Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/EMxykMZpg5U3_juzinB4iHytrzo.roa
File: EMxykMZpg5U3_juzinB4iHytrzo.roa (raw, json)
Hash identifier: UkakVzPM740rpDMqt1ZrSfoSfEf59vjAs6gQiGNB9oo=
Subject key identifier: 10:CC:72:90:C6:69:83:95:37:FE:3B:B3:8A:70:78:88:7C:AD:AF:3A
Certificate issuer: /CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Certificate serial: 09FB
Authority key identifier: DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/EMxykMZpg5U3_juzinB4iHytrzo.roa
Signing time: Thu 07 Apr 2022 06:09:59 +0000
ROA not before: Thu 07 Apr 2022 06:09:59 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131627
IP address blocks: 101.3.132.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2555 (0x9fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Validity
Not Before: Apr 7 06:09:59 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=10CC7290C669839537FE3BB38A7078887CADAF3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:46:70:d0:c7:4a:fc:0a:b3:9a:ea:31:aa:26:
00:05:4c:eb:be:72:cc:5d:1c:c8:ee:7d:87:83:0d:
88:f8:ad:6f:80:57:2d:73:0a:c9:4f:2b:64:c9:f1:
ec:b5:fe:a1:9f:ea:22:9a:d0:82:5d:7f:03:ca:d3:
2d:f6:d2:a2:20:d2:6c:63:95:39:c2:f9:7c:e2:5c:
b2:27:32:80:25:71:70:97:b0:98:f4:91:ea:4d:d8:
79:0b:65:fa:bd:fd:7c:48:a3:af:91:c3:59:8b:02:
f5:b3:1c:83:78:c1:af:35:4b:66:b9:19:73:e5:58:
f9:d1:0d:96:ed:9c:0e:27:df:73:7a:60:f3:6f:d4:
76:50:f9:b1:4b:3e:bb:02:bf:cf:31:9b:0a:73:a9:
fb:70:e1:5c:fc:3d:11:29:27:5b:4d:d8:df:e1:a4:
52:bb:ae:fb:93:f0:a4:c2:b5:6e:b4:e6:b2:71:cd:
00:42:b5:ca:a0:b8:7e:d7:7e:e8:d0:f3:7b:6f:2b:
17:dd:77:25:7d:01:0f:95:ab:50:90:4c:cb:a1:a8:
0d:a9:92:05:14:23:13:d1:48:46:2c:18:91:5e:db:
b8:e5:82:a6:62:e0:9a:84:40:5b:5a:ba:da:bb:a4:
7f:f7:96:2d:c1:ae:59:d1:cc:6e:d3:42:11:57:72:
b4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CC:72:90:C6:69:83:95:37:FE:3B:B3:8A:70:78:88:7C:AD:AF:3A
X509v3 Authority Key Identifier:
keyid:DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/EMxykMZpg5U3_juzinB4iHytrzo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.3.132.0/22
Signature Algorithm: sha256WithRSAEncryption
d8:e3:ca:64:b2:65:ee:e1:92:0d:7a:cb:3c:10:e8:71:cb:63:
77:4e:3e:56:95:e6:52:33:f3:f8:e8:10:d3:68:b7:dc:ee:11:
2f:6e:78:c5:bd:55:85:93:70:c2:a7:e0:8a:b0:21:8c:71:3f:
e4:c7:ea:54:47:f0:ac:a0:7f:53:96:90:ff:d3:c8:1c:fd:83:
e4:fc:ab:8f:ea:22:67:c1:cb:89:0e:ec:02:9e:93:c3:16:c0:
83:a6:d9:8d:e1:c8:f8:94:17:0b:98:12:51:cc:3e:8b:4e:6e:
73:e1:62:20:24:8f:f2:b4:b5:be:db:94:bd:aa:b5:4a:01:e4:
59:4a:c8:71:3c:22:e3:ce:be:6e:b0:a4:14:0e:49:44:10:6d:
47:d1:d1:34:a6:dc:27:b9:3d:f0:dc:0f:bc:4e:62:e7:9d:f5:
a6:ca:88:10:fd:51:fd:5e:0b:66:65:fa:5b:dc:e4:f2:b7:1c:
0c:7d:b0:58:a5:13:a4:1d:c8:ca:01:fa:af:2d:64:cc:db:5c:
e5:13:80:55:01:a1:39:a3:0a:ae:b5:03:ad:2f:ff:4f:02:e6:
5c:9a:09:0d:4a:23:6a:a3:4d:e2:2d:bc:51:9b:5d:7e:4d:a9:
4c:58:1a:fe:f0:c4:74:b2:9a:8d:b8:d1:49:2f:52:1b:13:6b:
a3:74:9a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:28:44 2025 by rpki-client