Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWT/6JDcVGyD-e8HeSe94_lTDsjq5lw.roa
File: 6JDcVGyD-e8HeSe94_lTDsjq5lw.roa (raw, json)
Hash identifier: vR1/53lp21ZOcjKmTFGcp9xK+by7fXdGgYRIwt+sv8w=
Subject key identifier: E8:90:DC:54:6C:83:F9:EF:07:79:27:BD:E3:F9:53:0E:C8:EA:E6:5C
Certificate issuer: /CN=7EC7F1677BB492380282153BB77EC2EBE3185378
Certificate serial: 0A5B
Authority key identifier: 7E:C7:F1:67:7B:B4:92:38:02:82:15:3B:B7:7E:C2:EB:E3:18:53:78
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/fsfxZ3u0kjgCghU7t37C6-MYU3g.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWT/6JDcVGyD-e8HeSe94_lTDsjq5lw.roa
Signing time: Thu 15 Sep 2022 02:38:52 +0000
ROA not before: Thu 15 Sep 2022 02:38:52 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38851
IP address blocks: 43.250.44.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2651 (0xa5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7EC7F1677BB492380282153BB77EC2EBE3185378
Validity
Not Before: Sep 15 02:38:52 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E890DC546C83F9EF077927BDE3F9530EC8EAE65C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:e9:46:03:7f:bd:bf:9a:30:15:fc:5a:13:77:
08:d0:b9:70:d8:23:a1:b4:cf:38:0c:8c:10:23:02:
e7:90:a7:f7:41:5b:68:eb:41:f2:1d:1b:08:e8:c4:
37:8d:f0:36:2d:4b:3f:d5:7c:09:35:13:85:ce:a6:
6c:06:4b:81:ff:0f:b7:82:05:e1:56:ef:4e:db:f3:
e5:4b:97:cd:4a:45:1e:9e:5c:f6:f7:d6:9e:55:5b:
6c:48:34:bf:80:b6:a4:75:09:02:81:9f:95:5e:24:
0e:b6:a6:1e:f8:b9:ed:96:cd:db:8d:4b:54:c5:40:
eb:ca:7c:02:61:90:61:75:e6:ff:9f:57:5a:6b:97:
03:fe:8a:0b:f2:82:bd:59:08:f9:c2:8e:dc:43:76:
e6:88:8f:1f:61:90:51:96:b4:c7:23:4e:6e:28:35:
a2:29:09:1a:89:2d:d4:31:b9:8a:ba:06:37:f9:88:
84:a4:74:99:10:d5:b9:24:ff:4e:ad:26:57:f1:ea:
74:45:64:2e:5a:00:42:65:cc:64:35:30:e1:7f:82:
a5:5b:c0:6d:27:c6:4d:e3:11:d5:6e:19:bc:ee:12:
1b:42:55:0b:42:c1:19:10:c3:b2:c5:fe:37:97:41:
80:61:cb:c5:ec:e2:bf:a1:66:18:f6:7c:ee:90:21:
ec:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:90:DC:54:6C:83:F9:EF:07:79:27:BD:E3:F9:53:0E:C8:EA:E6:5C
X509v3 Authority Key Identifier:
keyid:7E:C7:F1:67:7B:B4:92:38:02:82:15:3B:B7:7E:C2:EB:E3:18:53:78
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWT/fsfxZ3u0kjgCghU7t37C6-MYU3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fsfxZ3u0kjgCghU7t37C6-MYU3g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWT/6JDcVGyD-e8HeSe94_lTDsjq5lw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.44.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:ed:f4:f3:71:85:e6:90:d1:eb:3d:f9:38:46:fa:71:11:9b:
d9:f2:f7:bc:d2:be:cf:8f:ce:89:5c:63:cf:94:28:52:87:b2:
ab:04:b0:4c:39:f2:da:a7:c0:51:17:83:4c:c3:52:33:3d:5a:
88:37:9e:7e:bf:69:65:50:4a:23:c0:ac:32:ec:2a:12:8d:75:
22:dc:a6:6b:96:b2:a7:43:2a:b1:a9:c5:63:79:2e:df:82:36:
2e:ad:aa:35:55:17:05:b7:57:62:d5:35:17:91:55:4f:e9:1e:
81:f8:b2:cf:d4:0b:0f:24:ed:d5:b5:89:0a:61:9a:39:ac:64:
84:c6:ac:e3:3c:0b:51:f3:e6:c0:54:da:34:0e:de:b7:cb:17:
19:6c:6b:75:33:b3:47:d0:3d:82:cb:60:f1:4d:28:88:ad:ba:
84:f1:d1:d8:3e:94:c5:ae:b5:d9:d3:01:4b:66:8f:9b:fe:da:
da:47:1d:9c:20:f9:cc:62:5f:76:de:fc:dc:5b:99:26:ec:64:
48:bb:7e:38:34:e6:60:5b:80:ff:a5:f0:60:c9:bc:6d:8c:ef:
bd:7b:d8:c4:b9:50:2d:ed:30:bc:fa:7f:ce:93:18:4c:a7:3f:
39:df:bb:bb:70:91:c5:05:d8:66:ed:8c:45:fb:b9:ee:39:36:
7f:aa:81:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:23:36 2025 by rpki-client