Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/1hVAeYza-pKwJNGP1QVuKz2jo3g.roa
File: 1hVAeYza-pKwJNGP1QVuKz2jo3g.roa (raw, json)
Hash identifier: 8RinClP/Prv/ruPVFOpZyrrWX3GZpvaa+31nBwff7/s=
Subject key identifier: D6:15:40:79:8C:DA:FA:92:B0:24:D1:8F:D5:05:6E:2B:3D:A3:A3:78
Certificate issuer: /CN=0264A41A741E5F00AED2BD7E4A7A42F5B1D758D5
Certificate serial: A2
Authority key identifier: 02:64:A4:1A:74:1E:5F:00:AE:D2:BD:7E:4A:7A:42:F5:B1:D7:58:D5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AmSkGnQeXwCu0r1-SnpC9bHXWNU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/1hVAeYza-pKwJNGP1QVuKz2jo3g.roa
Signing time: Sun 31 Mar 2024 14:36:09 +0000
ROA not before: Sun 31 Mar 2024 14:36:09 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 134823
IP address blocks: 202.153.4.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162 (0xa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0264A41A741E5F00AED2BD7E4A7A42F5B1D758D5
Validity
Not Before: Mar 31 14:36:09 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=D61540798CDAFA92B024D18FD5056E2B3DA3A378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4f:ef:c8:ed:d9:a6:fa:e8:6c:ff:01:56:90:
d4:56:03:e8:a9:cd:71:9a:e2:49:bf:bf:3b:88:60:
21:68:a4:33:87:55:35:8d:b3:fe:9b:dc:41:ac:74:
8a:f0:ee:23:be:87:67:8c:f0:66:fe:e0:f8:eb:92:
4b:71:7a:e2:4b:f8:a7:74:5a:e1:c5:3e:ee:ae:b4:
f9:6f:9d:cb:d3:f2:3f:9e:f4:d2:6a:fb:27:ea:67:
b6:89:de:e6:2b:dc:bb:ea:60:69:ce:41:a6:0b:c5:
4b:1e:17:b4:51:f8:82:26:62:5c:b7:ef:3e:54:b4:
78:b2:4c:a1:e5:5f:27:f6:ea:59:64:7f:3f:73:2f:
76:14:3e:e3:1c:27:ce:a3:89:7f:4a:2d:51:f6:e4:
ad:59:80:0f:3d:68:82:cc:54:89:b4:08:7b:6e:75:
b5:86:59:cd:0c:34:cf:14:72:99:ad:67:ae:96:0f:
11:c3:bf:ae:3e:e7:37:fe:22:5d:eb:de:3c:93:f4:
fb:fd:a6:18:77:a6:ec:01:43:42:9b:6c:91:7a:67:
a5:55:92:3e:0b:8e:1a:a2:95:53:32:e9:77:32:9f:
5b:bc:bc:00:a5:af:82:d5:8c:2c:0c:46:ea:a1:ee:
7a:8e:45:48:03:b5:64:7e:07:cb:a0:75:27:0c:11:
46:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:15:40:79:8C:DA:FA:92:B0:24:D1:8F:D5:05:6E:2B:3D:A3:A3:78
X509v3 Authority Key Identifier:
keyid:02:64:A4:1A:74:1E:5F:00:AE:D2:BD:7E:4A:7A:42:F5:B1:D7:58:D5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/AmSkGnQeXwCu0r1-SnpC9bHXWNU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AmSkGnQeXwCu0r1-SnpC9bHXWNU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SDCL-TW/1hVAeYza-pKwJNGP1QVuKz2jo3g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.153.4.0/23
Signature Algorithm: sha256WithRSAEncryption
01:b4:f1:5c:0d:6b:50:a4:06:a4:1a:c1:13:51:2d:0c:0a:08:
5a:b0:cf:55:45:ba:ac:01:45:22:f4:45:da:1a:e8:39:4f:8a:
1e:c6:5f:86:93:d5:3b:dd:97:0c:58:7a:0b:a2:61:f9:a2:54:
c9:58:8c:be:42:9f:43:ea:64:dc:87:87:47:26:24:3a:37:ab:
84:94:0d:4c:31:8d:b4:6b:77:42:3a:e7:7e:86:14:88:d1:ea:
e4:76:a4:80:d9:c1:96:ad:f1:c5:7b:03:34:f9:de:0e:55:48:
a5:d0:eb:7a:6f:f4:c4:fe:20:3c:dd:c0:69:64:f7:2a:70:31:
83:ed:44:5d:7e:5f:ea:3c:ee:e4:71:90:a4:4a:9d:5b:2e:ff:
af:e2:c4:f5:e4:fd:ea:be:68:3a:4e:29:46:fb:bd:0c:3b:9c:
c4:ab:a2:0b:3b:84:51:21:bd:0d:30:53:86:df:4d:26:62:2d:
d0:5e:47:80:76:3b:2a:3e:34:95:6b:56:82:6c:d9:8e:46:d1:
36:d3:47:ad:5e:b3:e0:68:72:7a:4a:34:98:1c:37:d3:3e:64:
e0:bf:49:19:17:a2:d4:f4:d8:45:58:20:eb:8f:7b:89:d9:62:
ea:a8:b7:f0:07:f6:fd:2b:25:02:65:f4:cb:da:d3:81:10:31:
bd:7c:11:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:35:48 2025 by rpki-client