Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/Se_xpJR0DsYkqMb3548tnhI-ufk.roa
File: Se_xpJR0DsYkqMb3548tnhI-ufk.roa (raw, json)
Hash identifier: vpbDFdVUBiX0JhCJKlfiEy5Ct5mWTuqB1fglD5zw888=
Subject key identifier: 49:EF:F1:A4:94:74:0E:C6:24:A8:C6:F7:E7:8F:2D:9E:12:3E:B9:F9
Certificate issuer: /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Certificate serial: 0A97
Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/Se_xpJR0DsYkqMb3548tnhI-ufk.roa
Signing time: Thu 15 Sep 2022 02:51:02 +0000
ROA not before: Thu 15 Sep 2022 02:51:02 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18049
IP address blocks: 61.67.32.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2711 (0xa97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Validity
Not Before: Sep 15 02:51:02 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=49EFF1A494740EC624A8C6F7E78F2D9E123EB9F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:90:4d:93:4f:b5:73:5f:1e:be:72:2a:74:70:
07:47:88:f4:e5:ba:67:01:de:ad:8c:dd:52:c8:9b:
24:a0:1d:93:36:6c:ba:6b:ce:c3:17:b3:12:dc:1a:
a0:4e:5a:7d:29:55:d5:e8:77:73:27:5a:45:61:08:
d3:39:43:9d:ff:72:9f:b2:3c:44:bc:40:50:ec:89:
5b:72:8d:08:7f:09:96:ab:90:76:0d:a6:4e:a9:d3:
c6:cd:5c:f6:87:c6:0e:29:bf:af:77:b6:16:09:24:
85:6f:3c:2c:fc:f1:72:3a:ce:52:2c:57:97:4c:fe:
02:2c:a7:cd:a0:fd:8f:be:bd:89:e8:33:8c:53:47:
7e:c8:cd:06:97:20:0e:0a:6d:d1:4b:a0:e8:61:19:
14:04:64:ec:61:89:9f:6d:62:ca:fe:dd:a3:7a:84:
ee:18:d6:42:93:55:f9:6e:37:fd:b3:80:76:fa:9c:
f1:4b:9b:f3:01:89:ce:6f:ec:70:14:bf:56:35:d1:
c0:0b:c2:8e:80:30:e8:3b:f7:ff:65:b5:88:91:92:
43:cd:42:10:c0:74:fb:b1:b6:c2:64:77:59:f5:c7:
05:2d:1a:e8:52:24:5b:f6:22:d2:8f:73:a8:3c:ce:
9a:e9:fa:1a:23:b7:2e:ec:4a:03:cb:cc:e0:9d:4f:
1c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:EF:F1:A4:94:74:0E:C6:24:A8:C6:F7:E7:8F:2D:9E:12:3E:B9:F9
X509v3 Authority Key Identifier:
keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/Se_xpJR0DsYkqMb3548tnhI-ufk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.67.32.0/20
Signature Algorithm: sha256WithRSAEncryption
a0:cc:98:2e:ab:a0:7c:7a:3b:54:17:11:4f:b5:09:0f:1d:8b:
68:d9:9d:38:61:eb:6d:95:59:53:64:ec:0f:51:89:29:d6:47:
12:c1:df:1c:27:79:02:da:34:37:69:70:e2:4e:df:13:f0:6f:
9f:09:ea:06:f8:f8:8b:4a:89:d0:d0:c8:f7:8d:9b:0b:eb:28:
dc:76:2b:27:fd:7d:35:57:47:05:65:7e:06:86:e8:01:ea:55:
46:49:b2:01:72:db:37:3c:3d:86:de:06:28:ba:8c:92:9d:12:
f4:60:b3:16:be:19:b7:19:0f:e5:98:a4:fe:e6:c8:df:32:1b:
87:60:38:64:16:6a:96:bd:3d:2d:8a:67:ae:83:06:0e:af:88:
9d:c2:a1:be:ed:ac:81:8d:e4:56:2e:07:2e:6f:96:2d:bf:21:
71:13:b7:55:0f:48:b2:4c:30:73:e6:dd:74:05:c5:2c:20:19:
d5:c8:18:22:a7:a1:f5:96:5b:87:54:75:66:7c:84:b6:3f:7f:
28:a1:ef:c9:ae:bb:2d:6b:54:e4:35:34:3a:91:b9:98:48:9c:
5c:86:19:5f:1a:74:e6:10:5e:78:3c:de:19:4a:00:7a:ba:ed:
31:2f:8f:75:47:d9:77:1a:d2:f8:f0:0a:c8:37:f0:bf:7d:1a:
eb:f7:bc:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:02:34 2025 by rpki-client