Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/SpOg8JDx4sPVevwoP_8nZCfBvXk.roa
File: SpOg8JDx4sPVevwoP_8nZCfBvXk.roa (raw, json)
Hash identifier: cqGD7aFUmtQLUyPKvHP0DvR31KIjhsZHIuAvLgoogjY=
Subject key identifier: 4A:93:A0:F0:90:F1:E2:C3:D5:7A:FC:28:3F:FF:27:64:27:C1:BD:79
Certificate issuer: /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Certificate serial: 0781
Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/SpOg8JDx4sPVevwoP_8nZCfBvXk.roa
Signing time: Tue 29 Sep 2020 10:00:56 +0000
ROA not before: Tue 29 Sep 2020 10:00:56 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 18049
IP address blocks: 27.100.64.0/18 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1921 (0x781)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Validity
Not Before: Sep 29 10:00:56 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4A93A0F090F1E2C3D57AFC283FFF276427C1BD79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:cb:3d:d5:24:f9:ba:1a:c3:44:9e:c2:26:7d:
4b:c9:de:65:75:76:6e:f8:1f:23:c4:16:d5:e2:76:
df:5f:c0:f1:14:2b:ac:2e:51:79:4d:1d:71:19:80:
aa:a2:2a:d6:ab:aa:f9:e8:f2:0a:d9:d7:b6:39:93:
80:b0:45:93:f3:39:9f:1a:00:27:1d:05:df:f8:6e:
b3:3b:f3:c0:1a:a5:aa:ee:78:8f:b6:0b:f6:07:fc:
00:b9:78:43:96:6d:b6:de:93:85:5f:0e:cc:2d:8a:
07:7e:96:38:c8:e5:b5:3b:bc:f4:8f:47:d5:eb:b2:
1d:71:5b:a4:cf:23:64:7b:d5:92:bd:34:90:f2:7b:
2a:70:37:21:08:6e:55:01:b7:c9:a5:22:b6:6b:83:
42:77:89:bd:f6:f6:78:08:58:da:bd:03:1f:02:57:
d9:b5:d5:ef:93:5f:4a:68:f3:f9:26:c4:ed:16:e5:
2f:9a:58:bb:28:5c:3c:10:d9:0e:f3:02:0e:11:c7:
67:98:01:d4:b2:5a:d4:ee:f7:41:1e:f8:9a:ce:b9:
41:e3:1a:32:5a:72:3c:26:f3:e4:28:a2:27:43:a1:
83:85:c3:5a:07:14:cf:35:f1:98:8a:a0:c0:76:40:
f4:db:c6:c4:89:26:f2:91:44:8a:ec:bd:54:00:5d:
2e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:93:A0:F0:90:F1:E2:C3:D5:7A:FC:28:3F:FF:27:64:27:C1:BD:79
X509v3 Authority Key Identifier:
keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/SpOg8JDx4sPVevwoP_8nZCfBvXk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.100.64.0/18
Signature Algorithm: sha256WithRSAEncryption
11:8d:6c:3c:82:85:72:9a:f6:6e:9e:1c:16:65:06:58:06:e6:
fa:09:02:30:af:49:81:63:c8:33:9f:e0:9b:28:cf:b2:93:f0:
6a:e0:dd:fc:ab:e4:64:be:da:3e:cc:c3:7e:52:64:a7:81:d6:
fc:cf:50:1b:28:bb:05:a0:76:f1:c0:44:6d:fa:a0:af:4a:42:
d3:93:79:81:89:1f:8d:7d:40:c6:ec:e3:36:1a:13:6b:52:25:
13:fe:f1:5d:92:4c:35:f7:82:c2:46:27:31:67:5b:dd:ef:46:
d3:38:b1:a9:be:5a:2a:b3:17:06:46:57:c5:64:b1:0d:27:24:
d2:6d:0b:fe:95:a2:d8:97:bc:59:c7:73:66:99:c1:76:fb:ac:
84:84:ad:6c:e6:a3:22:a5:84:b2:ee:8f:fc:00:53:0d:6b:82:
74:1b:2f:85:a5:59:c2:ea:73:f4:36:41:5f:53:d3:ad:71:f2:
84:82:4a:1c:1b:b6:f3:5c:ce:93:c1:e3:d0:38:30:fe:7b:23:
23:f4:2c:8c:d3:6b:a2:76:3d:fa:cd:e5:c5:b8:b8:56:0b:f3:
a5:97:70:ae:00:15:91:f9:56:0c:b3:69:8e:e2:ee:f6:6a:94:
d1:5c:d7:6f:11:6b:52:3a:31:8d:3a:79:d6:28:f4:fc:4a:17:
e0:8d:23:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:46:54 2025 by rpki-client