Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNTT/9hep0EkE6JTjoKrKoI3y91bQjYw.roa
File: 9hep0EkE6JTjoKrKoI3y91bQjYw.roa (raw, json)
Hash identifier: myl6oWLM/eqYI0dhLAWFkFhRDaLvqcc4Do/UAYUX/XM=
Subject key identifier: F6:17:A9:D0:49:04:E8:94:E3:A0:AA:CA:A0:8D:F2:F7:56:D0:8D:8C
Certificate issuer: /CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214
Certificate serial: 0B6C
Authority key identifier: 9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/9hep0EkE6JTjoKrKoI3y91bQjYw.roa
Signing time: Fri 01 Sep 2023 10:13:55 +0000
ROA not before: Fri 01 Sep 2023 10:13:55 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 3949
IP address blocks: 61.58.41.176/28 maxlen: 28
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2924 (0xb6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214
Validity
Not Before: Sep 1 10:13:55 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F617A9D04904E894E3A0AACAA08DF2F756D08D8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:99:43:a7:0b:df:47:77:ef:e1:62:4f:16:66:
05:f4:ec:19:35:41:76:bd:f7:54:7c:e6:ee:44:e6:
26:93:8d:b9:31:20:87:40:04:e6:d1:0a:18:64:65:
67:91:c1:60:79:19:34:ac:c3:bb:87:52:90:f8:8c:
f6:f6:60:ed:5b:8f:53:53:3f:59:26:35:05:05:43:
85:fe:65:0a:f0:4f:da:0c:2a:25:f2:38:dd:09:86:
57:8e:1f:ab:c4:8a:08:1e:ac:f1:d7:96:e3:43:8a:
36:aa:03:3d:5a:b3:2e:1e:86:d4:4e:5a:40:14:a5:
a3:48:90:77:82:f6:94:d1:57:9f:a6:da:c6:25:9a:
dd:4a:fd:19:2e:2e:7c:c5:0b:50:60:b7:9e:b3:26:
ea:d5:98:5d:68:07:2a:ab:96:85:ea:3d:17:fb:b3:
90:8c:1e:37:24:f8:45:44:98:a8:2c:30:47:52:87:
8b:5d:44:1b:b0:f3:6f:b7:e5:19:34:32:4e:a7:c5:
2a:fe:08:1d:29:c7:35:76:83:3c:f2:28:6e:79:d0:
a4:65:fc:ae:24:d9:3b:93:30:b3:ba:32:08:85:45:
8c:c3:bc:79:69:20:d6:ef:60:bf:05:78:47:b8:b6:
bb:16:51:7a:07:64:58:4d:5a:7a:b5:fc:68:9b:10:
7b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:17:A9:D0:49:04:E8:94:E3:A0:AA:CA:A0:8D:F2:F7:56:D0:8D:8C
X509v3 Authority Key Identifier:
keyid:9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/9hep0EkE6JTjoKrKoI3y91bQjYw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.41.176/28
Signature Algorithm: sha256WithRSAEncryption
54:8a:34:4f:d7:28:63:d9:72:f0:26:26:d8:eb:2e:da:b4:aa:
58:12:00:a0:a1:c7:d9:a4:7d:f3:6a:9f:dd:00:99:37:c4:a0:
79:6a:9c:ab:25:74:54:12:01:9a:29:8a:22:50:df:52:c8:97:
42:71:06:00:30:6a:2e:06:13:d1:0d:c2:e5:e0:9c:92:f9:26:
f3:03:bf:3f:6b:ff:ff:f7:88:9f:2e:72:f7:b9:86:4d:1e:9d:
d3:02:66:82:2c:54:7c:08:10:5e:f7:20:27:e4:48:08:cc:cd:
75:a3:30:b7:e4:33:f9:2c:57:d1:7b:a0:4f:78:d5:03:3b:58:
99:91:8b:c9:3e:3d:e2:dd:bd:22:fb:35:77:8c:1f:9b:a9:d8:
80:0c:9d:20:41:92:44:e5:36:7c:37:de:5d:fb:3a:91:6b:e5:
fd:c7:c6:4e:22:95:5f:23:92:7e:6d:9c:5d:a5:07:9b:ff:62:
93:2e:56:1f:fd:eb:8a:66:cf:af:23:0e:b6:82:52:24:8c:6e:
ae:c5:20:57:ec:f2:8a:9d:9d:74:90:37:38:e0:d5:d2:8a:4d:
db:02:52:8e:0f:08:49:3e:1f:7f:30:07:da:2b:69:39:c5:e8:
60:66:77:37:9b:b8:5d:52:fc:b4:20:5f:be:7b:df:17:ac:9f:
1e:f5:d7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:15:01 2025 by rpki-client