Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GSN/cL_8rRneu5YCBWdQHFtSSOohxe8.roa
File: cL_8rRneu5YCBWdQHFtSSOohxe8.roa (raw, json)
Hash identifier: wkrlmtnlYYW5Djbosdf+p4wollZT/qxaFLctMgdvAzY=
Subject key identifier: 70:BF:FC:AD:19:DE:BB:96:02:05:67:50:1C:5B:52:48:EA:21:C5:EF
Certificate issuer: /CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9
Certificate serial: 0992
Authority key identifier: 75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/cL_8rRneu5YCBWdQHFtSSOohxe8.roa
Signing time: Wed 29 Sep 2021 02:38:08 +0000
ROA not before: Wed 29 Sep 2021 02:38:08 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 4782
IP address blocks: 211.79.160.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2450 (0x992)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75FE53C611B4FD56B3F68319EECA6289F3F0F2A9
Validity
Not Before: Sep 29 02:38:08 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=70BFFCAD19DEBB96020567501C5B5248EA21C5EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:22:8d:42:2a:39:ff:81:0f:ed:be:d3:f9:5f:
5e:68:22:be:dd:d6:9f:b7:de:f3:69:76:c3:5d:b8:
82:6a:96:c1:68:bd:da:a9:ca:a7:36:0a:c4:47:59:
cc:5d:4c:53:55:37:09:10:43:82:68:88:d8:53:ef:
f9:cf:21:6f:ab:2e:f2:f7:f8:24:27:89:43:94:67:
d2:6e:f8:87:f8:a6:eb:e6:05:bc:27:e0:dc:02:a6:
99:be:0a:12:62:31:3d:22:45:47:5c:ab:1f:d2:14:
e3:02:e6:d0:2f:26:3a:f2:08:c8:3e:42:73:5f:ad:
00:3b:2f:1a:7e:ed:38:7e:1f:af:6e:4f:32:c2:5e:
79:0f:04:a0:2b:c6:ac:b9:d1:47:ad:21:67:be:75:
ee:5e:25:72:e5:21:36:57:86:1b:8c:5b:c8:09:6d:
13:0d:24:e6:16:38:53:d3:78:26:fa:ca:a2:a4:7a:
8c:20:52:c7:3c:a9:58:67:90:9a:26:c0:de:03:33:
4c:8c:6c:e8:f8:a1:d0:14:68:48:c0:5e:45:bd:7d:
2e:84:17:d3:0d:cd:2d:08:8c:e7:9b:df:d1:0b:3a:
d5:42:73:33:d8:7e:bb:b5:a9:22:52:d3:16:71:69:
00:8f:5f:27:cf:08:52:c4:28:be:51:bf:42:03:d2:
d2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:BF:FC:AD:19:DE:BB:96:02:05:67:50:1C:5B:52:48:EA:21:C5:EF
X509v3 Authority Key Identifier:
keyid:75:FE:53:C6:11:B4:FD:56:B3:F6:83:19:EE:CA:62:89:F3:F0:F2:A9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/df5TxhG0_Vaz9oMZ7spiifPw8qk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/df5TxhG0_Vaz9oMZ7spiifPw8qk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GSN/cL_8rRneu5YCBWdQHFtSSOohxe8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.79.160.0/19
Signature Algorithm: sha256WithRSAEncryption
10:78:dd:11:94:56:6f:e0:29:d8:6b:ea:4a:ce:b9:22:c9:0b:
ef:5e:0c:ed:4c:71:72:e7:f6:61:d0:ef:2f:6a:d0:d6:9d:dd:
59:27:b4:1a:5c:9d:ef:3a:25:4c:3d:3f:98:5c:1b:75:f1:41:
7c:bd:99:74:4d:7e:a2:ed:9b:54:49:00:22:93:9f:f8:84:86:
6b:79:61:8a:e1:d7:76:ae:ae:da:77:da:f7:4e:d2:fa:51:e7:
4b:98:60:bf:c4:0f:b3:d6:c0:4f:d2:72:0f:a4:04:af:fa:2d:
e5:cc:6c:4a:a2:cd:7f:3e:4a:3b:e8:96:92:72:a0:8e:b7:09:
ee:fc:e0:3a:58:45:4d:e7:cc:2e:d6:3f:09:33:c6:10:8b:fb:
d7:f9:ce:c8:22:b7:9d:46:5a:55:0c:e9:75:e6:a3:51:ad:54:
71:ea:a0:16:e8:78:b2:8b:f3:ed:3b:92:29:eb:77:96:fa:9d:
8a:1e:34:e5:c1:c7:28:06:67:88:92:45:c7:ee:15:c2:ab:0f:
7f:c0:4e:26:a3:e6:84:d3:b9:29:e6:2b:83:50:d5:7f:eb:98:
b2:38:86:9a:e3:b0:57:67:0c:8d:07:a2:2f:b9:de:92:e4:9e:
9f:5f:26:fd:44:54:97:59:06:18:2b:04:a6:f4:60:43:66:67:
ac:a2:82:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:28:43 2025 by rpki-client