Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ND_SECURE/1aqXuwJs3MTLb8I7A1jkteJhZE8.roa
File: 1aqXuwJs3MTLb8I7A1jkteJhZE8.roa (raw, json)
Hash identifier: eq+sGvC2IMQmVu2f20iCULGx6HeaEXRopzWY+ju8/3E=
Subject key identifier: D5:AA:97:BB:02:6C:DC:C4:CB:6F:C2:3B:03:58:E4:B5:E2:61:64:4F
Certificate issuer: /CN=938EB4AB05A861667FD03554ACFB836A2CFDC9DB
Certificate serial: 03
Authority key identifier: 93:8E:B4:AB:05:A8:61:66:7F:D0:35:54:AC:FB:83:6A:2C:FD:C9:DB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/k460qwWoYWZ_0DVUrPuDaiz9yds.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ND_SECURE/1aqXuwJs3MTLb8I7A1jkteJhZE8.roa
Signing time: Thu 07 Dec 2023 07:38:11 +0000
ROA not before: Thu 07 Dec 2023 07:38:11 +0000
ROA not after: Thu 05 Dec 2024 15:30:20 +0000
asID: 150758
IP address blocks: 210.87.108.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938EB4AB05A861667FD03554ACFB836A2CFDC9DB
Validity
Not Before: Dec 7 07:38:11 2023 GMT
Not After : Dec 5 15:30:20 2024 GMT
Subject: CN=D5AA97BB026CDCC4CB6FC23B0358E4B5E261644F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f2:5c:3e:78:39:5d:28:5b:a6:d4:98:84:10:
d6:3a:22:98:a7:b0:e7:d3:66:28:56:08:fb:57:eb:
02:15:54:cd:7a:9b:90:69:27:7f:e4:77:0b:5d:f6:
87:8b:3d:48:a3:92:25:c2:ee:a3:73:d8:f5:d0:e3:
8d:6d:3c:d7:62:61:c1:f7:be:08:14:46:97:ae:0c:
77:35:19:60:fa:5a:6e:39:db:78:87:51:37:6f:f8:
79:78:64:e2:dc:39:8d:d3:4e:f1:5d:9d:8b:10:7a:
25:e6:e4:9b:b5:de:d2:44:46:c1:c2:b8:06:fc:10:
a2:db:88:0b:61:d0:7e:c2:a7:e4:b2:62:46:d4:53:
68:7a:0e:77:3d:de:0f:bb:df:5a:66:47:96:06:9f:
bc:e0:26:75:3c:dc:f8:92:cb:f1:6c:83:b0:a5:d2:
3c:53:1e:87:40:e8:59:3f:14:f9:58:ac:03:cf:d2:
7a:9d:0d:2e:3d:b4:a2:5f:69:2c:b2:19:6e:ac:6d:
5a:c2:a8:91:46:16:85:d4:dd:d4:6c:5e:0f:f3:4d:
03:f4:a8:f5:92:ed:38:77:ba:4a:0b:8c:b2:58:17:
0b:df:b8:54:95:e6:65:8f:ba:d7:77:3d:d2:b7:b6:
cc:ab:fd:76:4e:0f:bb:6a:72:fd:b6:4f:ee:c7:50:
f1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AA:97:BB:02:6C:DC:C4:CB:6F:C2:3B:03:58:E4:B5:E2:61:64:4F
X509v3 Authority Key Identifier:
keyid:93:8E:B4:AB:05:A8:61:66:7F:D0:35:54:AC:FB:83:6A:2C:FD:C9:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ND_SECURE/k460qwWoYWZ_0DVUrPuDaiz9yds.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/k460qwWoYWZ_0DVUrPuDaiz9yds.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ND_SECURE/1aqXuwJs3MTLb8I7A1jkteJhZE8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.87.108.0/23
Signature Algorithm: sha256WithRSAEncryption
66:20:83:c9:b3:8c:22:13:00:49:c7:f5:c8:6a:ab:cc:89:a7:
52:b2:1f:68:89:7d:cb:98:aa:7c:9a:ff:c2:fc:68:3c:05:4c:
f2:e5:56:f2:32:14:2d:e2:c0:13:9e:c2:09:f0:30:4c:94:2c:
9c:6b:2e:15:77:34:3b:64:f2:20:35:d6:81:9b:a6:06:b9:d5:
c3:fb:95:67:6c:a6:c7:dc:fe:73:6b:fa:e4:f0:c9:17:3d:d8:
10:1a:a1:58:e9:62:0a:aa:ea:5c:83:e7:be:06:9a:c0:72:77:
8e:8a:fd:42:d4:c6:f7:f4:4b:76:ff:3f:8c:5e:2a:69:8d:de:
06:2e:89:bc:d7:b5:d1:a6:b6:cd:64:43:7e:b6:19:40:6e:30:
0f:a4:8b:f2:15:4e:95:e0:6d:6b:5f:cf:10:0b:cc:b5:ec:b4:
ea:4f:11:ff:ca:b7:0f:d4:cd:56:a3:71:fa:58:66:19:a5:13:
bd:b9:ed:dd:0d:46:41:16:7b:7f:b7:2e:27:a6:e2:51:bc:e4:
64:d5:39:86:db:d5:07:f2:6b:33:75:c6:ee:11:a2:7a:4f:ea:
67:ef:d6:fe:87:6a:bc:b9:d5:90:7a:2f:24:5a:2f:a9:51:e9:
d0:93:eb:b3:91:58:34:d6:dc:1b:f6:c5:50:18:e6:b9:88:b9:
e2:4c:6f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:37:50 2025 by rpki-client