Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/1MvR4f40d91it1zyF_6p6zi9mvU.roa
File: 1MvR4f40d91it1zyF_6p6zi9mvU.roa (raw, json)
Hash identifier: rMB3gUge8YZH3JTG7kS+U9uqDGuJBDLa5vHpvyA2VDQ=
Subject key identifier: D4:CB:D1:E1:FE:34:77:DD:62:B7:5C:F2:17:FE:A9:EB:38:BD:9A:F5
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0E03
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/1MvR4f40d91it1zyF_6p6zi9mvU.roa
Signing time: Wed 24 Jan 2024 05:59:02 +0000
ROA not before: Wed 24 Jan 2024 05:59:02 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131627
IP address blocks: 219.91.0.0/17 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3587 (0xe03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 24 05:59:02 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=D4CBD1E1FE3477DD62B75CF217FEA9EB38BD9AF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ea:75:3f:78:2b:b0:09:ce:fc:31:f8:42:5c:
6b:30:21:df:b9:5a:b9:65:d1:a5:71:db:13:0b:57:
c0:26:fa:03:a5:bb:39:b3:46:2a:4f:73:2c:db:e3:
ce:58:f9:5b:19:15:5d:84:0a:6c:3f:a8:35:d2:36:
60:3c:9e:e5:0a:b1:14:d1:5f:77:46:98:84:b3:3f:
f0:c3:83:92:08:9f:df:90:76:88:fe:fc:20:55:d5:
7e:a5:8f:5e:4a:3b:57:73:e9:47:84:08:b4:ef:83:
fa:99:d3:8b:7c:9f:cc:43:c1:3d:a0:5c:b4:81:58:
14:42:a5:8d:f1:aa:cc:9c:21:a6:79:c7:e4:2f:08:
97:44:17:14:f9:d8:7e:3e:bf:55:17:bb:29:c6:f3:
6d:62:7c:78:a6:6a:9a:94:2c:0e:77:b7:70:97:2c:
67:10:a0:04:33:66:d8:4f:d8:2d:8f:6d:41:33:c3:
9c:4e:09:a1:ec:01:5f:0a:6c:66:f8:61:b6:53:1e:
58:ae:3e:5b:a5:e4:fa:33:bb:a0:88:57:20:a8:f0:
03:f2:3a:d1:a0:89:65:70:d5:ab:cd:a8:0f:d1:4a:
04:24:9a:29:dc:52:07:66:22:1c:d8:78:39:25:fc:
6d:c4:ca:c8:33:c1:b5:e7:f4:20:d1:be:e3:84:d4:
89:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CB:D1:E1:FE:34:77:DD:62:B7:5C:F2:17:FE:A9:EB:38:BD:9A:F5
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/1MvR4f40d91it1zyF_6p6zi9mvU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.91.0.0/17
Signature Algorithm: sha256WithRSAEncryption
03:67:6b:f4:77:3b:4b:d0:db:c2:66:91:dd:31:50:6a:0b:e7:
52:0c:ea:f9:28:02:66:03:1e:45:a2:51:5a:c8:2f:6a:99:f0:
04:1d:55:98:e2:20:0a:45:bc:cc:cc:4d:7b:bc:e7:fa:4b:48:
27:02:84:78:65:bf:0f:08:75:23:57:70:33:01:af:e4:cb:ee:
5c:63:d9:89:13:61:65:e8:76:3a:90:cb:89:d7:87:13:86:02:
b9:f8:3c:a7:45:f4:78:18:d1:a9:04:a3:f0:de:06:91:10:d1:
02:0d:e5:5b:fc:7b:62:24:68:8e:09:ea:76:d4:35:ad:cb:cf:
21:7b:1d:94:f0:94:cb:bb:d7:c7:22:c4:6b:ea:7c:d4:91:79:
5d:10:91:0f:b7:1b:4c:87:c2:70:99:97:2f:5f:60:3a:f2:cf:
73:b6:29:ff:ef:f9:ba:1e:aa:a6:f6:17:90:52:ab:60:92:92:
ec:3d:d4:57:ba:eb:92:d8:4e:bd:06:58:69:cf:75:3b:9b:7a:
85:2a:c3:c9:5c:09:35:b7:0d:a8:6b:21:65:5c:cb:d1:43:ba:
dd:c5:be:09:3f:2f:8f:0e:89:8c:97:7c:74:e3:00:3d:2a:21:
12:e8:5c:99:87:64:9b:24:bd:bd:95:dd:2a:c5:6e:db:78:74:
8a:44:f0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 05:12:42 2025 by rpki-client