Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/zgj6XJWTLOz4rjCw-TNLiYg1Md8.roa
File: zgj6XJWTLOz4rjCw-TNLiYg1Md8.roa (raw, json)
Hash identifier: g1P2uiJcqlKbdxVXpnPLNFwPfD99X1fFV19stcstQ8M=
Subject key identifier: CE:08:FA:5C:95:93:2C:EC:F8:AE:30:B0:F9:33:4B:89:88:35:31:DF
Certificate issuer: /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial: 0AD3
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/zgj6XJWTLOz4rjCw-TNLiYg1Md8.roa
Signing time: Wed 29 Sep 2021 02:41:08 +0000
ROA not before: Wed 29 Sep 2021 02:41:08 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 1659
IP address blocks: 163.28.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2771 (0xad3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Validity
Not Before: Sep 29 02:41:08 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=CE08FA5C95932CECF8AE30B0F9334B89883531DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7a:d9:1f:d6:c4:28:67:28:9c:bb:e1:73:ae:
18:b5:3b:75:8a:7e:af:ad:b3:a2:d3:a7:c3:4e:15:
48:97:8f:ca:8d:23:41:98:a6:fb:a0:1a:ea:34:e2:
b4:2d:d7:62:67:f0:21:73:5f:5a:e1:58:70:7c:7b:
34:d2:64:30:12:4b:78:aa:93:9e:7d:60:e1:87:6f:
64:27:65:bb:e0:90:c2:14:38:c1:12:6c:18:81:fc:
d3:dc:b8:a3:ee:5c:8a:44:c2:e4:4f:b4:f7:a4:34:
be:fe:81:ca:b4:62:42:46:5e:52:0b:34:bb:d1:a6:
89:df:f9:ef:aa:a0:72:50:3a:c6:06:d3:12:0b:f4:
0c:23:9f:10:eb:d4:6d:e9:9b:da:e0:1d:c2:bb:dc:
24:7d:c0:99:e3:88:83:32:12:d5:c2:0f:95:83:6c:
3c:50:2e:52:df:7d:09:86:61:de:a8:85:1d:0b:dd:
db:86:39:2a:25:3e:1e:05:18:e2:79:19:8f:c8:ba:
2a:34:ca:b5:27:0b:22:33:e2:be:a2:ec:18:52:92:
7c:f1:1c:c6:5c:6d:d4:bc:77:a9:f7:ca:cc:8f:05:
80:be:d9:cf:5d:3f:f6:d3:85:a6:ba:e3:c2:07:bf:
94:cc:d1:ac:b3:49:41:6e:0c:50:d6:ac:6c:a9:d5:
f1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:08:FA:5C:95:93:2C:EC:F8:AE:30:B0:F9:33:4B:89:88:35:31:DF
X509v3 Authority Key Identifier:
keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/zgj6XJWTLOz4rjCw-TNLiYg1Md8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
163.28.0.0/16
Signature Algorithm: sha256WithRSAEncryption
78:9b:cb:61:ae:b9:1c:f9:3e:44:92:2c:a9:19:8b:0f:a2:37:
7b:81:94:45:28:47:2b:1c:bf:15:fe:50:4a:65:ff:6b:a9:35:
54:cd:70:93:5a:13:c6:a0:39:34:31:53:94:eb:89:39:30:ed:
d1:15:15:fd:a0:52:f7:12:5b:43:14:4a:c9:77:57:b2:35:5e:
30:33:69:88:32:53:a5:45:ad:db:03:95:e6:4f:e5:8b:06:1f:
f3:a7:b6:ba:ae:2d:17:ef:2a:11:1c:29:1d:10:ba:1a:ad:88:
55:61:b7:52:a1:12:e7:76:3d:65:60:ba:84:89:28:76:78:fa:
da:3e:8e:50:80:39:f5:93:6e:c5:b2:ce:19:f9:39:80:88:57:
e7:d6:9d:f6:92:bd:c0:80:af:75:64:c1:b7:bc:6d:28:82:9b:
47:88:12:3e:52:b6:91:21:e9:c0:42:48:e9:93:3b:50:a0:f1:
fc:8f:cb:64:85:4f:97:9f:c7:f8:2d:3a:4b:df:be:db:16:bb:
b5:8b:93:a1:7b:9f:e7:d7:62:d7:47:e5:6e:31:60:08:ee:50:
7c:3c:fa:d9:93:02:19:ee:0e:fa:c2:4e:54:8d:e4:ca:b3:16:
18:55:39:e1:6a:91:a1:88:67:7b:a5:3b:07:2a:32:47:cd:c7:
c1:b6:4a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:49:32 2025 by rpki-client