Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SINOPAC/KvXciX3F-YXhNXi_VBMCLeJqT18.roa
File: KvXciX3F-YXhNXi_VBMCLeJqT18.roa (raw, json)
Hash identifier: s05XecCgBoz8oKnslU9kpIWULG1FTv/U60lDiAMDV6k=
Subject key identifier: 2A:F5:DC:89:7D:C5:F9:85:E1:35:78:BF:54:13:02:2D:E2:6A:4F:5F
Certificate issuer: /CN=FB4739A5E61A639F566FDE0FDB41208BA3F69BF1
Certificate serial: 0A33
Authority key identifier: FB:47:39:A5:E6:1A:63:9F:56:6F:DE:0F:DB:41:20:8B:A3:F6:9B:F1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-0c5peYaY59Wb94P20Egi6P2m_E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SINOPAC/KvXciX3F-YXhNXi_VBMCLeJqT18.roa
Signing time: Thu 15 Sep 2022 02:49:04 +0000
ROA not before: Thu 15 Sep 2022 02:49:04 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18045
IP address blocks: 211.76.144.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2611 (0xa33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB4739A5E61A639F566FDE0FDB41208BA3F69BF1
Validity
Not Before: Sep 15 02:49:04 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2AF5DC897DC5F985E13578BF5413022DE26A4F5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:99:56:22:b7:9e:f7:5b:24:96:fb:9d:6a:44:
b4:c6:ce:d6:a3:05:06:8e:44:ea:e5:ba:f9:7a:f2:
c4:13:37:bd:d4:b6:73:3b:84:8e:f2:00:76:7e:13:
4a:7a:fe:42:58:6f:8a:a0:bd:83:6a:1f:fb:22:98:
ed:75:0c:69:21:0e:15:73:d9:fa:ac:c0:2b:17:56:
40:aa:b0:cd:4e:f7:d1:2f:d7:4d:7d:ea:9b:3e:53:
2f:cf:d4:dc:c1:49:4a:83:1b:78:cd:81:82:d8:f0:
4b:6f:a6:03:dc:fa:cf:f0:f4:d2:5f:39:f9:dd:3e:
82:7f:25:7f:a0:f7:cb:3e:d2:f7:97:ce:12:f0:de:
1b:20:7e:5c:f7:bd:38:49:f6:11:84:7f:aa:fa:ea:
96:5d:01:ec:0c:cc:81:cb:b0:33:88:60:8c:d3:79:
46:51:26:e2:31:9a:4f:71:cf:27:d7:b6:01:36:92:
34:48:fb:11:66:97:37:8c:c3:69:16:e7:f2:36:61:
07:9f:de:b6:c8:a3:c3:cd:aa:8f:4f:aa:5c:9f:3d:
ea:fe:a4:4b:4d:50:2b:ce:de:15:4c:68:73:45:f9:
ce:b8:63:93:5c:06:81:47:4a:15:37:71:14:05:ac:
99:5d:4d:dd:25:82:54:00:4f:84:89:88:2b:47:0f:
24:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F5:DC:89:7D:C5:F9:85:E1:35:78:BF:54:13:02:2D:E2:6A:4F:5F
X509v3 Authority Key Identifier:
keyid:FB:47:39:A5:E6:1A:63:9F:56:6F:DE:0F:DB:41:20:8B:A3:F6:9B:F1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SINOPAC/-0c5peYaY59Wb94P20Egi6P2m_E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-0c5peYaY59Wb94P20Egi6P2m_E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SINOPAC/KvXciX3F-YXhNXi_VBMCLeJqT18.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.144.0/20
Signature Algorithm: sha256WithRSAEncryption
38:34:6d:a6:4a:03:67:80:03:a6:02:15:ce:5f:8f:f5:0f:f3:
00:9c:dc:9a:71:b3:3a:ca:0b:2f:6e:2e:6f:af:96:34:cd:c5:
53:66:61:73:61:74:a6:43:c4:8f:ed:04:7b:a2:23:ca:fc:4a:
ef:b0:63:6d:df:95:65:1a:f8:11:6a:88:f2:0f:64:50:2b:8e:
61:26:58:48:fb:0c:ba:c5:b4:d4:00:4d:88:d6:ce:56:41:b1:
46:f6:f6:34:b4:d5:1e:0d:40:c3:ee:1e:94:14:9c:52:a8:8a:
43:49:4e:b4:f4:98:62:63:84:67:b7:ba:d0:fb:1e:65:00:99:
b3:53:85:d5:2e:73:81:9b:44:36:3a:59:b8:26:b8:e8:3f:a9:
ea:bd:26:85:88:30:3a:43:82:42:af:c5:da:bf:01:39:74:58:
38:63:b8:20:54:8b:79:61:08:0d:6a:45:88:07:fc:b9:11:6a:
ce:bd:29:5d:a5:6d:38:5a:bf:54:71:3c:d7:2f:70:0a:ff:17:
5f:3a:a7:d5:fc:b3:41:90:af:5a:ff:ca:5d:8d:32:bb:9a:63:
50:0e:6c:13:1f:b9:97:8d:b8:07:63:02:4c:2d:18:3f:00:a6:
19:c9:f8:7f:9a:cf:f7:92:e5:4d:d4:0c:a6:bb:3f:fe:bf:44:
36:02:83:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:51:37 2025 by rpki-client