:97:9f:b4:e6:fa:21:9f:7a:d1:
64:ae:24:a9:23:fa:4a:5f:73:11:55:64:76:38:e5:
44:1d:fc:a1:cb:cd:69:24:30:f5:40:b3:90:f4:3b:
3e:49:15:e3:0a:b1:e8:6e:15:84:d5:ba:a2:99:90:
48:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:17:2F:86:6F:4E:24:D6:C1:E8:B4:E5:92:42:DE:51:D7:76:43:E7
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/iRcvhm9OJNbB6LTlkkLeUdd2Q-c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.77.64.0/18
Signature Algorithm: sha256WithRSAEncryption
4a:6b:1e:40:b1:73:30:1d:64:5d:c6:0a:ef:8f:88:20:5d:52:
76:57:ed:79:68:bc:b3:d4:83:db:4a:d1:60:71:33:fa:aa:bd:
f4:e2:0c:4b:36:bb:be:5c:0d:a2:86:3c:95:5a:6f:ad:1c:4d:
34:b0:3c:e3:76:35:04:31:d9:f4:7f:5e:a3:0d:cc:fa:71:fd:
34:d0:f2:80:d8:87:9d:86:25:d5:30:01:c4:32:2d:d3:ab:fe:
31:9e:ba:eb:13:be:c6:fc:c6:90:e2:f8:c0:45:22:60:4a:11:
c4:23:04:79:06:a3:88:42:34:cb:ed:f7:38:96:93:12:6a:1e:
86:d5:82:2f:64:b1:f5:29:78:40:56:a1:12:09:6a:f0:5c:36:
fc:f2:41:b0:33:14:d6:ae:dd:61:e5:db:b2:38:3e:80:e7:cd:
68:c9:33:17:97:59:83:f6:88:f4:ab:72:96:0c:5d:42:85:48:
80:a2:b2:95:e3:3d:fd:0e:65:26:ce:f2:01:e9:59:c5:99:b0:
9a:8d:20:0e:57:cf:46:8e:84:f6:23:db:6d:93:13:28:16:fd:
86:f4:1a:17:39:ad:7c:f5:b6:17:3c:91:66:1b:83:95:bd:00:
e6:b9:3d:7d:ee:1f:dd:da:1e:70:c4:ff:af:67:cf:cd:b6:0d:
1c:60:3f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:39:08 2025 by rpki-client