Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-49Ap58KiqbWwa7hPPxLuAMIvt8.roa
File: -49Ap58KiqbWwa7hPPxLuAMIvt8.roa (raw, json)
Hash identifier: oldZjGe5vRqjkIlnDbVV5bRZet08cgWY0aguwThMVds=
Subject key identifier: FB:8F:40:A7:9F:0A:8A:A6:D6:C1:AE:E1:3C:FC:4B:B8:03:08:BE:DF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 14BB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-49Ap58KiqbWwa7hPPxLuAMIvt8.roa
Signing time: Sun 07 Feb 2021 11:59:50 +0000
ROA not before: Sun 07 Feb 2021 11:59:50 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.193.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5307 (0x14bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:59:50 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=FB8F40A79F0A8AA6D6C1AEE13CFC4BB80308BEDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8f:e1:f2:f8:d1:06:c0:3f:4d:97:59:51:3c:
b0:3a:bb:4a:7f:79:b3:4b:5d:b1:9b:06:58:b4:61:
29:2c:21:30:d8:d1:4d:ca:32:4d:d2:65:a9:ef:2d:
e1:10:ac:43:98:33:d7:bc:f6:4d:81:b0:4f:f4:5f:
7e:1c:1f:29:91:3e:e6:d5:92:91:88:e4:a2:b6:66:
3b:f5:d1:2e:2e:7a:1a:db:b0:ba:15:3f:40:bd:a2:
a2:f0:b7:64:0b:4d:c4:6e:53:17:68:80:90:bc:09:
05:ba:d8:02:82:91:c4:b6:b5:68:59:2d:71:eb:52:
df:ae:e8:53:1a:5c:26:b3:33:c2:a9:3a:6d:65:ca:
35:42:06:e7:36:d3:49:2c:e0:d8:08:c9:e2:6b:4d:
02:db:1f:2c:e3:2d:4d:9e:8f:9e:54:ea:50:95:40:
21:6f:78:a7:f2:b8:e4:15:82:ce:2e:c0:df:1d:63:
d9:91:c7:b8:52:4c:70:e4:41:a1:fa:9e:d4:1f:c3:
95:f2:38:35:3c:a2:ad:2f:27:b6:e6:3b:95:25:b4:
bc:c3:33:b2:b9:ea:9d:96:bc:28:69:e8:c3:06:2e:
de:cf:c7:f0:71:7b:37:94:ac:73:e3:7d:2e:2b:ef:
0b:b1:16:f8:2a:ad:b7:02:12:64:d4:9d:f2:e1:20:
df:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:8F:40:A7:9F:0A:8A:A6:D6:C1:AE:E1:3C:FC:4B:B8:03:08:BE:DF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-49Ap58KiqbWwa7hPPxLuAMIvt8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.108.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:22:46:b6:6b:bc:e8:4e:47:26:d4:fd:09:dc:27:83:59:16:
1d:8f:6e:c6:a4:4d:72:33:68:3b:91:cc:4c:dc:d8:92:88:a3:
c7:9d:e8:80:b6:61:1b:28:e8:98:a1:48:a4:23:09:c6:04:f1:
60:a4:c3:23:2d:8d:66:b4:49:0b:8c:69:62:d3:d8:44:6f:b7:
a3:c2:42:38:f2:c8:65:fd:c9:f5:29:7a:e5:56:d6:90:a8:d3:
4d:42:12:08:16:66:f3:a4:f4:28:6f:95:ad:60:16:88:0c:62:
2a:4d:14:81:0f:64:11:99:86:30:c8:51:71:8c:4d:50:c9:c2:
92:96:24:ed:b5:e9:02:68:7c:0f:43:ab:de:50:66:d2:eb:f6:
21:39:96:2b:9c:d3:d6:e1:48:a7:03:d0:2a:60:4d:d2:2d:5b:
24:8e:9c:a0:ee:3c:af:64:33:35:a5:63:5c:d2:ce:b8:47:65:
bb:a5:94:9c:8d:88:14:61:36:ae:d7:7e:f8:81:93:41:cf:c0:
45:84:d5:ff:ea:26:08:ad:f2:1b:dc:cf:d9:7d:fd:fe:59:08:
b8:39:ad:34:a8:85:d0:08:fe:ae:cd:bf:05:4b:d1:87:66:8c:
a5:bc:fe:e8:32:3b:d4:83:9b:cf:f0:7a:67:e9:55:82:6b:64:
5d:65:ae:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:19:57 2025 by rpki-client