Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/EdPBkAJpagwHt47S8BMz63Hq9Ps.roa
File: EdPBkAJpagwHt47S8BMz63Hq9Ps.roa (raw, json)
Hash identifier: 1ZxSGIpFyjLDI/u+kcmJRwISYMyyoJDyPweowOHVyfI=
Subject key identifier: 11:D3:C1:90:02:69:6A:0C:07:B7:8E:D2:F0:13:33:EB:71:EA:F4:FB
Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial: 07A1
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/EdPBkAJpagwHt47S8BMz63Hq9Ps.roa
Signing time: Tue 29 Sep 2020 09:59:47 +0000
ROA not before: Tue 29 Sep 2020 09:59:47 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18049
IP address blocks: 61.61.72.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1953 (0x7a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Validity
Not Before: Sep 29 09:59:47 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=11D3C19002696A0C07B78ED2F01333EB71EAF4FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:39:e0:ef:b4:41:b8:46:05:65:39:ec:83:89:
06:34:72:92:d7:a1:45:2f:29:68:97:f0:c4:13:62:
9e:97:51:55:35:89:1b:6c:b4:51:0e:ee:75:8d:fb:
73:3f:57:1a:3e:ed:6f:72:db:5f:14:27:13:dd:ca:
35:e3:1b:b6:06:bd:ad:2c:82:48:9a:8d:58:66:ef:
d2:59:9e:b9:f8:45:af:f0:ee:7a:01:e3:4c:0d:38:
e6:23:54:f2:93:bf:a4:86:91:f7:19:5f:f8:df:76:
e7:42:4b:ba:b8:7c:d7:ca:de:d1:46:06:c8:fb:de:
ce:0e:a9:61:cc:cd:33:73:1a:8d:86:34:03:85:90:
79:6b:c4:10:90:c6:07:e1:38:d9:1d:3c:ab:cc:33:
a4:58:30:6f:dd:41:90:c0:5a:2a:c4:3a:40:fb:90:
0c:e2:d2:39:09:f5:47:06:9e:d2:e2:c5:eb:33:fd:
de:fc:c3:51:08:0a:6d:a0:a5:39:52:d6:54:82:3c:
ca:f7:65:95:21:6c:84:5a:84:28:0e:7e:4f:0c:01:
4d:fd:24:69:b5:72:90:c3:47:a0:a8:1b:4a:7f:ca:
ba:6b:1b:5c:4d:a4:4d:a1:a8:8e:84:ba:06:71:3d:
4f:f3:ee:cb:d0:ff:da:9e:5d:e1:a5:27:44:79:42:
cd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D3:C1:90:02:69:6A:0C:07:B7:8E:D2:F0:13:33:EB:71:EA:F4:FB
X509v3 Authority Key Identifier:
keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/EdPBkAJpagwHt47S8BMz63Hq9Ps.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.72.0/22
Signature Algorithm: sha256WithRSAEncryption
46:1c:58:a7:d9:56:c1:5d:2d:00:80:8f:c4:94:d8:1f:12:01:
0d:e8:45:1b:8d:95:96:ee:4f:0c:b7:15:f9:9f:62:25:86:97:
f5:55:c1:86:ef:71:37:bc:50:bd:51:64:b1:10:94:3b:db:02:
ad:bc:e6:f1:38:03:3d:4c:12:b5:e6:72:cd:af:10:41:07:54:
23:54:63:01:f5:2b:1a:4f:18:ff:4c:65:86:a3:d5:13:65:09:
b0:d6:56:68:2f:6d:90:00:61:42:a2:ba:39:88:37:7e:e5:5b:
70:01:87:1c:50:b9:6a:b8:b3:98:13:d7:78:cc:77:db:9c:aa:
72:0f:bf:6f:71:ba:0e:6d:8a:db:81:ad:ad:8f:01:b0:68:20:
4f:02:ac:5f:ce:06:c8:ac:42:09:2a:ee:8a:bb:e0:f8:74:70:
59:ff:99:58:75:fa:37:72:81:fc:46:71:89:93:cc:f3:cd:bc:
dd:c1:95:7d:4c:33:8d:06:b6:85:9e:c3:27:0e:8c:4c:e0:53:
2b:b4:0c:76:cc:47:80:ce:86:11:bc:cc:b7:9b:1a:af:e1:a4:
74:91:65:2c:84:cd:32:a2:e6:45:a1:4b:a5:ed:db:09:61:04:
68:20:fd:41:50:58:3b:65:9f:f1:50:06:11:9f:9a:91:3e:73:
5e:99:fb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:24:46 2025 by rpki-client