Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/d3tkSNS4ctBj1RHLBvkLCAgdRB0.roa
File: d3tkSNS4ctBj1RHLBvkLCAgdRB0.roa (raw, json)
Hash identifier: nsf7EUQphnLYfaFs+Lt9cdFzQicJa1ivo5QZeNfh80Y=
Subject key identifier: 77:7B:64:48:D4:B8:72:D0:63:D5:11:CB:06:F9:0B:08:08:1D:44:1D
Certificate issuer: /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Certificate serial: 0A97
Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/d3tkSNS4ctBj1RHLBvkLCAgdRB0.roa
Signing time: Thu 15 Sep 2022 02:51:00 +0000
ROA not before: Thu 15 Sep 2022 02:51:00 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 61.58.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2711 (0xa97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Validity
Not Before: Sep 15 02:51:00 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=777B6448D4B872D063D511CB06F90B08081D441D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e0:73:db:73:cc:99:9b:c6:a5:63:eb:2f:45:
87:ad:51:f0:fc:6e:4c:e1:dc:e6:13:34:51:93:93:
e5:05:0d:6e:88:99:e1:e3:83:e3:d7:1d:af:d4:ef:
32:5b:1f:a9:44:d7:aa:51:c8:34:19:83:9d:45:40:
f7:77:8e:90:4b:d6:2f:39:f4:f5:cb:e0:ef:18:8e:
79:6e:66:27:92:02:53:11:85:7a:4c:89:e0:6a:b8:
2b:91:d3:07:4d:21:96:02:e7:56:33:7e:02:61:6d:
3e:83:21:24:da:8c:75:80:65:41:49:26:2b:a5:27:
4a:bf:68:3c:6c:08:82:da:14:da:73:35:df:0b:45:
9e:41:b2:c7:10:aa:99:e8:80:66:d8:2a:15:3f:ed:
9d:01:a3:74:ba:cd:11:4c:92:a9:3b:3f:d5:dd:30:
dd:d3:88:17:65:70:4c:18:b8:1a:24:aa:d7:0d:2c:
1a:2b:a2:84:44:27:94:13:e5:4f:7a:8d:c8:8a:3b:
d6:90:75:a7:2b:db:b2:f9:7c:d7:c2:fa:82:da:78:
af:52:15:55:63:1e:1e:5d:45:5e:3b:58:2e:09:1a:
f5:e7:08:c2:12:f6:57:3f:e1:61:c2:31:8b:b6:c2:
05:c0:b3:db:3c:73:b0:e0:d9:1e:e1:c0:1b:4f:cb:
00:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:7B:64:48:D4:B8:72:D0:63:D5:11:CB:06:F9:0B:08:08:1D:44:1D
X509v3 Authority Key Identifier:
keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/d3tkSNS4ctBj1RHLBvkLCAgdRB0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.156.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:6e:5f:1e:95:e3:4c:0f:cf:a6:0d:be:da:8d:61:78:b9:f8:
18:5c:d6:5a:9a:7e:4b:af:73:f2:9b:73:77:fb:98:5f:00:78:
f1:37:6b:08:15:3f:81:81:84:ba:ae:59:0f:be:84:3e:67:da:
66:cf:2b:f9:27:9b:c5:c5:96:b5:b2:f2:51:d4:a2:72:79:6d:
3d:53:d6:4a:b5:87:bd:7b:c5:28:39:79:5b:4d:94:66:08:aa:
77:8f:61:df:ae:20:fe:56:a8:23:1a:ff:30:4e:08:52:12:95:
5f:80:a7:ab:a9:9a:ee:aa:a9:71:6d:ec:d8:ac:31:f8:f2:fd:
fb:7c:34:b0:5e:5d:fe:77:1f:a0:d0:96:18:d3:4e:cd:9b:8b:
c3:1d:3a:74:ec:77:2d:ad:c7:d4:51:46:bc:e4:f3:69:fc:d3:
d0:67:df:48:69:52:7e:53:0d:f0:90:86:e9:99:c9:65:ad:54:
5e:71:90:c3:22:2d:d6:a1:e4:62:2a:96:6b:c9:40:f1:17:43:
3a:32:98:42:bf:ec:7f:02:02:3a:be:79:d1:4b:50:38:e5:1d:
3e:21:45:0b:c6:3e:5b:0c:db:b3:7c:ed:c0:d8:e0:b6:7f:c9:
56:16:7c:e1:88:42:5f:22:24:a2:6a:0f:b7:15:fd:5e:06:73:
c5:84:42:1b
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCpcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTAy
NTgyQjAyN0U1NzAzOEVBMDBBM0U4NDg0RDU1REVFQTJFMUEyQTAeFw0yMjA5MTUw
MjUxMDBaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDc3N0I2NDQ4RDRCODcy
RDA2M0Q1MTFDQjA2RjkwQjA4MDgxRDQ0MUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCo4HPbc8yZm8alY+svRYetUfD8bkzh3OYTNFGTk+UFDW6ImeHj
g+PXHa/U7zJbH6lE16pRyDQZg51FQPd3jpBL1i859PXL4O8YjnluZieSAlMRhXpM
ieBquCuR0wdNIZYC51YzfgJhbT6DISTajHWAZUFJJiulJ0q/aDxsCILaFNpzNd8L
RZ5BsscQqpnogGbYKhU/7Z0Bo3S6zRFMkqk7P9XdMN3TiBdlcEwYuBokqtcNLBor
ooREJ5QT5U96jciKO9aQdacr27L5fNfC+oLaeK9SFVVjHh5dRV47WC4JGvXnCMIS
9lc/4WHCMYu2wgXAs9s8c7Dg2R7hwBtPywCbAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUd3tkSNS4ctBj1RHLBvkLCAgdRB0wHwYDVR0jBBgwFoAU4CWCsCflcDjqAKPo
SE1V3uouGiowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVElOUC80
Q1dDc0NmbGNEanFBS1BvU0UxVjN1b3VHaW8uY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
LzRDV0NzQ2ZsY0RqcUFLUG9TRTFWM3VvdUdpby5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL1RJTlAvZDN0a1NOUzRjdEJqMVJITEJ2a0xD
QWdkUkIwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD06nDAN
BgkqhkiG9w0BAQsFAAOCAQEAjm5fHpXjTA/Ppg2+2o1heLn4GFzWWpp+S69z8ptz
d/uYXwB48TdrCBU/gYGEuq5ZD76EPmfaZs8r+SebxcWWtbLyUdSicnltPVPWSrWH
vXvFKDl5W02UZgiqd49h364g/laoIxr/ME4IUhKVX4Cnq6ma7qqpcW3s2Kwx+PL9
+3w0sF5d/ncfoNCWGNNOzZuLwx06dOx3La3H1FFGvOTzafzT0GffSGlSflMN8JCG
6ZnJZa1UXnGQwyIt1qHkYiqWa8lA8RdDOjKYQr/sfwICOr550UtQOOUdPiFFC8Y+
Wwzbs3ztwNjgtn/JVhZ84YhCXyIkomoPtxX9XgZzxYRCGw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:46:51 2025 by rpki-client