Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/9v9deK1gxCVZJpfRX9agjDylR9c.roa
File: 9v9deK1gxCVZJpfRX9agjDylR9c.roa (raw, json)
Hash identifier: TX+4IGBdoSJxW6h+MB4JPsvC58w0/p/ZJIaUTzvY8Pw=
Subject key identifier: F6:FF:5D:78:AD:60:C4:25:59:26:97:D1:5F:D6:A0:8C:3C:A5:47:D7
Certificate issuer: /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Certificate serial: 0782
Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/9v9deK1gxCVZJpfRX9agjDylR9c.roa
Signing time: Tue 29 Sep 2020 10:00:56 +0000
ROA not before: Tue 29 Sep 2020 10:00:56 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18049
IP address blocks: 61.67.16.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1922 (0x782)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Validity
Not Before: Sep 29 10:00:56 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F6FF5D78AD60C425592697D15FD6A08C3CA547D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:84:67:de:b8:b0:e9:65:cc:56:93:7d:7e:64:
9b:a3:f2:3b:3a:da:cc:b5:64:d6:ab:6c:d7:fd:6b:
e0:87:5f:51:66:f2:61:80:d6:09:36:f2:1b:3e:b1:
d5:ed:52:c3:bf:c9:8d:fc:7d:11:61:86:7c:5f:2b:
c7:71:e1:7d:4e:8f:e5:04:99:c7:90:3b:22:fb:46:
63:6f:46:9a:36:09:1e:30:62:d7:06:d9:6c:38:94:
23:27:87:1a:d5:ea:07:d7:d3:fb:3a:95:ac:59:f2:
d5:87:c8:ca:c8:bb:ea:2f:40:b1:f3:f7:bf:e6:c0:
aa:88:cf:d9:a7:76:0f:a2:ed:39:c1:a9:47:1d:e9:
94:cc:b4:2c:67:f6:fe:4e:74:3c:d2:66:ef:14:1d:
23:59:a0:e1:f6:dd:5f:ff:6a:d2:93:7b:c9:66:1e:
1e:c0:26:0b:5c:69:ea:1c:2a:0a:61:85:d3:20:21:
9a:fa:f2:e9:8e:ea:09:3b:d5:a5:55:36:d6:7f:e5:
75:a3:bd:04:5f:43:d5:13:61:12:c5:85:85:82:81:
47:97:5f:a6:ff:93:93:09:ec:11:52:2c:24:70:b1:
84:ae:6e:fb:84:82:ba:1a:75:1b:12:ee:bd:c3:76:
f2:72:55:fb:bc:21:59:e3:c6:ec:54:e0:cf:65:3a:
23:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FF:5D:78:AD:60:C4:25:59:26:97:D1:5F:D6:A0:8C:3C:A5:47:D7
X509v3 Authority Key Identifier:
keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/9v9deK1gxCVZJpfRX9agjDylR9c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.67.16.0/20
Signature Algorithm: sha256WithRSAEncryption
4d:dd:bd:9b:75:e3:07:5b:b5:4d:73:ef:41:a3:8d:d7:56:0c:
fa:4b:03:bb:cd:72:51:40:d0:47:b2:91:47:b9:73:d5:12:5d:
c8:18:d6:cf:f9:58:9a:8a:25:d1:15:11:55:4c:f9:b5:24:04:
56:7e:18:51:7f:73:39:ad:2e:35:63:2d:ea:47:c8:90:eb:35:
6e:dd:0b:53:bc:4f:24:5f:63:eb:20:9a:0c:ba:3a:37:73:9f:
bd:fa:d8:b1:93:e2:d3:e9:5e:b7:a4:67:2e:a1:82:70:0b:7d:
49:38:26:af:e6:92:b9:96:89:aa:5b:d9:27:a5:21:40:76:a1:
e7:76:73:20:a3:05:be:34:7a:d3:11:8e:0f:eb:26:6d:14:13:
e6:dd:47:31:7e:07:ae:3a:9f:c1:d7:7e:8c:0e:02:f2:0c:77:
42:2d:d9:3a:d3:f2:da:a2:0b:77:73:58:c3:9b:a8:2c:dc:88:
5b:0f:a6:98:01:52:c2:99:00:6c:fb:1c:50:b9:75:de:6d:df:
ce:44:29:68:a5:e5:35:01:03:a7:87:bc:8e:3d:67:0b:95:5d:
86:81:b5:8e:ae:92:ef:21:32:d8:ba:b8:4f:f4:31:b1:5e:09:
dc:66:63:33:67:5f:5d:1f:20:ab:bf:d5:4a:2d:a0:85:1f:f6:
0c:f3:22:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:40:58 2025 by rpki-client