Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SIGMA/PBxyThRYh_waXRja_FrNNYRPUJ4.roa
File: PBxyThRYh_waXRja_FrNNYRPUJ4.roa (raw, json)
Hash identifier: QQ3oBtZpaA5zNO6zpxZKKsfZs2vTfbO1wr0/s+8aiIs=
Subject key identifier: 3C:1C:72:4E:14:58:87:FC:1A:5D:18:DA:FC:5A:CD:35:84:4F:50:9E
Certificate issuer: /CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Certificate serial: 0AB1
Authority key identifier: 3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/PBxyThRYh_waXRja_FrNNYRPUJ4.roa
Signing time: Thu 15 Sep 2022 02:41:48 +0000
ROA not before: Thu 15 Sep 2022 02:41:48 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 61.60.192.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2737 (0xab1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3BE6C651350E8FA1FC7D0A3EABCF98F81B3119D3
Validity
Not Before: Sep 15 02:41:48 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3C1C724E145887FC1A5D18DAFC5ACD35844F509E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:36:80:dc:e6:ee:ed:66:ae:7b:a3:87:7b:d6:
7d:a1:e3:f8:73:f7:65:0b:e5:59:08:c6:94:e7:a4:
97:4a:ba:49:21:ed:f1:c3:1a:56:f1:0f:82:01:ef:
ee:c4:9e:bd:93:18:81:18:6e:64:d8:1d:47:3b:a9:
78:79:17:b0:fb:28:08:24:21:dc:c0:4d:44:0f:3c:
89:7c:64:58:da:ef:37:4e:3b:5c:56:c3:be:d0:3e:
ea:6f:9e:9e:fd:f9:0c:88:f4:67:3b:0f:46:03:3c:
86:9c:5e:86:e4:dd:c7:87:5f:22:a5:d0:da:87:05:
8a:39:21:46:f8:49:50:1f:07:1c:a4:2d:38:b6:59:
50:df:e5:63:c7:2d:2e:d3:19:31:5b:53:66:64:4e:
05:01:7a:4b:f6:f4:59:1d:73:82:bd:0a:9a:0a:09:
0a:f5:71:0f:6f:fa:1b:f5:57:5a:b1:a5:83:b5:86:
58:01:50:e4:c6:fe:c3:58:36:63:7d:96:54:07:a9:
fa:f8:9b:a9:a5:12:89:59:61:72:04:bf:e6:60:04:
b4:92:1f:37:24:c1:38:a3:82:fe:57:3b:ce:7c:b0:
b4:aa:fd:c9:b8:40:17:81:4d:a2:f2:6f:b1:2f:34:
b7:f1:dd:e5:c5:ac:48:be:69:2b:33:31:31:0b:6b:
8e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:1C:72:4E:14:58:87:FC:1A:5D:18:DA:FC:5A:CD:35:84:4F:50:9E
X509v3 Authority Key Identifier:
keyid:3B:E6:C6:51:35:0E:8F:A1:FC:7D:0A:3E:AB:CF:98:F8:1B:31:19:D3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/O-bGUTUOj6H8fQo-q8-Y-BsxGdM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SIGMA/PBxyThRYh_waXRja_FrNNYRPUJ4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.60.192.0/20
Signature Algorithm: sha256WithRSAEncryption
0e:d4:f2:eb:2f:c3:b8:b6:a3:7b:b4:c0:7a:e1:a9:c2:59:3d:
ab:96:dc:dd:58:ed:5f:56:1b:da:b4:ac:cd:67:f5:f9:b8:5d:
c0:98:87:22:ed:5c:e9:cb:e3:af:8a:06:7d:71:78:aa:16:16:
da:cd:7f:28:d4:55:3a:2e:4b:db:1c:cd:a1:fc:7b:d4:65:1b:
a0:bb:9a:8e:37:d2:81:ec:e6:6f:88:9c:e1:f9:cd:2a:d8:1d:
84:cd:92:a1:fa:38:f7:1c:b1:f4:d3:f2:f0:c4:8a:01:ea:57:
eb:b2:95:43:d0:fb:f2:13:a1:8c:45:b7:b7:b7:7a:c9:e8:0f:
4a:39:71:fb:68:16:fd:bf:a0:6d:d8:1c:02:28:1d:8c:8d:76:
1c:e5:ad:92:2b:10:0d:e7:c3:28:4c:ba:fd:f8:dd:e7:d9:14:
7f:06:8b:72:29:11:7e:67:35:eb:f7:99:5a:18:07:66:5a:60:
9c:e5:23:d2:86:07:47:c4:16:d9:03:e1:c8:06:d2:c8:9f:92:
61:f5:de:14:d4:a3:46:28:ed:d4:4d:aa:8b:76:e2:a8:5f:fa:
20:43:58:75:c5:87:24:4c:20:b2:ad:ed:bb:23:13:93:d2:91:
f4:69:0d:99:91:6c:0c:d1:fa:c2:89:2c:d8:89:c5:6c:5f:27:
f2:b5:6d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:43:46 2025 by rpki-client