Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/z_EwK0N2R5jzwUTRSCMCdcsBxPM.roa
File: z_EwK0N2R5jzwUTRSCMCdcsBxPM.roa (raw, json)
Hash identifier: mgn+UsfawUb6sbej+ESXyryyncHur6eQJ/Yb4ZQO+kg=
Subject key identifier: CF:F1:30:2B:43:76:47:98:F3:C1:44:D1:48:23:02:75:CB:01:C4:F3
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0BD8
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/z_EwK0N2R5jzwUTRSCMCdcsBxPM.roa
Signing time: Thu 15 Sep 2022 02:41:26 +0000
ROA not before: Thu 15 Sep 2022 02:41:26 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 1659
IP address blocks: 163.14.0.0/15 maxlen: 15
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3032 (0xbd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 15 02:41:26 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=CFF1302B43764798F3C144D148230275CB01C4F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:91:bc:dc:2f:79:48:5b:cd:92:af:8e:1b:2d:
fd:d7:0f:f9:2c:09:db:cc:ee:09:63:11:77:73:50:
3f:ca:dd:65:97:50:80:3d:ab:e7:16:cf:b5:d4:b9:
21:b0:29:fc:7e:9f:2e:75:0b:34:b9:30:e3:b9:dc:
a2:51:51:af:75:31:8a:59:9e:49:ca:0c:2a:f1:10:
46:84:74:24:5c:e1:d8:e4:3d:f6:39:85:08:dd:d1:
60:d3:9e:b3:e7:34:80:8d:b5:5e:72:63:e2:f0:2e:
f6:55:c9:33:d5:dc:8c:3d:ba:77:99:99:54:23:9c:
87:41:33:d2:6c:b2:b8:d1:3d:ab:07:66:44:08:52:
7b:b1:d4:8d:4f:d6:a5:b8:0f:de:5c:fc:72:23:cc:
4e:b5:e5:b7:98:eb:96:e3:35:44:9c:48:9a:f4:bd:
1c:d0:01:25:f2:b8:68:21:45:b9:92:42:f8:08:74:
c4:34:9b:d8:c9:80:94:d5:2f:ce:b5:bd:6a:83:51:
90:17:7d:0d:19:20:93:3e:bc:d4:60:2d:9c:0a:8f:
33:ee:e5:64:19:f9:8d:07:4c:1d:6e:ef:e0:00:3c:
e8:b6:40:c5:34:71:81:aa:ac:38:31:3b:dd:1c:a9:
f6:da:84:30:b1:fb:92:a2:8a:69:cb:1f:b2:7e:33:
bf:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F1:30:2B:43:76:47:98:F3:C1:44:D1:48:23:02:75:CB:01:C4:F3
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/z_EwK0N2R5jzwUTRSCMCdcsBxPM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
163.14.0.0/15
Signature Algorithm: sha256WithRSAEncryption
7e:d2:b9:cb:9f:63:a1:69:ee:7d:22:7b:6d:b8:7e:27:b0:3b:
09:66:9d:40:d8:2d:01:a0:8c:d7:04:6c:6c:fa:57:12:cb:96:
ed:61:37:31:06:7a:a3:5b:4f:5e:5f:89:bc:05:3f:d6:0f:fe:
b1:03:59:5c:a1:23:d7:61:95:69:64:a5:6b:06:d1:82:4a:c6:
01:25:f3:2f:d9:34:08:c9:11:4b:b6:7f:12:0d:59:11:e6:9a:
72:58:93:05:28:5c:fe:71:03:d7:86:1a:04:53:fa:c4:1a:b8:
20:2b:5d:54:d0:8d:6f:86:dc:14:0c:79:1f:b9:d3:47:bc:0e:
ca:32:56:f5:03:8a:95:ef:9d:9f:c4:23:f9:9e:36:ff:d4:fc:
df:9e:dd:40:af:86:7f:2a:69:4c:ca:36:f6:16:97:b4:9e:28:
49:80:6c:8b:37:55:ae:7a:45:64:4d:96:48:75:e3:30:cd:26:
f4:91:3a:19:4e:0e:c4:05:c2:f1:bc:23:56:0c:26:cf:f3:59:
2e:6a:77:60:08:03:2c:98:ac:92:f2:fa:57:e9:0a:95:ef:ed:
62:1f:af:2d:23:6a:a5:9b:fe:09:e5:dc:ad:e9:96:9a:8f:b9:
96:b8:c2:27:b9:65:88:6e:35:af:ae:96:a7:c6:0a:92:dd:e4:
20:c6:5e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-fra.rpki-client.org