Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/pKbq8Phul3yXl_r1QbicBHvmtnQ.roa
File: pKbq8Phul3yXl_r1QbicBHvmtnQ.roa (raw, json)
Hash identifier: vffVTglXHyBm7DHIrXUP6WIdbn9Odg7ES8uI2JLXM+s=
Subject key identifier: A4:A6:EA:F0:F8:6E:97:7C:97:97:FA:F5:41:B8:9C:04:7B:E6:B6:74
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0D7E
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/pKbq8Phul3yXl_r1QbicBHvmtnQ.roa
Signing time: Mon 15 Jan 2024 21:28:56 +0000
ROA not before: Mon 15 Jan 2024 21:28:56 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17709
IP address blocks: 210.63.232.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3454 (0xd7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:28:56 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=A4A6EAF0F86E977C9797FAF541B89C047BE6B674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:aa:40:bc:46:30:e8:a3:98:c5:c3:fd:6e:52:
af:a7:84:38:d0:78:9e:98:a3:74:a6:2f:3b:17:de:
f4:ae:61:30:00:de:34:39:27:b3:0c:d5:ec:63:d1:
6f:ed:d8:30:8c:44:fa:7a:59:ad:13:20:be:1f:48:
31:d3:37:5d:14:d3:0f:5f:7d:d7:83:4b:ff:fa:6c:
b4:77:1a:b8:60:c7:c8:0b:40:fc:73:80:d3:3d:e2:
1a:5a:bd:9c:54:8c:02:ea:25:15:b3:5b:13:8b:83:
c8:e4:87:17:88:59:99:8d:5e:1e:39:45:87:96:58:
dd:c1:d8:c1:90:a6:80:80:d9:2f:02:4b:d8:8a:70:
1c:2f:42:f1:74:1e:59:88:64:b9:ef:d0:d6:71:f4:
5e:e1:02:62:ce:8e:24:50:b5:f4:92:8c:4d:e7:06:
f1:61:27:58:fe:07:06:85:30:f1:e4:ba:cb:33:bb:
2c:b5:21:33:80:31:15:eb:f9:81:cc:84:db:2d:14:
2f:d6:34:b9:00:19:46:d5:99:19:c2:73:97:8b:2a:
f2:09:84:98:dc:c9:a5:36:ef:87:e4:82:92:83:cd:
5e:4b:25:b1:32:f2:fa:7a:e4:a9:61:42:20:80:04:
b8:65:ca:7f:cf:ad:11:44:d9:1e:9d:e4:48:37:a4:
a9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A6:EA:F0:F8:6E:97:7C:97:97:FA:F5:41:B8:9C:04:7B:E6:B6:74
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/pKbq8Phul3yXl_r1QbicBHvmtnQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.232.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:15:19:57:fe:bc:81:2a:09:bf:eb:62:1b:f4:ce:10:09:61:
ec:b0:ce:40:5c:7f:99:77:58:98:7e:99:19:f4:7b:c5:cc:a9:
a7:90:ef:9c:32:dc:76:24:e9:6c:b8:15:5c:28:f4:11:ae:db:
c9:8e:e7:e6:45:21:55:44:b0:1f:b2:08:ff:70:f7:a6:8d:93:
33:0c:61:89:54:8c:be:7c:d5:c1:90:3b:dd:a8:6d:ee:53:e4:
68:c2:ee:e2:8a:ed:14:3b:de:f6:1a:2c:92:39:22:a7:c2:56:
61:ed:89:7d:c0:a9:c3:b5:31:e2:73:f2:a7:b3:a2:29:89:51:
44:ce:d1:ac:d3:6c:da:18:6c:09:61:45:5c:c2:ef:3d:6a:08:
f4:86:69:76:81:99:d1:b4:32:97:de:9e:2d:ac:65:b0:87:d0:
f1:73:bf:d1:d9:c2:54:95:26:68:00:e0:f1:5a:3c:d2:14:93:
c6:3c:88:fa:51:15:a9:40:6a:80:9c:72:1a:9d:33:78:e7:f9:
2b:73:81:6f:63:ad:81:c6:b7:5b:03:e5:99:90:57:43:46:5a:
3b:72:19:71:30:fa:1b:dd:d0:1c:2f:a2:8d:f6:6c:78:cc:38:
5a:1d:a4:aa:eb:e9:4d:6c:96:62:8e:e0:c6:32:f7:c1:36:c9:
3f:40:7a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:10:06 2025 by rpki-client