Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GTBC/LsX2izYpQJC1nKN2X-hLq6RsnqY.roa
File: LsX2izYpQJC1nKN2X-hLq6RsnqY.roa (raw, json)
Hash identifier: zVOAmjWfiUukE1XctK0GwtkgvRmZ7TF7kBEyrv0zZ5s=
Subject key identifier: 2E:C5:F6:8B:36:29:40:90:B5:9C:A3:76:5F:E8:4B:AB:A4:6C:9E:A6
Certificate issuer: /CN=DBA793D0FFE611AC397F197570E19785046EE739
Certificate serial: 0770
Authority key identifier: DB:A7:93:D0:FF:E6:11:AC:39:7F:19:75:70:E1:97:85:04:6E:E7:39
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/26eT0P_mEaw5fxl1cOGXhQRu5zk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GTBC/LsX2izYpQJC1nKN2X-hLq6RsnqY.roa
Signing time: Tue 29 Sep 2020 09:53:49 +0000
ROA not before: Tue 29 Sep 2020 09:53:49 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18413
IP address blocks: 61.67.0.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1904 (0x770)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBA793D0FFE611AC397F197570E19785046EE739
Validity
Not Before: Sep 29 09:53:49 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=2EC5F68B36294090B59CA3765FE84BABA46C9EA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ac:c5:1a:07:84:67:de:58:8b:cf:10:0c:b6:
64:3d:1f:a6:cf:0c:ad:b4:fc:ea:ce:4a:11:42:49:
7c:6e:38:b6:52:7f:0f:56:de:15:d6:d8:78:28:5b:
e4:74:03:38:22:ca:4f:50:a9:f9:47:5c:33:eb:6b:
0b:62:4b:d1:7d:ec:2f:de:a4:5b:79:3e:07:01:26:
5f:ca:d4:55:66:e8:9a:54:c2:5c:46:9d:09:44:04:
a6:4e:5c:dd:80:b7:8b:ea:2a:b4:67:91:e0:9d:de:
e1:21:5f:4a:50:42:63:d5:0f:8d:a2:5e:59:c2:17:
af:da:a5:76:96:23:a0:dc:b2:33:92:f6:44:81:a1:
a9:cd:b3:29:7c:9f:56:b5:eb:4d:6e:4c:2b:7c:3c:
78:21:43:4e:87:d1:aa:3b:41:ad:f0:a3:59:29:7d:
7f:bd:de:47:b6:9d:ad:f7:25:e1:57:5e:30:55:5a:
d0:e0:ab:75:ba:b9:52:1c:22:55:25:8d:39:3b:e6:
b1:eb:c6:d4:ca:0a:bf:4a:0e:4f:6e:45:61:fe:a6:
84:21:1d:78:a9:82:2a:74:1d:60:2c:bf:71:cb:d8:
76:81:8c:36:a7:8c:4d:ea:da:ab:35:48:c3:6c:4e:
d1:5f:ec:c1:eb:06:ce:21:84:6b:64:87:e0:3f:fa:
06:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C5:F6:8B:36:29:40:90:B5:9C:A3:76:5F:E8:4B:AB:A4:6C:9E:A6
X509v3 Authority Key Identifier:
keyid:DB:A7:93:D0:FF:E6:11:AC:39:7F:19:75:70:E1:97:85:04:6E:E7:39
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GTBC/26eT0P_mEaw5fxl1cOGXhQRu5zk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/26eT0P_mEaw5fxl1cOGXhQRu5zk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GTBC/LsX2izYpQJC1nKN2X-hLq6RsnqY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.67.0.0/20
Signature Algorithm: sha256WithRSAEncryption
64:aa:95:e6:9c:a5:7f:0a:30:fb:2a:4f:5b:d4:5d:e9:e4:f2:
2f:2d:c0:4e:ef:e2:34:21:f6:2c:79:aa:7a:95:42:cc:7b:53:
9b:05:da:2c:3f:01:17:c9:d5:61:7d:00:4c:39:17:d8:c7:2e:
cd:85:e5:75:cf:0d:ef:66:ce:fb:c5:53:91:8d:ba:f3:72:be:
40:5c:7a:93:34:8b:c2:22:b5:3e:65:2f:1b:1e:42:5f:f5:29:
b7:10:86:4d:3e:c3:e2:c4:49:b9:3b:cb:a2:a3:54:82:8e:2b:
48:d6:f2:e8:d1:48:6b:9e:0c:99:ad:bf:fb:1b:f3:20:4d:68:
57:ea:18:b2:e9:2d:ca:4f:ee:ed:49:a3:f4:ab:7a:a7:0f:58:
dd:99:fd:88:01:21:e1:46:27:7d:13:84:18:ad:b4:f5:ed:2b:
4e:6a:cf:30:97:33:13:57:4a:3f:c9:73:6b:44:02:1c:96:c4:
96:29:b0:b9:7d:0e:26:b9:1a:4c:8d:32:cc:09:4e:92:b6:2f:
b7:96:ec:10:79:81:b3:df:fe:73:15:0c:b7:ce:a6:4d:55:a2:
55:ee:1a:fd:01:c6:f5:31:36:d2:eb:e1:5b:ff:4e:52:c1:15:
78:b4:3b:0e:8a:b6:fc:54:1a:c9:cc:2e:f9:be:bb:40:6c:e6:
c0:73:43:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:38:06 2025 by rpki-client