Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWT/sf_huqBPhK6AJfYxIO23YoZYSmo.roa
File: sf_huqBPhK6AJfYxIO23YoZYSmo.roa (raw, json)
Hash identifier: i1eCUZQwLmdQ1NWwxqHpi9pdPCzhWTfPeoJO8+ZfSfk=
Subject key identifier: B1:FF:E1:BA:A0:4F:84:AE:80:25:F6:31:20:ED:B7:62:86:58:4A:6A
Certificate issuer: /CN=7EC7F1677BB492380282153BB77EC2EBE3185378
Certificate serial: 0B4D
Authority key identifier: 7E:C7:F1:67:7B:B4:92:38:02:82:15:3B:B7:7E:C2:EB:E3:18:53:78
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/fsfxZ3u0kjgCghU7t37C6-MYU3g.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWT/sf_huqBPhK6AJfYxIO23YoZYSmo.roa
Signing time: Fri 01 Sep 2023 10:14:09 +0000
ROA not before: Fri 01 Sep 2023 10:14:09 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38851
IP address blocks: 43.250.44.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2893 (0xb4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7EC7F1677BB492380282153BB77EC2EBE3185378
Validity
Not Before: Sep 1 10:14:09 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B1FFE1BAA04F84AE8025F63120EDB76286584A6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:10:53:47:16:fe:71:6d:f7:69:3a:0d:22:d6:
8e:61:a8:54:bc:20:94:62:12:fa:d5:34:6e:c2:01:
4c:7b:c8:1b:84:bd:49:b5:39:a4:e1:98:7e:fe:34:
06:fc:ad:08:e7:8f:a7:a4:f4:ed:6c:e8:3e:f3:aa:
84:42:68:a0:b8:d5:86:4b:79:ee:82:7c:7c:d9:1a:
00:eb:25:ea:55:09:06:da:68:a5:03:9a:de:68:ca:
9c:85:3e:b6:40:53:c0:5e:b1:f6:54:6d:a2:95:21:
eb:c0:41:98:a3:a7:84:d3:21:bd:4b:ab:22:3d:2d:
32:b2:5d:e6:f9:61:95:0d:95:97:45:b1:45:d8:47:
06:b6:12:43:c6:e9:48:a0:77:d6:91:02:1f:b0:b7:
47:c5:a7:a8:5e:e6:4a:ba:f1:41:00:d8:f6:b2:eb:
87:5e:75:22:79:60:dd:a0:a1:99:ac:7b:7b:32:72:
e1:f7:f5:ad:6e:ad:54:d1:f9:3b:24:f1:83:e8:f7:
0c:91:d0:59:51:68:0e:ce:de:e8:4b:58:de:87:e2:
b0:01:1f:bd:c1:8c:59:f4:f3:ee:be:92:ae:43:da:
0c:90:41:ea:d4:49:e7:80:c8:35:24:03:b9:b2:a4:
70:e3:22:4b:35:61:70:fb:d5:0f:7c:7f:f6:78:4c:
65:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FF:E1:BA:A0:4F:84:AE:80:25:F6:31:20:ED:B7:62:86:58:4A:6A
X509v3 Authority Key Identifier:
keyid:7E:C7:F1:67:7B:B4:92:38:02:82:15:3B:B7:7E:C2:EB:E3:18:53:78
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWT/fsfxZ3u0kjgCghU7t37C6-MYU3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/fsfxZ3u0kjgCghU7t37C6-MYU3g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWT/sf_huqBPhK6AJfYxIO23YoZYSmo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.44.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:0a:7b:be:a7:d1:de:37:ec:60:ad:6c:a8:63:2b:38:cd:f1:
2c:9f:1e:a9:c2:b4:9a:15:7d:49:da:a7:73:dd:65:1f:43:9b:
c8:3b:ff:9d:13:5d:4f:e0:df:0c:d7:26:88:dc:d2:63:97:bd:
cb:95:77:ea:e3:8c:87:44:4c:9b:43:63:fd:c2:7a:fc:2e:b9:
b1:e9:43:7b:88:e4:21:2a:35:d8:b0:f6:e7:b5:b3:c3:d4:f1:
96:d8:f7:ff:ce:6f:5f:c2:a7:51:ea:bb:48:b3:8c:b9:29:02:
51:0a:c7:a5:fb:42:96:5b:28:90:5d:c7:13:90:44:ce:9f:bd:
b1:60:61:b1:ff:24:d0:e7:f4:07:00:81:5f:be:d8:2f:87:20:
91:92:fe:74:56:26:e3:7e:76:d5:a0:10:03:26:ae:19:9d:70:
5a:87:8e:e5:1a:e9:10:69:16:6a:fd:d4:7d:e5:f5:a7:6e:cc:
5c:84:04:4f:cb:03:ef:c8:fc:1a:71:91:97:41:d9:6c:b3:3c:
5e:ec:88:80:9d:3b:f3:9b:02:cc:09:bf:29:78:ad:6e:e4:0b:
a9:40:41:f1:75:84:d9:67:df:59:b9:bd:40:28:db:4a:f9:59:
81:a1:1e:ae:72:6b:e6:2d:90:de:ad:5b:b5:32:47:87:67:bc:
9d:79:fd:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:37:14 2025 by rpki-client