Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/Ey9-qL5j-Pyw5vc6-I5yXWDnyPA.roa
File: Ey9-qL5j-Pyw5vc6-I5yXWDnyPA.roa (raw, json)
Hash identifier: r6N/ugk+VWfCRxzsfMyPVYWgAE4yrH7/xJRS5pLlgYM=
Subject key identifier: 13:2F:7E:A8:BE:63:F8:FC:B0:E6:F7:3A:F8:8E:72:5D:60:E7:C8:F0
Certificate issuer: /CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Certificate serial: 0A6B
Authority key identifier: DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/Ey9-qL5j-Pyw5vc6-I5yXWDnyPA.roa
Signing time: Thu 15 Sep 2022 02:42:02 +0000
ROA not before: Thu 15 Sep 2022 02:42:02 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131584
IP address blocks: 43.255.12.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2667 (0xa6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF5673A1972126E7D2CC5D4D51B49108345BF8C9
Validity
Not Before: Sep 15 02:42:02 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=132F7EA8BE63F8FCB0E6F73AF88E725D60E7C8F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dc:09:6f:3e:a2:38:57:f3:df:8f:0e:9a:ea:
ff:a5:6c:30:b6:4b:9f:5e:33:24:27:c1:36:17:a1:
96:69:da:40:65:93:6d:09:e3:51:ac:72:fa:46:03:
40:97:c8:9b:89:07:5b:1e:13:10:d4:51:54:62:65:
37:b7:04:5e:04:c3:1e:c8:80:c4:c2:d7:fe:19:da:
1e:fe:05:58:6c:a6:ed:dd:93:b3:db:04:06:d9:c7:
19:a7:ce:77:f6:d8:f2:9a:30:47:1a:73:64:33:df:
da:2d:9c:f4:52:a3:fa:b1:f6:6b:d8:ab:7a:fc:21:
0e:af:a8:b4:51:c8:29:54:d6:f3:8e:f9:01:32:bd:
bf:25:f0:2b:e4:fe:98:cf:5c:75:af:e4:d9:aa:e5:
ba:c0:c8:15:f7:85:fc:fb:49:41:0f:77:00:a7:66:
f5:6f:3b:aa:03:2d:fd:a7:f3:eb:1b:e1:96:cf:22:
67:4e:e8:b6:9a:cd:82:b4:67:51:5d:9a:50:eb:98:
72:a8:79:9a:36:77:f0:4c:0b:cc:c1:2c:97:8d:e1:
b0:da:cc:48:7a:e8:88:47:f3:99:df:36:71:3c:b8:
ca:5f:ff:f7:65:20:03:b9:3f:8f:d8:d6:1e:48:31:
af:5f:5f:6b:17:0b:1e:ed:e4:91:5e:85:ab:95:19:
54:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:2F:7E:A8:BE:63:F8:FC:B0:E6:F7:3A:F8:8E:72:5D:60:E7:C8:F0
X509v3 Authority Key Identifier:
keyid:DF:56:73:A1:97:21:26:E7:D2:CC:5D:4D:51:B4:91:08:34:5B:F8:C9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/31ZzoZchJufSzF1NUbSRCDRb-Mk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/31ZzoZchJufSzF1NUbSRCDRb-Mk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TAIFO7716/Ey9-qL5j-Pyw5vc6-I5yXWDnyPA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.255.12.0/22
Signature Algorithm: sha256WithRSAEncryption
36:c1:3f:38:ad:50:43:2f:23:d9:5f:f3:60:6f:ea:ed:31:96:
d2:a3:f7:65:3e:a1:6c:49:83:09:ee:10:50:9f:9c:c1:43:82:
8c:e5:c7:35:a4:d4:69:1c:9c:66:6b:2b:de:88:97:d2:90:7d:
08:b3:92:88:87:98:fc:c4:a1:b0:eb:66:c6:1e:00:30:40:18:
2b:87:6a:c6:13:4a:88:d2:97:8b:a9:33:a0:6b:99:06:d3:14:
63:d6:b6:47:5c:4e:34:2a:d8:c9:ba:35:02:af:d1:c4:fc:36:
9f:39:b1:b7:1e:76:49:81:93:c6:91:5c:03:c0:dc:1d:96:5e:
ad:76:34:49:37:a6:d9:a4:42:29:9b:9d:4e:91:28:26:29:09:
e3:65:03:0d:45:81:ca:ca:17:d0:60:cb:ca:5a:0d:6d:da:d6:
03:c8:91:af:a0:84:50:1d:c4:da:ac:1c:f4:1d:45:50:af:94:
f5:eb:b9:b0:61:34:75:44:0c:eb:96:e4:a0:55:f2:32:06:f1:
ed:af:29:60:5e:de:34:f9:72:14:73:a8:39:f5:28:6a:af:5f:
7a:15:64:b9:cf:eb:af:fa:52:c3:eb:de:51:d9:3d:c8:96:dc:
11:96:5b:aa:46:07:fd:28:e2:81:ba:92:0d:d8:4b:ce:54:05:
de:22:43:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:27:55 2025 by rpki-client