Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TCB/gkeFoa0IIxNzGrcaTVav3RMFD2k.roa
File: gkeFoa0IIxNzGrcaTVav3RMFD2k.roa (raw, json)
Hash identifier: vrvc+MrzyeVxIipeKvgP74Cz8oscSFojPfStheNX8jk=
Subject key identifier: 82:47:85:A1:AD:08:23:13:73:1A:B7:1A:4D:56:AF:DD:13:05:0F:69
Certificate issuer: /CN=BF82A3AC11455030743C0A743711F8A0D8EBAE28
Certificate serial: 0784
Authority key identifier: BF:82:A3:AC:11:45:50:30:74:3C:0A:74:37:11:F8:A0:D8:EB:AE:28
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/v4KjrBFFUDB0PAp0NxH4oNjrrig.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TCB/gkeFoa0IIxNzGrcaTVav3RMFD2k.roa
Signing time: Tue 29 Sep 2020 10:06:57 +0000
ROA not before: Tue 29 Sep 2020 10:06:57 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131590
IP address blocks: 2400:c780:fffe:1d00::/64 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1924 (0x784)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF82A3AC11455030743C0A743711F8A0D8EBAE28
Validity
Not Before: Sep 29 10:06:57 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=824785A1AD082313731AB71A4D56AFDD13050F69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:13:be:d6:89:e1:90:89:41:b6:fb:aa:43:a5:
c5:60:10:08:d1:26:28:a6:71:1f:05:aa:17:2f:9b:
3a:7c:6f:55:05:a2:c8:68:13:8f:8e:39:00:07:b6:
67:40:88:1b:45:99:76:c7:84:19:f0:7e:fe:d4:54:
a1:dd:df:3c:6e:c6:fe:6e:56:2d:a6:c3:61:38:af:
c0:d0:be:8e:62:53:90:0c:92:9a:ec:1c:e1:00:1a:
fb:a9:19:bc:3f:10:2f:46:7f:ac:ce:22:b1:cc:f1:
da:10:1f:22:c0:9d:94:e3:1c:89:96:e1:5b:de:d6:
65:96:aa:06:e8:35:a8:a7:ed:9b:56:77:7a:09:62:
a6:0a:a9:c2:18:5d:51:d6:16:fe:56:ec:4c:3c:53:
56:33:3d:21:68:27:cc:70:9a:47:14:e1:b9:62:f8:
81:b8:8e:8e:92:9a:b3:0c:a5:c8:62:ed:5f:fa:d0:
ef:08:10:5d:23:22:91:49:ab:41:56:27:5b:1a:d3:
82:61:60:ff:f1:ff:7f:9c:18:83:9f:11:ce:4f:0f:
76:07:3d:a2:11:cf:28:45:2c:bd:af:cd:bb:67:1b:
f0:37:98:a2:64:74:e8:75:09:aa:26:58:ca:4c:1b:
a3:cc:80:d4:18:29:59:e0:e4:13:d1:77:57:35:b1:
29:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:47:85:A1:AD:08:23:13:73:1A:B7:1A:4D:56:AF:DD:13:05:0F:69
X509v3 Authority Key Identifier:
keyid:BF:82:A3:AC:11:45:50:30:74:3C:0A:74:37:11:F8:A0:D8:EB:AE:28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TCB/v4KjrBFFUDB0PAp0NxH4oNjrrig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/v4KjrBFFUDB0PAp0NxH4oNjrrig.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TCB/gkeFoa0IIxNzGrcaTVav3RMFD2k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:c780:fffe:1d00::/64
Signature Algorithm: sha256WithRSAEncryption
82:6c:5b:7d:d7:ab:fd:47:e7:2f:ca:ec:4b:f3:59:c8:18:a1:
23:6c:bb:b3:e9:16:73:40:0e:30:d0:67:9b:a3:cb:43:73:c2:
26:5d:30:fe:d9:04:1e:d9:5c:5f:45:6e:6e:66:3f:d1:79:8b:
1d:be:47:e0:89:15:1c:43:bf:7f:25:53:d9:42:39:05:e1:8a:
0f:39:3a:44:fd:f2:c8:d4:b3:39:6d:79:7c:9a:56:45:1d:44:
cc:20:6c:77:68:a4:33:2d:8b:97:51:8e:58:9c:ed:02:53:3f:
e5:5f:c5:1a:ac:aa:a5:d6:99:a8:29:35:f8:52:22:57:e8:2c:
4d:87:3d:d6:05:51:29:e8:fb:25:5a:5a:da:0e:54:af:df:31:
8d:7f:00:4b:80:ee:44:8f:6a:91:85:ee:02:6b:a0:91:6b:d9:
45:c2:0c:34:76:55:70:ad:07:28:37:f3:2e:d0:5f:f6:dc:67:
d7:9a:64:d7:aa:1d:1e:3e:ee:20:2f:3e:79:e6:59:12:cb:fc:
af:6a:20:18:40:99:97:70:85:01:bd:bc:15:4f:89:16:10:e7:
03:75:25:ab:f8:82:3a:71:42:12:14:19:b3:99:60:6a:d9:bb:
af:00:59:25:0d:87:e3:6e:b5:94:ba:a3:74:2e:f5:01:13:32:
1f:32:b4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:18:04 2025 by rpki-client