Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PIINET/IMFZSNO2thZHX-e1LBKuROb5U7g.roa
File: IMFZSNO2thZHX-e1LBKuROb5U7g.roa (raw, json)
Hash identifier: LlxUQXJDedVwC5daLITrHpBlT+/BckU4X3lScuCFYCY=
Subject key identifier: 20:C1:59:48:D3:B6:B6:16:47:5F:E7:B5:2C:12:AE:44:E6:F9:53:B8
Certificate issuer: /CN=69797BDE8D0581FA299D8E1420ED2957C4208A07
Certificate serial: 0752
Authority key identifier: 69:79:7B:DE:8D:05:81:FA:29:9D:8E:14:20:ED:29:57:C4:20:8A:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/aXl73o0FgfopnY4UIO0pV8Qgigc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/IMFZSNO2thZHX-e1LBKuROb5U7g.roa
Signing time: Tue 29 Sep 2020 10:00:42 +0000
ROA not before: Tue 29 Sep 2020 10:00:42 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 17710
IP address blocks: 61.57.224.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1874 (0x752)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69797BDE8D0581FA299D8E1420ED2957C4208A07
Validity
Not Before: Sep 29 10:00:42 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=20C15948D3B6B616475FE7B52C12AE44E6F953B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:16:b9:86:3a:e0:85:31:b3:6e:fb:76:2e:c5:
52:ef:c1:cc:e2:a6:db:b8:06:aa:45:da:f4:37:2a:
2e:e9:67:10:18:38:99:50:76:af:59:37:e2:1a:1f:
f6:3d:63:3f:cb:83:2b:d0:c1:b0:0a:f5:88:85:35:
cd:ee:c9:29:a0:65:27:fe:f8:eb:1d:de:c3:07:45:
1f:b7:60:9d:3d:84:b7:c0:f7:8e:58:76:db:44:3e:
6d:10:17:ea:5e:b5:5e:c8:a1:bf:df:4d:c3:eb:4f:
1f:2c:c4:46:7d:74:56:bf:7f:80:f5:58:bc:55:c6:
b8:d3:48:57:8f:cf:41:f6:d7:05:42:f9:f2:0f:2d:
75:e6:2b:72:4f:cd:09:8a:d2:b9:d7:50:13:99:82:
ac:b6:c6:f7:6f:f4:25:e8:63:9b:54:fc:cf:47:e5:
32:0e:55:b5:4e:a0:35:19:b9:36:5a:69:02:09:46:
75:01:8f:b7:f5:04:4d:f4:44:c1:43:d1:bc:e3:1a:
ba:53:0b:04:43:04:c3:c8:40:32:c5:6e:b5:9d:ec:
a4:ee:2b:39:00:e5:c4:f3:9c:f3:cf:cd:33:61:59:
d3:7a:2c:fb:c0:24:00:bd:a5:97:9e:9b:4e:07:d6:
bf:9d:a4:34:ab:e2:07:b0:4f:49:b3:ad:01:07:3f:
b0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C1:59:48:D3:B6:B6:16:47:5F:E7:B5:2C:12:AE:44:E6:F9:53:B8
X509v3 Authority Key Identifier:
keyid:69:79:7B:DE:8D:05:81:FA:29:9D:8E:14:20:ED:29:57:C4:20:8A:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/aXl73o0FgfopnY4UIO0pV8Qgigc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/aXl73o0FgfopnY4UIO0pV8Qgigc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PIINET/IMFZSNO2thZHX-e1LBKuROb5U7g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.57.224.0/20
Signature Algorithm: sha256WithRSAEncryption
61:d4:fe:0d:e1:22:32:32:f5:b1:9d:07:40:c4:09:5e:08:7a:
c1:80:d4:f1:3c:a0:1e:dc:12:ea:c1:96:3b:d5:07:bd:d1:de:
5c:8d:48:e1:63:36:6e:f0:4f:f1:05:45:2a:e7:c3:56:b9:1b:
4d:36:8c:ae:f5:a6:fb:45:01:65:20:e1:32:b9:f1:d5:67:92:
59:2b:72:5e:21:17:b4:a4:74:97:af:50:40:30:f9:17:e4:30:
ef:ef:be:e8:15:4b:2c:e2:2b:ea:b4:15:d1:f7:bf:54:38:01:
33:73:6c:c5:69:b2:2e:84:d5:b6:1d:17:d7:61:e3:77:df:e3:
2f:e0:14:6f:af:6c:97:bc:9d:13:30:17:90:83:99:11:97:a2:
79:4f:ca:56:dd:a5:96:a4:1a:11:3d:fb:b7:a2:e5:78:10:e8:
a9:13:ed:05:61:59:15:65:26:4a:1b:80:d5:8b:13:4a:01:a8:
a4:36:09:8b:3c:ed:d8:0c:82:9c:0b:57:b3:9b:2e:66:f3:5d:
a1:9e:26:06:94:b8:0e:2b:e8:02:af:40:8d:2a:9d:f1:e3:e6:
6e:2c:c6:14:13:a3:12:a7:5c:42:4e:8e:e9:df:f3:ff:0c:b2:
8c:16:82:56:bc:95:42:60:d5:fb:58:5d:4e:83:5c:66:c1:62:
00:ea:84:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:36:45 2025 by rpki-client