Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KBT/jhNaOxiW1GSkl2EqVRktT8KcWQg.roa
File: jhNaOxiW1GSkl2EqVRktT8KcWQg.roa (raw, json)
Hash identifier: Y99fbia3dXxH7X0Cnhp2yXx6+SG7PAtjXxL9wvOpNQc=
Subject key identifier: 8E:13:5A:3B:18:96:D4:64:A4:97:61:2A:55:19:2D:4F:C2:9C:59:08
Certificate issuer: /CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C
Certificate serial: 079B
Authority key identifier: 2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/jhNaOxiW1GSkl2EqVRktT8KcWQg.roa
Signing time: Tue 29 Sep 2020 10:04:27 +0000
ROA not before: Tue 29 Sep 2020 10:04:27 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18018
IP address blocks: 58.86.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1947 (0x79b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DBED751DA8F01930418E2DE2432D0D03A97DA7C
Validity
Not Before: Sep 29 10:04:27 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8E135A3B1896D464A497612A55192D4FC29C5908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:eb:76:07:be:04:d6:5e:9a:2f:11:7b:64:65:
df:d1:8e:6f:84:73:a3:57:45:ef:ee:d5:a1:43:4f:
43:4c:53:15:8c:71:59:b1:c1:fc:9d:bd:b2:c9:5b:
23:d5:f3:9d:53:44:95:ac:af:71:d4:90:97:67:96:
4d:b5:80:99:d8:6b:ee:49:19:8d:40:91:1d:7a:ec:
55:17:95:14:ef:e3:22:80:9f:97:1e:d2:6e:76:43:
39:a0:ff:af:b4:7c:56:04:00:d5:ae:48:32:80:61:
0b:c4:94:53:37:2d:d8:10:d8:04:f4:76:89:b4:34:
12:53:e8:fa:f9:8c:bb:a4:ff:c9:d8:95:a4:84:1d:
01:d3:4e:24:1d:52:28:0d:91:7a:92:79:c6:c4:bd:
47:fb:f4:13:e2:6d:a4:25:f6:12:fd:e5:ec:6f:85:
cb:4c:21:e2:2b:fc:34:39:3e:9d:e2:bd:ca:53:c9:
71:34:cb:4f:24:b7:f8:38:75:56:14:0b:4f:b9:6d:
4d:5e:f3:c7:04:26:05:46:f9:03:b3:49:8d:c1:88:
8a:30:1d:36:f9:d0:bd:9d:4f:9c:6b:70:d3:b2:8f:
ed:c9:77:e7:f7:b6:bc:e2:ec:5a:9b:a5:a5:23:92:
e8:98:eb:df:9c:de:6e:6e:e7:74:03:21:b1:96:ba:
42:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:13:5A:3B:18:96:D4:64:A4:97:61:2A:55:19:2D:4F:C2:9C:59:08
X509v3 Authority Key Identifier:
keyid:2D:BE:D7:51:DA:8F:01:93:04:18:E2:DE:24:32:D0:D0:3A:97:DA:7C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lb7XUdqPAZMEGOLeJDLQ0DqX2nw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KBT/jhNaOxiW1GSkl2EqVRktT8KcWQg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
58.86.46.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:25:66:0d:92:2c:e8:c0:de:22:22:63:46:72:71:18:43:c9:
49:eb:9c:ab:8b:8c:18:3d:9e:63:d8:0d:7f:99:1a:7d:8f:f1:
fd:53:6d:ee:8f:86:1c:c9:76:57:88:5c:a8:cf:c2:0b:31:7d:
0f:5a:9b:7e:52:17:a6:46:3f:71:e9:9e:2e:67:40:18:8a:07:
7c:ce:71:ca:93:20:bf:01:e0:03:c2:35:85:29:29:c2:29:35:
93:3b:28:cd:e5:47:5a:e0:e4:00:bb:9d:21:50:26:d0:63:56:
1d:c8:08:17:8b:f2:2e:c9:1d:8c:d2:f5:e7:46:fa:f3:c0:d4:
e3:2f:06:31:98:50:de:e7:ff:7e:ed:59:b1:b3:59:f7:74:39:
a2:0f:3a:ff:9a:e9:86:74:19:2b:3b:5d:dd:25:2a:c0:cb:a6:
45:82:d7:a6:5f:fd:54:38:f4:37:e4:71:1b:05:d1:33:8d:3a:
03:51:16:d9:0c:3b:c6:7b:92:ae:36:9a:95:64:21:d0:c3:58:
ad:0b:f2:68:1b:84:48:19:05:92:33:7b:9f:53:53:ab:27:db:
9b:76:f5:4b:d9:8a:a8:17:2e:ff:da:3f:b4:81:78:0c:d6:b2:
69:92:1a:65:fb:5d:0d:60:34:85:55:ee:55:3f:37:80:17:8e:
d2:c8:3d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:32 2025 by rpki-client