Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NARL/Lx7AjjnSpsfZQydFU7vlAqHLUJM.roa
File: Lx7AjjnSpsfZQydFU7vlAqHLUJM.roa (raw, json)
Hash identifier: 3ldJvdaKoUanSle0o409ZOfVtm59dVxDmdvvQiJ+GFc=
Subject key identifier: 2F:1E:C0:8E:39:D2:A6:C7:D9:43:27:45:53:BB:E5:02:A1:CB:50:93
Certificate issuer: /CN=451EF9359A984F6A4CF91FE9004EAEB089A984C0
Certificate serial: 095E
Authority key identifier: 45:1E:F9:35:9A:98:4F:6A:4C:F9:1F:E9:00:4E:AE:B0:89:A9:84:C0
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RR75NZqYT2pM-R_pAE6usImphMA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/Lx7AjjnSpsfZQydFU7vlAqHLUJM.roa
Signing time: Wed 29 Sep 2021 02:52:45 +0000
ROA not before: Wed 29 Sep 2021 02:52:45 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18183
IP address blocks: 2001:4500::/32 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2398 (0x95e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=451EF9359A984F6A4CF91FE9004EAEB089A984C0
Validity
Not Before: Sep 29 02:52:45 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=2F1EC08E39D2A6C7D943274553BBE502A1CB5093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e6:18:75:c2:54:1a:e5:7a:8c:45:67:11:28:
a7:02:13:b3:c7:1c:4f:a2:5d:9a:94:d1:d5:ee:86:
ad:50:a3:da:40:d8:8a:f1:cc:3e:87:7c:54:90:c8:
92:76:44:bd:53:00:5c:95:af:2f:0d:e8:ce:2d:b3:
a8:95:76:1f:58:4b:88:fb:07:37:56:1e:f2:d3:0d:
82:a5:1b:01:d1:89:00:88:10:87:dd:3b:19:37:8d:
7e:ca:bc:c4:60:60:ad:c6:9e:5a:e5:fd:de:f4:76:
8b:b2:bb:85:fb:ae:bd:a3:c8:f4:e0:16:be:2f:71:
cc:8a:f6:76:d3:ee:f2:d1:17:ee:fb:40:f1:aa:30:
0c:f4:bc:ba:8f:54:fe:b9:c5:c7:18:78:7f:7f:4e:
a6:99:d1:19:1b:d7:7b:a4:a4:1a:68:78:6d:f0:99:
f7:59:e2:ad:b7:e9:ae:80:57:45:90:7b:fd:a5:39:
5c:3b:c2:10:4a:aa:e0:b2:1b:4e:07:2e:c1:50:61:
d6:cf:44:e2:de:16:f9:3e:85:ef:d8:33:17:58:85:
e1:fb:d8:7d:94:15:b3:b3:de:44:9c:ac:c7:b9:31:
ac:c9:bd:f7:f4:b9:4d:22:04:84:a9:91:fe:5f:81:
71:56:3f:60:65:e6:90:e8:62:b3:8d:08:28:df:9b:
5b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1E:C0:8E:39:D2:A6:C7:D9:43:27:45:53:BB:E5:02:A1:CB:50:93
X509v3 Authority Key Identifier:
keyid:45:1E:F9:35:9A:98:4F:6A:4C:F9:1F:E9:00:4E:AE:B0:89:A9:84:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/RR75NZqYT2pM-R_pAE6usImphMA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RR75NZqYT2pM-R_pAE6usImphMA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/Lx7AjjnSpsfZQydFU7vlAqHLUJM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:4500::/32
Signature Algorithm: sha256WithRSAEncryption
0c:bd:48:61:c2:5c:97:6f:f8:83:50:e0:e9:87:42:0e:96:36:
90:63:7d:55:44:87:40:16:d7:31:24:2a:23:ce:fe:4d:c2:1d:
69:63:46:c3:fe:57:da:81:3b:ea:cd:e9:42:b7:d2:45:d3:9c:
78:5a:68:6d:27:0a:92:71:db:b9:14:c8:23:19:ce:ba:f6:08:
2a:ad:51:c6:64:af:cf:91:19:b4:f5:6c:cc:8f:bc:8c:c8:b4:
cb:4f:aa:9e:16:69:77:85:fe:5e:47:3f:66:f4:cb:d8:3a:96:
d9:f7:8c:ea:f3:f8:9d:2d:55:cc:b1:bd:9a:c1:01:a9:17:e3:
8d:a6:32:a6:8d:86:3a:25:b9:64:ec:44:56:b6:e7:ca:74:38:
f7:ed:9c:65:4b:f8:c1:3c:3c:d9:4e:99:95:a0:2d:1c:ea:c9:
ac:6f:ac:3e:36:16:68:26:48:dd:d7:19:1d:31:3f:b3:62:be:
c6:e8:ab:e7:ee:1b:f2:04:8d:a5:10:8b:55:50:cb:a4:d7:07:
cd:ae:2a:ee:23:e0:9b:0c:a7:44:5f:93:05:a0:e8:e1:8d:95:
82:6f:69:8b:c8:39:d2:b9:2c:40:f6:ef:74:f5:1f:9e:de:03:
86:d1:da:f5:89:04:14:00:e1:b5:95:f0:0e:bc:6c:11:51:f4:
50:0f:35:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:32:54 2025 by rpki-client