Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/pcB4OClcZ66r0Qrr_BMFeXWHZlg.roa
File: pcB4OClcZ66r0Qrr_BMFeXWHZlg.roa (raw, json)
Hash identifier: 0sk2r3+bj679ZU0zp3rfDMJHDZwh+8vQFVcw6tEhm6g=
Subject key identifier: A5:C0:78:38:29:5C:67:AE:AB:D1:0A:EB:FC:13:05:79:75:87:66:58
Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Certificate serial: 098F
Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/pcB4OClcZ66r0Qrr_BMFeXWHZlg.roa
Signing time: Wed 29 Sep 2021 02:52:31 +0000
ROA not before: Wed 29 Sep 2021 02:52:31 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 131596
IP address blocks: 61.58.160.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2447 (0x98f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Validity
Not Before: Sep 29 02:52:31 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=A5C07838295C67AEABD10AEBFC13057975876658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ac:d6:77:20:7f:83:40:8c:d0:1c:c5:97:1c:
c5:af:cc:6f:0e:3b:2a:97:3c:f0:9f:57:a2:39:c6:
40:d4:a1:81:d3:7f:01:10:63:e5:14:29:2d:75:02:
98:5a:b4:3a:f7:ae:46:68:df:13:1e:40:f3:c2:2f:
6f:6e:e2:0b:3f:70:10:b2:49:73:d9:05:12:89:92:
57:cf:9c:4d:b2:25:5f:7e:c2:46:7b:e9:21:7c:84:
8a:62:a0:19:0b:c4:cc:84:40:3c:f4:c2:d9:d1:76:
d5:a0:91:6c:bd:67:e4:af:3f:50:fc:7b:e7:cd:2f:
9c:5f:2a:2f:66:1b:d9:e2:c1:96:a9:af:71:9e:e5:
6c:55:3a:1c:57:83:75:33:54:b0:97:56:16:9d:b1:
d2:ab:e7:4f:a4:8e:a7:eb:8d:1d:e9:22:54:05:8b:
e7:64:6b:8e:c0:62:72:5c:55:1e:d6:93:a4:83:d5:
e3:9e:49:8a:56:6d:1c:ba:cb:c3:9b:09:21:e9:cf:
63:b5:97:e5:e3:60:c7:08:a7:57:42:f0:6f:fe:05:
e2:18:be:7b:7c:32:bd:b5:71:26:ac:b3:cd:3f:75:
ae:99:c2:3a:fb:16:85:76:20:c9:d2:18:dd:13:c9:
43:e8:90:50:f3:39:6b:3a:dc:4f:89:e5:e1:51:be:
f2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C0:78:38:29:5C:67:AE:AB:D1:0A:EB:FC:13:05:79:75:87:66:58
X509v3 Authority Key Identifier:
keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/pcB4OClcZ66r0Qrr_BMFeXWHZlg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.160.0/19
Signature Algorithm: sha256WithRSAEncryption
ca:c4:16:ce:8a:a5:1b:6c:7c:41:a2:86:a2:35:91:90:1d:c6:
3f:f6:60:ee:5f:93:75:1b:17:5f:95:c3:8b:25:ab:e0:fb:d4:
91:79:a6:e7:df:bb:20:d7:31:94:5f:e1:84:04:6e:91:4a:38:
5b:c3:2a:89:71:6d:a4:d0:ef:c1:fe:e3:f9:fa:c0:e2:b6:ff:
d2:8a:7a:9f:6b:71:b7:e5:10:1f:a8:61:04:56:30:c1:93:6c:
60:d0:17:b7:89:3b:da:8f:4f:15:5f:e8:29:04:ab:66:2c:96:
c6:ee:2b:20:57:5c:a2:cb:3a:0d:1c:41:40:d4:3a:29:02:ff:
e3:99:3a:8a:7d:43:79:c2:8d:0c:e7:bb:b8:42:80:d9:f6:5a:
44:cf:d4:5a:55:73:37:bf:a3:b7:3b:b6:44:bd:59:ce:5e:27:
32:e3:8d:27:b5:f4:48:b7:12:7d:fe:55:b7:13:6e:66:f0:5d:
aa:49:e4:ea:97:89:2e:ae:d8:37:8f:8d:3e:0e:09:3c:6c:12:
b1:38:d9:62:e3:80:59:73:76:e5:9f:23:c1:d0:fa:f4:3a:29:
9b:cd:a2:d2:d1:d5:aa:b7:5a:77:9d:4b:45:5d:7b:04:79:75:
f8:a5:a5:05:7f:80:0a:1a:01:78:6c:6f:71:fc:0d:9e:cd:ea:
a0:d8:83:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:42:32 2025 by rpki-client