Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ISHISH/vve5LoNg3z14nzfLaDWdnL4TqC8.roa
File: vve5LoNg3z14nzfLaDWdnL4TqC8.roa (raw, json)
Hash identifier: u42HGZcfhCG8gD4t+tEiWRYvv8ABbawGuOx3s3dvLvc=
Subject key identifier: BE:F7:B9:2E:83:60:DF:3D:78:9F:37:CB:68:35:9D:9C:BE:13:A8:2F
Certificate issuer: /CN=7E17D923AA0BC6B0A08B5A187BEE9CADE8D50EAF
Certificate serial: 07
Authority key identifier: 7E:17:D9:23:AA:0B:C6:B0:A0:8B:5A:18:7B:EE:9C:AD:E8:D5:0E:AF
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/fhfZI6oLxrCgi1oYe-6crejVDq8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/vve5LoNg3z14nzfLaDWdnL4TqC8.roa
Signing time: Tue 08 Mar 2022 12:41:56 +0000
ROA not before: Tue 08 Mar 2022 12:41:56 +0000
ROA not after: Tue 07 Mar 2023 02:33:36 +0000
asID: 38047
IP address blocks: 2400:5ea0::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E17D923AA0BC6B0A08B5A187BEE9CADE8D50EAF
Validity
Not Before: Mar 8 12:41:56 2022 GMT
Not After : Mar 7 02:33:36 2023 GMT
Subject: CN=BEF7B92E8360DF3D789F37CB68359D9CBE13A82F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:df:56:fa:6f:f7:10:72:22:44:ff:41:f0:a3:
70:be:55:34:37:de:1f:e1:ac:14:ed:fd:27:c2:df:
69:ab:8a:b0:b5:eb:2a:dd:75:aa:d6:8d:03:20:89:
81:ee:67:6c:6a:6d:41:e7:7a:82:b1:2e:c1:4b:58:
84:ac:ee:b8:43:33:07:ae:18:66:db:e5:77:b3:33:
0b:bb:76:34:52:f7:35:0a:14:02:7b:a5:f6:48:d2:
b3:77:e3:1a:4f:93:50:28:cc:04:92:8b:d9:8c:17:
0d:ac:c4:cf:40:10:23:56:15:1b:02:5e:48:02:9a:
08:29:56:49:1c:c4:da:ab:9e:9f:ce:5a:ad:7b:ec:
f6:64:96:7e:16:e3:2a:e2:3f:6a:48:7b:41:6a:6c:
d3:51:5c:26:7f:d4:b0:f1:6e:5e:84:7b:cb:cc:c2:
46:3a:0e:15:8f:a2:e2:6a:e6:b6:1d:b1:ae:cc:46:
86:85:bd:50:e4:a5:fc:35:2a:cf:4a:4e:89:69:2f:
92:ea:e4:d0:70:09:f8:a6:88:c3:91:76:97:9b:5f:
94:92:47:93:5d:11:20:a6:35:52:88:ee:55:96:75:
e0:82:1a:6a:56:e0:c3:41:9d:65:ff:77:4a:74:24:
f2:e4:7c:b7:b6:69:be:4a:cb:36:ef:be:45:c2:f6:
a3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F7:B9:2E:83:60:DF:3D:78:9F:37:CB:68:35:9D:9C:BE:13:A8:2F
X509v3 Authority Key Identifier:
keyid:7E:17:D9:23:AA:0B:C6:B0:A0:8B:5A:18:7B:EE:9C:AD:E8:D5:0E:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/fhfZI6oLxrCgi1oYe-6crejVDq8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fhfZI6oLxrCgi1oYe-6crejVDq8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ISHISH/vve5LoNg3z14nzfLaDWdnL4TqC8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:5ea0::/32
Signature Algorithm: sha256WithRSAEncryption
98:97:e4:66:70:bd:b8:c0:39:f2:cd:26:90:44:15:19:6f:e3:
31:5b:1e:fe:63:18:f1:00:63:83:83:b3:1b:0d:fd:ee:0c:5e:
6c:a5:17:9b:61:75:45:3e:5f:92:04:d7:15:98:67:ff:d6:2b:
ac:b0:c1:17:d1:b2:d7:f6:26:3a:4c:01:e8:aa:9f:6e:dd:f5:
8c:5b:fb:fc:0b:de:68:fb:5a:ce:b3:84:41:7f:22:25:e2:86:
a1:d0:fa:59:8d:06:e8:dc:ef:11:13:0a:fb:cc:79:22:7d:fe:
9d:ac:4f:81:92:13:38:4f:bb:87:c2:e3:c5:96:b6:36:b0:08:
e4:36:d1:19:27:76:01:a3:14:3e:5b:87:29:0a:2c:7d:2e:ae:
d4:61:8e:ce:75:8e:68:13:a1:51:89:f8:43:a3:0d:82:28:af:
9b:b3:04:03:f6:ad:fc:f0:c2:ba:7b:19:7a:b0:c9:43:08:b8:
bb:02:ab:ea:36:d8:20:69:4b:c1:e9:d9:9c:b8:f1:4a:03:4a:
20:24:1c:5c:49:28:f4:5a:1f:b2:d0:41:00:24:61:c1:88:f9:
24:74:68:27:51:aa:3f:b3:44:c0:7e:fc:d2:7e:ff:bb:1a:bb:
5d:24:88:ad:a1:57:3a:58:a5:47:8f:9d:ce:cf:1a:98:b9:5a:
a6:ec:28:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:20:55 2025 by rpki-client