Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HEALTHNET/2rLJg-ES6ZjYhLTkc5p69NuodNw.roa
File: 2rLJg-ES6ZjYhLTkc5p69NuodNw.roa (raw, json)
Hash identifier: irbMv/mzVAoIGyQPf2d5/KN4LdeqzFgVM1gyrEeSa9c=
Subject key identifier: DA:B2:C9:83:E1:12:E9:98:D8:84:B4:E4:73:9A:7A:F4:DB:A8:74:DC
Certificate issuer: /CN=43FF5C92CC4950A457A7327D168FBC465B218322
Certificate serial: 0B2D
Authority key identifier: 43:FF:5C:92:CC:49:50:A4:57:A7:32:7D:16:8F:BC:46:5B:21:83:22
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Q_9cksxJUKRXpzJ9Fo-8RlshgyI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HEALTHNET/2rLJg-ES6ZjYhLTkc5p69NuodNw.roa
Signing time: Fri 01 Sep 2023 08:56:07 +0000
ROA not before: Fri 01 Sep 2023 08:56:07 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 4782
IP address blocks: 203.65.0.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2861 (0xb2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43FF5C92CC4950A457A7327D168FBC465B218322
Validity
Not Before: Sep 1 08:56:07 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=DAB2C983E112E998D884B4E4739A7AF4DBA874DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:79:c4:43:e4:88:97:0c:98:43:f3:f4:9d:78:
97:40:3b:ad:6a:7c:ad:06:02:47:49:a9:2e:d8:ed:
bb:cf:e7:61:f5:1f:33:8d:e1:8c:a2:76:38:ed:cc:
5b:52:db:d7:e2:d8:8e:f5:d6:58:85:be:c2:1d:1f:
cf:b6:96:d8:b0:3f:49:b9:83:4b:43:d5:e5:18:a1:
b4:12:97:a3:5e:35:c8:33:b1:6d:ae:06:5e:2f:71:
dc:e4:4a:fb:8f:5c:45:d4:04:73:bf:14:93:1f:61:
8c:11:d4:93:cb:ae:30:6c:96:7b:21:ed:af:bc:67:
5b:08:3c:f2:a4:8f:a6:56:79:84:85:ad:f0:e5:33:
08:41:90:53:e3:07:e1:e6:b2:d9:b5:71:f7:bb:c2:
10:ca:04:83:93:6e:56:a3:b2:f6:ac:4f:6b:d7:d0:
73:fb:78:53:c1:3f:08:36:70:1b:0c:f2:f9:df:2b:
1f:63:65:db:51:e4:15:cd:c0:53:11:30:85:5a:68:
ae:5d:f8:48:b1:85:fc:b9:47:17:ba:36:e2:dc:77:
89:59:28:00:7b:f6:bf:64:df:bc:fd:52:e7:52:32:
cb:8f:84:ff:62:a6:81:b4:f5:17:d2:ed:4c:46:f1:
b2:e0:bf:25:b0:56:80:87:92:5c:5f:ef:2d:d6:38:
c2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B2:C9:83:E1:12:E9:98:D8:84:B4:E4:73:9A:7A:F4:DB:A8:74:DC
X509v3 Authority Key Identifier:
keyid:43:FF:5C:92:CC:49:50:A4:57:A7:32:7D:16:8F:BC:46:5B:21:83:22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HEALTHNET/Q_9cksxJUKRXpzJ9Fo-8RlshgyI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Q_9cksxJUKRXpzJ9Fo-8RlshgyI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HEALTHNET/2rLJg-ES6ZjYhLTkc5p69NuodNw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.65.0.0/17
Signature Algorithm: sha256WithRSAEncryption
58:d3:5f:8d:5d:79:91:21:ec:72:fa:28:05:21:69:ff:77:b1:
0b:ed:4a:93:c5:40:e7:1b:85:11:90:89:e0:c3:38:87:af:95:
85:28:ed:84:86:fb:c1:c5:e1:da:cd:ef:74:d8:e8:8b:fe:94:
53:4b:d6:f5:72:92:b0:4b:21:43:3a:4a:f3:aa:30:e7:f6:bb:
a6:de:8d:47:16:11:13:42:92:1f:f0:49:2a:41:9a:06:6d:82:
90:46:1f:31:b7:57:4c:8a:7e:61:76:49:dc:69:da:ac:2a:ec:
e4:52:91:d4:0f:c8:65:87:23:02:1d:ab:70:e6:b9:63:72:06:
97:12:30:91:52:0e:a9:4b:a9:6a:bb:fd:4e:46:ae:5e:a0:e6:
e7:3e:33:ea:a0:0f:ff:84:48:7c:d4:72:11:44:86:43:1e:f2:
bb:1a:0e:03:bf:e6:34:fa:a5:5c:07:c3:b4:c7:3d:a6:2d:a9:
95:10:12:18:fe:3c:04:02:7d:84:85:e4:cf:32:fd:07:aa:91:
b1:2b:df:7f:94:d7:bb:e5:72:43:1f:7e:89:24:5a:10:73:f3:
b2:d3:7c:a6:b0:cd:a8:a1:a7:20:95:f3:3f:46:52:e6:02:c1:
51:35:65:e6:c9:2c:9e:c1:ff:93:62:aa:f3:e4:91:43:31:79:
c6:cd:46:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:39:06 2025 by rpki-client