Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/clKg17WYmhaTv2wVfarYR7dyYs8.roa
File: clKg17WYmhaTv2wVfarYR7dyYs8.roa (raw, json)
Hash identifier: kAPFLp8s7fly5HeMRAZHW+G9Pjp0UlaY2uqXV8lJaDk=
Subject key identifier: 72:52:A0:D7:B5:98:9A:16:93:BF:6C:15:7D:AA:D8:47:B7:72:62:CF
Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Certificate serial: 0C65
Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/clKg17WYmhaTv2wVfarYR7dyYs8.roa
Signing time: Mon 17 Jun 2024 08:54:02 +0000
ROA not before: Mon 17 Jun 2024 08:54:02 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17709
IP address blocks: 61.58.160.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3173 (0xc65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Validity
Not Before: Jun 17 08:54:02 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=7252A0D7B5989A1693BF6C157DAAD847B77262CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e4:00:3b:e3:41:b1:63:e8:e7:fe:12:dc:de:
f0:d5:11:6f:63:ab:7e:28:34:10:39:08:2e:9d:06:
df:29:30:7f:aa:a4:62:4c:e1:a8:df:5b:b8:8c:03:
81:de:f2:ba:66:89:16:e2:71:a3:ca:2b:d9:ee:10:
d4:f2:ff:f9:34:30:fc:c3:30:88:2f:9b:81:89:2e:
b4:96:21:24:76:ff:95:13:f9:ee:d7:9c:53:98:7a:
bb:93:bc:0c:fa:6f:d4:1a:64:91:1c:8f:f7:1d:df:
03:65:7c:3e:7f:94:4a:0f:c4:7e:ec:a3:b4:be:83:
3e:28:4a:ba:ef:38:f8:3a:fb:3f:97:cb:30:14:b7:
f7:2e:5b:7c:d6:dd:34:1f:b6:99:f8:49:a3:d9:d7:
53:93:a4:66:7c:d5:24:57:9c:22:ce:d0:00:27:37:
c8:ea:dc:c7:45:d9:32:ff:3e:30:be:1c:6c:06:ac:
92:6e:a0:f1:11:ca:90:1e:b0:ec:16:ee:7a:bb:85:
72:9d:0a:11:ef:6e:0c:f6:48:14:23:b8:bd:18:46:
1d:dc:6c:e8:24:a4:45:f3:5e:b6:3e:dc:63:f9:f8:
28:12:ff:c6:e3:c5:94:5f:cb:4a:b1:ca:e4:b8:41:
85:89:1a:7c:ec:57:27:fb:65:9b:90:c3:35:3a:74:
e9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:52:A0:D7:B5:98:9A:16:93:BF:6C:15:7D:AA:D8:47:B7:72:62:CF
X509v3 Authority Key Identifier:
keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/clKg17WYmhaTv2wVfarYR7dyYs8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.160.0/19
Signature Algorithm: sha256WithRSAEncryption
0a:f5:52:6a:17:50:84:aa:7b:ea:0b:d1:dc:d6:39:53:ea:9a:
2d:01:df:c5:71:5f:1a:f9:b5:97:ec:a1:83:e4:b7:c3:90:f2:
c5:a0:e3:f9:de:5c:ef:bf:79:2d:9e:0b:c8:9e:6c:ba:5c:c0:
f3:f0:6e:b0:e1:f8:bb:82:3d:53:fa:60:64:81:4b:92:c2:f1:
15:7d:91:3a:68:a9:cb:e0:c4:08:60:aa:5e:dd:8c:e4:90:f8:
5d:41:b9:1c:fd:8e:7d:1f:6b:3c:a8:8d:f6:4b:7c:08:db:4c:
0d:36:29:3f:24:30:4a:8f:ad:57:a4:c6:83:06:2a:21:4c:79:
4c:21:5a:1b:a4:61:ab:83:8c:42:15:48:41:9d:1a:c8:d7:32:
98:2d:a7:c9:1b:37:22:88:47:b5:72:f2:97:2c:ec:7e:0c:a0:
70:9e:a8:b0:62:3a:a9:9d:53:32:77:b4:f8:08:15:01:13:6b:
b1:0e:92:6e:b9:83:71:53:71:76:86:75:a3:50:74:00:1a:1c:
b0:52:5f:28:c5:84:23:65:77:33:0d:f5:c1:70:75:0f:52:03:
44:1b:b1:44:ab:6a:19:5c:49:20:79:5d:90:2c:91:2e:5b:79:
14:19:8d:33:0b:97:c6:22:c1:35:c8:61:a6:ec:9b:07:fb:c2:
8e:40:9a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:15:10 2025 by rpki-client