Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWD-COM-TW/uRgSfwNyzXZgfkduXH2HG1Tpv-U.roa
File: uRgSfwNyzXZgfkduXH2HG1Tpv-U.roa (raw, json)
Hash identifier: kv1oLYt41x4wypH/QFafT0Ke33yIp4FxAqVHYy4IaO8=
Subject key identifier: B9:18:12:7F:03:72:CD:76:60:7E:47:6E:5C:7D:87:1B:54:E9:BF:E5
Certificate issuer: /CN=C28F57324E766BC5E9FA99C4D7AD4C40D3958FC6
Certificate serial: 0BC3
Authority key identifier: C2:8F:57:32:4E:76:6B:C5:E9:FA:99:C4:D7:AD:4C:40:D3:95:8F:C6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/wo9XMk52a8Xp-pnE161MQNOVj8Y.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWD-COM-TW/uRgSfwNyzXZgfkduXH2HG1Tpv-U.roa
Signing time: Fri 19 Jul 2024 03:41:23 +0000
ROA not before: Fri 19 Jul 2024 03:41:23 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 133955
IP address blocks: 223.165.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3011 (0xbc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C28F57324E766BC5E9FA99C4D7AD4C40D3958FC6
Validity
Not Before: Jul 19 03:41:23 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B918127F0372CD76607E476E5C7D871B54E9BFE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ae:05:81:64:1a:eb:88:a3:ef:7c:41:74:68:
9e:44:94:8d:6b:f8:cd:26:b0:16:dd:f2:a7:15:2d:
9f:d8:7b:bc:a4:f4:e2:8f:e3:60:82:a2:44:25:41:
7c:64:5a:35:24:18:f2:45:b4:54:9d:f5:f3:fa:98:
44:fd:6d:41:d7:22:61:d3:b4:73:a6:e3:d0:8a:f3:
c9:c5:77:ac:c8:76:c8:6b:d7:cc:5e:0e:a2:47:8a:
87:8b:e3:7c:a9:17:49:db:da:6d:6c:57:6a:28:7d:
8e:9d:0f:9f:74:28:c2:0b:51:50:44:6e:7c:9e:3b:
a5:7a:85:23:4a:2c:14:78:46:fb:81:b3:e5:28:e1:
a5:8f:bc:7c:ee:a8:a5:6f:5d:23:44:82:6f:b8:60:
61:51:dd:46:64:0a:c7:eb:04:b3:e1:79:b4:c8:68:
ff:09:93:ed:6c:e8:03:7e:c7:95:0e:b1:05:bb:3f:
fa:17:7b:34:a9:18:7d:20:53:ce:6c:87:55:fb:8c:
af:11:a5:11:3b:53:e0:9a:bc:2a:b5:1e:bf:39:07:
8d:d2:4e:79:c4:30:cf:95:7a:4d:2e:6c:62:13:95:
64:81:13:f8:ff:4b:c6:4b:80:50:04:91:db:3a:d7:
33:3e:07:f8:11:e8:e6:62:35:52:f0:3a:ce:c3:29:
9a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:18:12:7F:03:72:CD:76:60:7E:47:6E:5C:7D:87:1B:54:E9:BF:E5
X509v3 Authority Key Identifier:
keyid:C2:8F:57:32:4E:76:6B:C5:E9:FA:99:C4:D7:AD:4C:40:D3:95:8F:C6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWD-COM-TW/wo9XMk52a8Xp-pnE161MQNOVj8Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/wo9XMk52a8Xp-pnE161MQNOVj8Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWD-COM-TW/uRgSfwNyzXZgfkduXH2HG1Tpv-U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.165.12.0/24
Signature Algorithm: sha256WithRSAEncryption
53:bf:02:8b:93:6d:a6:62:df:3a:cd:55:f8:78:05:bb:8d:2a:
52:b0:d1:8d:5a:4d:79:d5:51:17:8c:2c:d3:7a:02:d5:ac:df:
bf:77:f1:73:94:cb:d0:16:49:41:3c:d7:1f:a5:af:3c:06:4f:
35:68:2c:97:21:63:a9:42:c9:a9:4c:40:56:82:53:3b:a3:a3:
3b:0c:12:2a:0c:57:e7:b8:6a:cd:53:05:83:c0:17:ba:aa:b2:
51:57:4e:99:cc:52:43:6c:8c:7a:c7:84:42:4d:db:35:b2:b3:
85:66:28:52:39:58:fa:b7:d3:93:61:b4:1c:72:36:1d:ee:fe:
02:69:92:32:7a:30:18:28:bd:50:de:4c:c6:de:8a:1c:18:4b:
e7:e7:33:81:e5:4d:3f:88:3a:08:5d:90:a9:5d:b0:3d:88:21:
5a:bc:50:19:b7:c0:ab:67:7a:29:1c:0b:70:0a:df:0a:7d:d8:
85:f9:36:62:21:b8:03:ce:cd:01:f5:c9:84:87:76:68:5f:10:
44:f5:64:96:31:8c:20:b9:54:c6:6b:5d:0c:15:78:22:3e:42:
35:23:5a:8f:e3:0b:7d:d8:18:4d:80:47:61:19:db:32:c9:78:
56:6f:99:7a:18:0e:3c:fc:b1:22:36:85:e9:64:5e:ef:cb:b4:
64:04:c9:88
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:34:33 2025 by rpki-client