Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/FET/9Lunl7IPZ39CehTHC92juhywzr4.roa
File: 9Lunl7IPZ39CehTHC92juhywzr4.roa (raw, json)
Hash identifier: cL1rsQWJeEfhulRhHRPqxZUJcH++2Lx8X1DO6R4nlDA=
Subject key identifier: F4:BB:A7:97:B2:0F:67:7F:42:7A:14:C7:0B:DD:A3:BA:1C:B0:CE:BE
Certificate issuer: /CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Certificate serial: 0DEA
Authority key identifier: 3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/9Lunl7IPZ39CehTHC92juhywzr4.roa
Signing time: Mon 15 Jan 2024 21:35:25 +0000
ROA not before: Mon 15 Jan 2024 21:35:25 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9922
IP address blocks: 124.218.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3562 (0xdea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E63A587D5E71FBBD8C81EC34FE5366AC691AB51
Validity
Not Before: Jan 15 21:35:25 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F4BBA797B20F677F427A14C70BDDA3BA1CB0CEBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:93:88:14:e8:e0:5e:2a:85:8e:0b:19:23:f2:
0a:38:3d:e0:00:56:13:60:0c:02:a3:28:85:9b:f8:
52:2c:b2:27:43:ab:61:38:f2:35:24:f4:fd:e4:57:
82:f1:8d:fc:ca:8d:ba:50:43:8e:5e:e6:f7:b3:f1:
ea:9e:f8:7c:a2:d3:c6:c7:b1:ce:c7:71:e0:21:b8:
51:23:ed:a2:00:d3:66:52:6a:b2:2e:a1:53:53:e9:
b4:ed:f2:c7:b3:4f:7c:a2:29:e0:07:98:36:77:81:
cb:0f:9e:0a:c9:4b:ce:d5:29:e0:e2:24:de:d6:28:
9f:35:aa:05:e4:d9:2f:01:f2:27:6b:70:dd:49:96:
fe:b5:41:d0:2a:82:70:77:7d:61:e9:11:ad:cf:06:
2f:76:40:8f:d3:a0:26:ac:16:8e:6c:10:fc:12:f6:
83:f9:e5:8f:51:ef:72:9e:b4:b9:70:26:d3:6d:b0:
7a:5d:a1:26:71:ab:2c:7b:76:b0:2b:8a:c6:35:aa:
42:0c:c5:f9:53:37:e1:42:bc:f4:e8:12:85:4d:8c:
0a:a7:88:88:38:3f:cf:7a:f4:1d:cf:fe:48:91:c5:
03:f8:86:2a:80:a7:50:d3:e8:e7:77:a3:76:7b:31:
6e:ac:0f:fa:6f:d0:38:48:ae:8d:52:d4:68:4c:07:
db:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BB:A7:97:B2:0F:67:7F:42:7A:14:C7:0B:DD:A3:BA:1C:B0:CE:BE
X509v3 Authority Key Identifier:
keyid:3E:63:A5:87:D5:E7:1F:BB:D8:C8:1E:C3:4F:E5:36:6A:C6:91:AB:51
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/PmOlh9XnH7vYyB7DT-U2asaRq1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PmOlh9XnH7vYyB7DT-U2asaRq1E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/FET/9Lunl7IPZ39CehTHC92juhywzr4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.218.174.0/24
Signature Algorithm: sha256WithRSAEncryption
50:93:4e:a7:2a:d4:0e:d4:7a:65:35:b3:81:6f:7f:fc:6f:4a:
7d:5b:ea:dd:0c:f7:65:f6:91:27:a7:0d:7c:17:4f:b5:33:d9:
2b:c5:c2:22:aa:2f:59:ad:b9:37:d3:9a:e7:0a:79:15:33:d2:
83:d7:94:46:a4:2b:d7:95:ad:69:be:b3:12:61:f3:1e:f6:0a:
4c:69:67:60:fe:fe:3b:e9:d9:61:32:d1:eb:22:61:7c:bc:1a:
0f:ef:53:f4:2f:42:a4:cb:53:e0:6a:a5:91:3e:81:b5:0b:91:
f5:89:49:32:b1:cd:16:f1:3c:9b:bc:92:ab:01:c5:24:c8:ba:
91:3c:2c:68:4a:1e:a2:7a:48:ff:94:48:f0:8f:60:2e:4e:47:
f2:d0:90:fc:64:b6:21:5a:ca:71:bb:6d:a0:76:bb:e5:1f:36:
e3:69:0e:7f:8c:80:3f:5d:97:33:21:51:65:7d:24:78:23:97:
b2:8f:c3:49:72:7c:27:62:be:9e:f4:8e:e9:48:20:98:e5:55:
54:fd:b7:b1:1a:7f:52:98:2b:7c:be:85:87:b5:ec:f7:0c:52:
1b:95:35:a6:0b:06:5d:1a:17:60:22:f4:7c:68:c5:ff:05:b8:
b7:0e:d8:d9:a2:d4:c0:d9:66:64:b0:79:84:37:94:59:71:3c:
d0:61:e7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:53:27 2025 by rpki-client