Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/W5rBB0BtEuvglxEhhnO-1pCNyuw.roa
File: W5rBB0BtEuvglxEhhnO-1pCNyuw.roa (raw, json)
Hash identifier: I2GNEY+LNjGnbykufZa4ze7ReyLdYBMLw+NnOhmRqbs=
Subject key identifier: 5B:9A:C1:07:40:6D:12:EB:E0:97:11:21:86:73:BE:D6:90:8D:CA:EC
Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial: 09DB
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/W5rBB0BtEuvglxEhhnO-1pCNyuw.roa
Signing time: Wed 29 Sep 2021 02:52:17 +0000
ROA not before: Wed 29 Sep 2021 02:52:17 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18049
IP address blocks: 61.61.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2523 (0x9db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Validity
Not Before: Sep 29 02:52:17 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=5B9AC107406D12EBE09711218673BED6908DCAEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cf:98:7a:78:50:b5:42:11:81:0b:85:78:5b:
b7:96:c7:a8:b3:09:26:b6:85:5b:a9:1d:34:97:70:
87:a6:33:28:f9:90:db:7d:cc:c0:28:fd:14:a4:23:
f2:ff:e2:1a:13:32:94:1b:0b:9c:af:8e:3d:94:b9:
53:f7:0f:e4:b3:50:4d:7b:26:35:5c:1c:7e:6a:30:
ef:27:28:59:d7:23:5b:37:eb:98:37:c6:ee:e6:87:
8e:fd:d3:c9:9c:e1:9a:17:23:9b:bc:48:e0:ce:67:
fa:42:3e:5c:b5:71:b8:cd:1f:92:d4:a0:bd:33:be:
73:ce:19:9e:63:ce:64:6e:59:3e:85:2e:af:6a:3b:
e9:85:e4:fe:34:e0:ba:d0:67:fb:d8:8b:99:c5:1c:
a0:86:1e:f2:70:71:3d:08:39:45:3f:24:0c:3f:9b:
93:2f:cc:f1:a9:d8:6b:6f:48:5c:1c:3f:84:75:8e:
3b:da:1c:29:fa:93:b0:c9:3c:31:d8:c4:ac:f4:de:
1f:5d:e5:a3:0d:33:97:6d:4d:e4:18:e4:b7:c7:e4:
8b:54:98:15:d3:33:9a:5e:be:f7:df:45:3c:bf:0c:
96:25:e6:c4:37:7c:5c:d3:db:5b:0e:98:20:34:c9:
9c:ed:56:95:ab:3e:79:5a:5d:61:07:46:4c:bf:43:
ba:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9A:C1:07:40:6D:12:EB:E0:97:11:21:86:73:BE:D6:90:8D:CA:EC
X509v3 Authority Key Identifier:
keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/W5rBB0BtEuvglxEhhnO-1pCNyuw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.16.0/20
Signature Algorithm: sha256WithRSAEncryption
3b:43:c1:b8:f1:ee:fa:0c:c4:b3:eb:57:a6:6f:dc:1e:e6:e1:
a2:0f:c7:e1:c1:b7:63:7f:f8:04:02:b0:18:28:cf:10:c4:23:
09:46:62:3e:4f:c2:5e:a8:43:7f:77:23:44:81:d5:84:51:29:
a4:c1:6f:ba:ee:f7:f3:c6:a4:03:25:5f:a7:6d:5b:4b:44:e6:
e7:84:f2:7b:76:d6:ca:90:96:ee:6a:03:ec:51:51:fd:e4:98:
d2:a6:08:a4:23:3a:ac:c0:d1:19:40:b5:02:ae:44:47:07:95:
c6:73:61:ee:16:c5:00:2a:26:74:7b:1e:ef:94:76:03:37:7f:
25:fa:b7:89:36:86:de:66:b8:47:33:04:46:bb:90:95:2b:f3:
1f:1c:5b:fb:29:52:98:98:3c:23:73:57:1e:ab:34:d5:2c:59:
30:05:c9:85:52:8e:c4:0c:b8:92:8f:35:f1:4d:e1:c8:35:7b:
e7:e2:b4:96:24:48:f4:d1:07:c0:56:46:9c:8d:cd:3c:8b:44:
02:1f:67:26:a4:13:2b:1a:fa:b1:6e:60:71:6a:23:ad:44:d5:
eb:95:a6:c5:f6:de:2f:2c:e2:46:e9:ad:1b:b2:92:2e:d6:2d:
ae:2f:1f:66:cb:3b:29:83:02:62:39:bc:40:e6:ab:a0:30:52:
2e:ef:fa:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:26:52 2025 by rpki-client