Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KBT/gD0zF4iOiDDOqCY-Pgxf1nvxgnU.roa
File: gD0zF4iOiDDOqCY-Pgxf1nvxgnU.roa (raw, json)
Hash identifier: J7DZYzhcWqAFraWTLV1th22h+FjkUe1bdnIRQGNSQyw=
Subject key identifier: 80:3D:33:17:88:8E:88:30:CE:A8:26:3E:3E:0C:5F:D6:7B:F1:82:75
Certificate issuer: /CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C
Certificate serial: 08ED
Authority key identifier: 2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/gD0zF4iOiDDOqCY-Pgxf1nvxgnU.roa
Signing time: Sun 07 Feb 2021 11:52:48 +0000
ROA not before: Sun 07 Feb 2021 11:52:48 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18042
IP address blocks: 61.63.0.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2285 (0x8ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C
Validity
Not Before: Feb 7 11:52:48 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=803D3317888E8830CEA8263E3E0C5FD67BF18275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e1:dd:12:96:b3:53:07:c4:38:d3:f0:bf:fb:
f3:0c:e0:6d:2c:e4:44:ac:ec:b1:2c:5d:22:62:d2:
f9:f8:7d:c5:f5:a1:c3:94:86:78:ef:ab:4c:88:32:
61:d4:9e:1c:96:f8:db:b0:00:45:cb:c0:f6:f9:fc:
7f:1e:8e:a1:25:d4:cc:e0:1f:ff:bb:d9:30:76:cb:
97:36:32:5b:ab:0a:be:14:cd:f7:7d:80:12:c6:c7:
44:8e:29:a2:43:ba:bf:d6:17:f5:58:6b:c8:d4:8b:
f0:39:bf:ec:6c:d6:7c:61:0a:d8:5a:fe:c9:ec:4a:
1e:a4:db:93:c2:ca:63:e6:86:6a:72:78:d6:82:c4:
6f:b3:23:df:92:e9:1d:66:aa:b2:1b:fe:4e:18:ba:
1e:6e:65:4c:ec:b4:00:2a:3c:09:cc:25:97:5d:ed:
ee:ea:f8:fc:4a:2a:94:7d:71:9a:6a:09:2a:7d:6b:
46:3f:78:40:39:0a:34:b8:93:26:cf:62:e9:58:b9:
11:5d:99:79:3c:f4:58:4b:22:92:b0:e7:51:3e:95:
75:1d:e2:04:24:70:67:8e:93:39:1e:1a:66:49:59:
cb:e2:f1:7b:95:aa:56:84:c1:9f:6b:03:75:d4:b1:
0f:a4:fe:97:21:98:e7:29:0d:80:03:9e:7f:1b:9d:
f3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3D:33:17:88:8E:88:30:CE:A8:26:3E:3E:0C:5F:D6:7B:F1:82:75
X509v3 Authority Key Identifier:
keyid:2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/gD0zF4iOiDDOqCY-Pgxf1nvxgnU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.63.0.0/19
Signature Algorithm: sha256WithRSAEncryption
84:16:11:09:8f:84:0f:08:26:13:88:30:03:dc:e5:74:b3:ef:
a3:5f:d5:65:5e:5f:41:be:9a:df:b9:40:ee:84:16:d8:45:e8:
09:ba:30:b0:58:48:a9:c1:3e:a9:57:9a:65:b9:ac:71:fb:c0:
95:ab:d8:46:f5:6e:4d:5f:1a:2c:58:56:9d:b3:4b:dd:6f:4f:
00:a2:f4:83:80:ef:92:95:16:07:18:f4:85:5f:c6:25:d2:9e:
43:e0:a9:50:0f:07:a6:75:c9:de:7c:ec:72:78:13:12:b6:64:
bc:75:f3:1b:be:c3:2c:42:21:65:e0:7b:e9:a1:02:a4:f5:c4:
66:6c:a7:ed:fc:13:96:f8:1d:76:26:22:e9:0b:0a:0d:dc:18:
35:bb:84:08:6f:5a:25:6d:d0:d9:d1:78:60:34:7f:a0:2f:c2:
07:1e:d6:d6:13:a6:45:b7:f1:39:c4:35:e1:56:cc:21:6d:13:
fd:bc:eb:45:ec:1d:e4:1d:dd:90:e6:d2:9a:02:cb:68:22:2b:
88:06:fc:d8:c1:6a:db:10:cb:9b:48:ac:c7:4e:8c:f3:da:37:
d6:cf:c5:50:ff:bc:46:70:a0:e6:e8:c9:03:a2:7d:70:72:ca:
ae:4a:c9:13:e3:a4:80:d4:96:7d:a0:c7:6f:07:a0:75:72:59:
f2:db:cb:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:35:04 2025 by rpki-client