Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NARL/TpJeyrGaJOc4nzIDbkB2akJ3plE.roa
File: TpJeyrGaJOc4nzIDbkB2akJ3plE.roa (raw, json)
Hash identifier: fZKOe6mIgwTi+fsTv6kwUlJZ2qaxjrH6YRRiMxpAZNM=
Subject key identifier: 4E:92:5E:CA:B1:9A:24:E7:38:9F:32:03:6E:40:76:6A:42:77:A6:51
Certificate issuer: /CN=451EF9359A984F6A4CF91FE9004EAEB089A984C0
Certificate serial: 0B3D
Authority key identifier: 45:1E:F9:35:9A:98:4F:6A:4C:F9:1F:E9:00:4E:AE:B0:89:A9:84:C0
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/RR75NZqYT2pM-R_pAE6usImphMA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/TpJeyrGaJOc4nzIDbkB2akJ3plE.roa
Signing time: Fri 01 Sep 2023 09:21:35 +0000
ROA not before: Fri 01 Sep 2023 09:21:35 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 7539
IP address blocks: 203.145.200.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2877 (0xb3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=451EF9359A984F6A4CF91FE9004EAEB089A984C0
Validity
Not Before: Sep 1 09:21:35 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=4E925ECAB19A24E7389F32036E40766A4277A651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:71:da:dd:20:9a:e7:81:9d:4d:f5:ca:50:01:
b9:8f:52:57:b3:f4:cc:fe:e0:76:ef:73:4a:9b:e0:
e4:86:01:98:eb:44:ca:73:db:b1:05:1b:20:46:42:
f2:0a:ad:c0:4c:f4:05:f0:ef:9a:1d:b8:b0:44:6d:
bc:dc:2f:ec:08:0d:b2:2f:89:66:a2:7e:91:29:27:
f7:bf:78:c8:b1:a6:17:d7:8f:5a:67:82:20:40:63:
93:b0:0c:44:a8:da:ac:6c:ef:87:24:4d:7d:75:e8:
43:ec:12:70:26:94:33:1f:1c:82:a3:0e:62:d8:8f:
40:73:20:65:be:0a:65:de:9c:1b:b0:77:64:74:3c:
51:cd:57:6d:99:1c:ad:99:28:a7:c6:af:f2:8c:6f:
9f:13:46:dd:8c:7e:50:1b:c3:e8:0c:84:2d:2e:a0:
b6:00:89:9e:39:9c:9c:7a:15:8d:5a:a2:12:65:2e:
26:cc:b1:65:e5:df:31:01:2e:12:3a:fa:5f:7a:24:
8c:34:fc:3d:40:ce:77:93:1e:78:7d:74:75:17:01:
19:2a:15:7c:78:e6:6c:b2:9a:b8:d1:45:6f:fd:c5:
c5:6f:55:98:48:7c:8d:94:40:42:94:bc:9d:63:2b:
27:60:40:fc:24:b9:65:d4:02:d8:81:d0:62:1a:be:
d9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:92:5E:CA:B1:9A:24:E7:38:9F:32:03:6E:40:76:6A:42:77:A6:51
X509v3 Authority Key Identifier:
keyid:45:1E:F9:35:9A:98:4F:6A:4C:F9:1F:E9:00:4E:AE:B0:89:A9:84:C0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/RR75NZqYT2pM-R_pAE6usImphMA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/RR75NZqYT2pM-R_pAE6usImphMA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NARL/TpJeyrGaJOc4nzIDbkB2akJ3plE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.145.200.0/21
Signature Algorithm: sha256WithRSAEncryption
67:2b:0c:c6:6c:6c:ba:2c:44:7a:24:9f:ab:c8:96:a9:ae:91:
ac:19:71:9c:a1:4a:77:42:92:08:7e:09:5b:09:0b:94:46:d1:
42:56:50:f5:2f:41:3b:f9:6a:7c:da:29:73:95:b0:32:36:e0:
19:72:09:bf:01:cb:19:0e:6c:d5:22:fe:db:fc:58:ac:2c:47:
67:11:21:7b:ce:21:0f:c8:29:fe:e3:f3:c6:74:86:4c:96:58:
4f:2d:ba:cf:5c:78:b9:d5:46:5d:c6:d6:1b:8a:64:de:32:13:
45:c4:82:33:ac:28:7e:9e:9b:27:3c:ca:d5:d9:f3:90:aa:f4:
a5:eb:c8:a0:f0:a4:a6:fc:e8:f9:ef:ba:8f:50:b2:97:3b:fa:
2f:9b:6f:a7:a6:3b:d3:af:61:71:df:8f:d4:83:90:c8:c4:d9:
20:0c:f6:d7:d1:e1:c4:4c:b7:49:e3:39:a0:d6:5b:b0:ab:62:
5e:1d:d1:fe:c7:b0:3e:75:be:db:da:62:41:9e:b0:74:64:84:
27:41:b9:92:e2:0a:ac:dd:f6:11:16:45:15:21:04:cc:e0:6e:
6f:4f:a0:0f:f1:69:7c:49:3c:18:1b:7e:7f:e4:7e:c4:83:c1:
cc:3d:62:f9:c3:50:df:52:38:9d:c9:72:a5:e0:90:04:07:6d:
e1:70:50:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:45:06 2025 by rpki-client