Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/eeLjX0pKcqkQ_I6oJN0WuR8vCQw.roa
File: eeLjX0pKcqkQ_I6oJN0WuR8vCQw.roa (raw, json)
Hash identifier: DBnpmBD+t7AQgrWnCDhKHoJDaG+qJkPs2kU2IKWsRb0=
Subject key identifier: 79:E2:E3:5F:4A:4A:72:A9:10:FC:8E:A8:24:DD:16:B9:1F:2F:09:0C
Certificate issuer: /CN=ABED28FFCC040E36032C42615495562BCC6EF45C
Certificate serial: 02A6
Authority key identifier: AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/eeLjX0pKcqkQ_I6oJN0WuR8vCQw.roa
Signing time: Thu 17 Dec 2020 07:44:38 +0000
ROA not before: Thu 17 Dec 2020 07:44:38 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9678
IP address blocks: 103.98.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 678 (0x2a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ABED28FFCC040E36032C42615495562BCC6EF45C
Validity
Not Before: Dec 17 07:44:38 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=79E2E35F4A4A72A910FC8EA824DD16B91F2F090C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:21:1b:58:62:10:81:f9:62:89:cc:32:2e:04:
e5:17:28:6c:20:fd:cc:8e:de:e7:b5:22:b0:1c:2e:
07:c0:1e:27:b1:f9:71:20:bc:dc:f7:b3:3f:40:b4:
24:c7:0a:ed:0a:ad:cb:a9:48:90:8f:1b:5b:95:bc:
2e:fb:85:b5:8d:c5:fa:7d:ec:f9:e7:08:52:3d:b3:
60:32:af:97:50:5f:33:41:b6:1e:f6:e0:17:c2:df:
ab:5e:db:3c:8c:5a:30:9d:bc:9a:5c:21:de:ce:26:
e4:bb:18:8f:96:e9:54:9f:20:0a:f7:b3:44:15:c5:
ab:7b:29:9c:13:c2:c2:b9:86:13:af:f4:2e:90:15:
7d:77:76:34:5f:4d:21:42:30:9e:d0:78:67:e4:17:
10:1f:2d:ab:dc:61:a1:b8:ac:ef:98:30:dd:56:9f:
88:72:8f:7a:52:4c:9d:98:38:06:1e:d7:eb:51:77:
17:7b:84:57:a0:af:ad:e3:43:19:3c:04:cc:eb:28:
31:f1:22:32:a8:4f:65:e7:c9:19:04:c5:4d:2f:10:
2d:8e:43:9c:e3:41:22:d7:2e:50:59:2c:44:b8:4b:
34:4a:ae:90:e0:b3:a7:b8:69:f0:a7:5d:b9:61:b0:
56:61:1e:e8:74:09:dc:b6:95:8c:4d:9a:5c:ce:00:
ed:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E2:E3:5F:4A:4A:72:A9:10:FC:8E:A8:24:DD:16:B9:1F:2F:09:0C
X509v3 Authority Key Identifier:
keyid:AB:ED:28:FF:CC:04:0E:36:03:2C:42:61:54:95:56:2B:CC:6E:F4:5C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/q-0o_8wEDjYDLEJhVJVWK8xu9Fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HOSTIN/eeLjX0pKcqkQ_I6oJN0WuR8vCQw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.98.75.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:cf:1d:fa:58:ed:94:46:92:df:cc:6e:8c:18:ce:d8:b3:c6:
28:28:12:36:34:15:91:22:b2:80:3b:81:4e:8c:bf:81:03:7a:
12:33:97:f2:1a:81:60:88:6d:fb:cd:1b:ca:3b:c8:a3:3a:69:
1d:9a:f6:ce:d4:d1:0f:30:6e:bb:b4:c3:95:11:1d:1e:76:62:
d9:69:f7:8e:05:56:06:cd:50:06:1f:44:4d:a0:6c:1e:e5:4d:
4f:b7:9a:1d:c7:d7:9c:f4:65:28:44:b0:cd:fe:f4:e5:00:6b:
e8:fb:6d:ae:61:50:b5:d9:9d:68:29:c0:ca:4f:e2:2c:00:04:
dd:02:ca:1b:d8:2b:12:e7:a1:13:f0:e1:36:fe:d8:5d:38:90:
99:71:dc:0a:81:a0:31:76:cf:96:ad:43:b1:78:96:b8:9b:06:
be:4e:fc:0c:24:d6:f9:28:ee:e0:10:dd:73:d4:d2:72:24:b9:
53:a8:77:0a:5a:ca:c8:2c:73:c6:b4:8a:e7:44:f2:46:41:75:
f1:45:5a:bd:81:9c:d1:cb:04:38:be:3c:73:ad:80:56:bc:87:
30:59:4c:6a:90:d8:90:87:f3:dc:e0:2e:31:47:23:16:7c:51:
67:a1:b2:98:45:c4:ce:e9:5c:20:bc:f1:f5:a0:25:42:6f:a9:
ff:b2:a3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:14:23 2025 by rpki-client