Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/71fNT7MQmMtDaWQS6KDd9uUlSag.roa
File: 71fNT7MQmMtDaWQS6KDd9uUlSag.roa (raw, json)
Hash identifier: wgdfdJ/+Idr1oauC4hX7SYSGaS9cui5giUEoVe9c4LU=
Subject key identifier: EF:57:CD:4F:B3:10:98:CB:43:69:64:12:E8:A0:DD:F6:E5:25:49:A8
Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Certificate serial: 0991
Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/71fNT7MQmMtDaWQS6KDd9uUlSag.roa
Signing time: Wed 29 Sep 2021 02:52:31 +0000
ROA not before: Wed 29 Sep 2021 02:52:31 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131596
IP address blocks: 61.58.64.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2449 (0x991)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Validity
Not Before: Sep 29 02:52:31 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=EF57CD4FB31098CB43696412E8A0DDF6E52549A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8a:07:9d:91:ec:28:53:5c:7a:37:a6:78:29:
47:e9:e4:9e:cf:4e:44:b9:84:bf:04:41:f1:90:81:
e3:b7:c8:ec:6c:c3:4a:30:64:39:90:94:05:95:09:
f1:1e:47:e0:6d:39:9f:6b:ae:8e:e4:aa:79:3e:22:
dc:54:5a:7c:fc:57:ef:8a:ab:3c:f1:bd:d7:49:07:
c2:1b:58:a8:52:a0:48:31:db:6c:fd:ac:c6:19:a4:
a1:2d:7f:da:dc:09:32:60:ce:b1:19:81:37:f7:7e:
7c:35:fa:f4:d3:af:cc:b0:95:ec:b1:b1:09:53:03:
68:07:54:04:85:5b:ab:57:7c:ba:04:0c:be:f0:e1:
54:f2:f0:27:2b:fe:12:a8:5e:85:10:e1:dd:a0:e5:
23:af:17:66:52:66:d7:40:ea:9f:49:07:0f:f4:cc:
2c:c3:d0:8f:bd:fa:95:49:3d:25:17:ee:f8:19:14:
7a:1e:f0:b8:8a:72:59:3e:52:a6:05:48:4c:4f:d4:
87:db:42:67:f5:e9:fd:e3:59:c9:c4:42:ed:d9:98:
f9:55:79:86:c1:39:2c:de:5e:2d:5e:c7:1f:91:4d:
2b:fb:1f:6f:47:98:0d:cd:73:79:de:ba:d0:4f:75:
a7:50:46:20:1b:05:e8:84:a8:7c:84:f7:df:b1:57:
64:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:57:CD:4F:B3:10:98:CB:43:69:64:12:E8:A0:DD:F6:E5:25:49:A8
X509v3 Authority Key Identifier:
keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/71fNT7MQmMtDaWQS6KDd9uUlSag.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.64.0/20
Signature Algorithm: sha256WithRSAEncryption
c5:d1:e5:0f:f7:a7:20:a8:4e:b8:65:a8:e8:d0:70:84:cd:df:
d0:95:28:e6:c6:04:9a:2d:a0:02:11:99:59:60:80:f4:59:dd:
de:70:c7:b4:ba:1b:8c:4e:47:be:33:15:78:8a:51:2a:7b:d4:
a9:29:02:3d:0f:42:30:41:f5:59:a3:81:7f:d0:e0:df:73:fb:
e9:73:15:b5:87:ca:95:c0:03:9c:19:b2:15:bd:a4:48:00:4c:
d5:f0:22:ce:7f:bb:bf:3e:1b:4a:c8:d7:d3:17:96:14:69:fe:
3e:6c:2b:b4:32:51:ad:32:22:01:71:ce:4e:34:64:2b:04:1b:
f7:65:09:d2:f4:39:29:ed:a2:cf:6f:eb:e8:4a:a4:77:c9:8d:
fb:78:ee:17:87:6c:cf:98:6a:45:08:31:38:bd:5a:3c:3b:e3:
de:00:ea:7f:67:09:12:8d:dd:be:ed:00:fa:99:43:1f:50:b5:
e8:b7:08:da:68:33:bc:5e:69:fb:d5:a0:5a:d8:53:0e:e7:ba:
0b:63:3a:1e:39:30:e6:c0:19:b5:ca:02:30:c8:18:fd:e1:70:
ef:85:9a:2d:a4:73:4f:b8:60:0a:b2:5c:45:64:dc:ea:17:c0:
8d:28:c7:ac:bb:29:03:9c:55:ea:7a:16:16:7d:f9:18:b8:1e:
5d:45:13:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:33:50 2025 by rpki-client