Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/suDWwdsLW2FjdRI_G8xxl95B7Cw.roa
File: suDWwdsLW2FjdRI_G8xxl95B7Cw.roa (raw, json)
Hash identifier: ZnokSKx7hZyHMqqs2R0/P0YHs4nk+P0FcN+VBDNCTfg=
Subject key identifier: B2:E0:D6:C1:DB:0B:5B:61:63:75:12:3F:1B:CC:71:97:DE:41:EC:2C
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0C15
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/suDWwdsLW2FjdRI_G8xxl95B7Cw.roa
Signing time: Fri 05 Jan 2024 09:04:33 +0000
ROA not before: Fri 05 Jan 2024 09:04:33 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 7482
IP address blocks: 218.184.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3093 (0xc15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 5 09:04:33 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B2E0D6C1DB0B5B616375123F1BCC7197DE41EC2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:41:f4:83:d2:d0:17:a7:4b:d7:61:5a:83:fa:
96:f6:87:43:d6:63:d8:d8:09:20:c7:94:e2:b4:ce:
2c:64:f8:ca:3a:c4:b3:a4:ae:0d:2d:ae:b8:fc:67:
89:80:e6:41:e0:dc:07:b3:28:ad:76:b4:40:dc:74:
20:8c:f0:d7:67:f9:36:cd:7a:03:6d:e1:a3:f3:fb:
fd:92:96:d6:95:81:2c:07:4b:c1:d6:6d:1f:61:1e:
d9:03:b6:a8:20:f5:a4:88:f9:58:5a:9b:3c:08:d7:
9e:be:ed:b5:2f:f5:90:4c:60:fc:38:9b:a2:07:4b:
f6:49:8e:58:48:7d:52:bf:4c:fd:d2:7c:ef:e9:d2:
a2:44:82:f8:11:98:61:11:23:d0:df:ff:cb:d3:f6:
42:f0:0d:9a:74:f4:a2:5d:b3:01:03:90:5f:b4:0a:
be:5b:ee:c1:bc:d9:08:fb:cc:db:74:62:d6:c2:c1:
17:74:9c:f5:88:70:b6:ef:da:eb:9e:e9:84:68:a0:
40:c1:2f:36:64:2a:18:3f:60:7d:c4:6d:7b:db:d8:
f0:7f:fa:e3:e1:5c:64:46:c5:51:01:e8:fb:2f:a0:
43:d0:ef:e0:03:5f:7d:4a:63:fc:31:57:cc:55:2a:
e9:f5:ea:9a:f5:25:79:54:bb:13:58:a2:0b:08:b9:
62:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E0:D6:C1:DB:0B:5B:61:63:75:12:3F:1B:CC:71:97:DE:41:EC:2C
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/suDWwdsLW2FjdRI_G8xxl95B7Cw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.184.0.0/16
Signature Algorithm: sha256WithRSAEncryption
36:82:73:41:c3:0c:21:be:82:86:0b:c3:01:23:0b:7a:d5:65:
b3:ac:57:ab:f1:b4:f3:79:68:7b:3a:35:69:ca:ce:74:ca:84:
a9:af:44:00:26:21:04:28:be:f2:ae:cc:37:6a:38:65:ca:21:
12:90:d8:02:ef:20:8a:6b:14:fc:5f:df:c7:a9:dc:e7:2d:33:
f4:4b:27:61:22:2a:6c:bd:72:09:51:e8:91:14:79:ba:e4:bb:
dc:95:70:b8:78:75:0f:aa:9d:de:18:a2:e4:40:88:b5:f6:70:
a5:52:0f:9d:35:95:05:1e:b7:25:50:e6:4b:c5:60:ea:3b:4e:
18:1b:49:cd:f2:13:a1:1a:78:b4:c4:6d:03:18:08:40:46:6f:
14:c3:ed:cb:db:6e:8a:a0:1d:f2:ec:b5:b1:e1:2b:e8:7b:e4:
16:49:e0:af:dc:82:a7:3a:4a:d7:34:83:e3:ea:21:f2:ee:15:
2b:0b:69:ed:a8:ef:89:cc:1d:47:d5:b2:92:00:e9:0e:e4:f3:
be:ab:64:48:aa:51:b3:53:b5:e9:8c:5d:5b:2b:5e:06:83:21:
59:06:10:12:59:40:7e:12:0a:bb:37:c1:e6:6a:a7:9b:a4:3e:
e6:cc:96:6c:b8:7a:85:01:b3:f5:7c:c8:1e:4e:ec:92:01:af:
c4:6c:31:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:00:31 2025 by rpki-client