Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-Us1cymE5T4MZALihLPH7NzvTc0.roa
File: -Us1cymE5T4MZALihLPH7NzvTc0.roa (raw, json)
Hash identifier: N3UMflgKyBp1Iz8oa85A9feeSlxFeb6m19RDLASJGNw=
Subject key identifier: F9:4B:35:73:29:84:E5:3E:0C:64:02:E2:84:B3:C7:EC:DC:EF:4D:CD
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0D20
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-Us1cymE5T4MZALihLPH7NzvTc0.roa
Signing time: Tue 29 Sep 2020 09:54:13 +0000
ROA not before: Tue 29 Sep 2020 09:54:13 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.192.64.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3360 (0xd20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:13 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F94B35732984E53E0C6402E284B3C7ECDCEF4DCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:63:0a:d9:a3:f7:d1:22:84:b2:06:e7:95:e2:
69:af:24:05:dd:08:87:97:76:55:9d:40:83:64:62:
99:f6:e8:31:29:e8:82:27:13:f0:de:6d:9d:f7:b3:
fb:bd:4a:72:72:f3:9e:45:76:9f:1e:d9:6b:39:5f:
8a:a8:43:b5:1a:95:64:18:40:b8:45:c4:1e:67:e7:
c2:73:e7:b2:b0:6a:a2:d4:ff:14:80:f4:48:21:c0:
eb:5f:17:b3:56:01:2c:27:f6:05:b7:26:ba:74:a0:
87:c1:24:d4:f9:e4:0b:a8:0c:15:4b:02:d1:bd:9d:
2b:7c:86:d9:06:2a:6f:51:bf:c2:e7:59:06:07:4d:
eb:8d:61:8e:f1:8e:4d:95:11:29:80:1f:e7:cc:80:
b5:bb:8b:a8:ad:2f:f6:49:1a:2b:f8:13:49:9a:42:
33:7f:e3:a1:5f:a8:d5:6d:84:c9:82:28:7e:a6:d6:
22:d4:93:fa:de:72:b3:28:90:72:0a:18:f3:7c:63:
3a:92:eb:4f:d8:db:e1:a0:c8:01:e0:8d:6f:57:d4:
66:db:2c:53:b5:cd:6d:b6:2d:ad:be:7e:ba:5c:77:
83:9c:75:ac:21:d1:aa:8a:56:f2:5a:b5:61:7c:e1:
5b:14:42:89:46:7d:86:83:0d:cc:b2:1f:0b:17:94:
c3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:4B:35:73:29:84:E5:3E:0C:64:02:E2:84:B3:C7:EC:DC:EF:4D:CD
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-Us1cymE5T4MZALihLPH7NzvTc0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.64.0/21
Signature Algorithm: sha256WithRSAEncryption
a4:65:7f:36:dd:c1:f2:8f:ed:e3:77:f1:f2:55:38:88:69:5b:
20:93:d1:3f:f5:f6:6a:61:ef:f1:8c:70:7d:b0:77:7c:33:27:
84:fe:61:77:cb:0e:a0:e6:f5:de:56:0b:ca:71:68:61:53:bd:
b0:e8:43:ae:d4:a5:44:68:8f:96:b7:b1:b3:36:4c:35:e1:ac:
be:b5:58:17:4a:7a:1a:85:bc:6a:50:78:c3:01:d8:67:48:17:
f8:68:fe:44:52:ac:f5:4f:fa:4c:a7:c7:00:94:06:12:ce:e1:
b4:ae:c7:5a:09:1d:55:d2:ac:10:28:08:0c:73:97:4b:a0:5b:
af:62:f3:1a:e5:e1:53:dc:81:f2:33:e7:99:04:6b:7c:12:70:
fc:b6:e1:43:10:7d:9d:ba:21:17:e0:fc:ac:9b:3f:14:ca:4f:
38:25:fe:fa:a7:b0:f6:ea:8d:72:89:72:dc:55:ba:94:66:f6:
af:44:9e:c1:fa:f0:d6:2f:77:9f:46:a1:71:c9:58:1e:84:6c:
92:d6:af:24:c0:0a:2c:6d:7d:71:50:74:0b:da:c0:4f:d8:45:
e9:19:79:ab:09:b1:16:4a:a2:ef:98:ef:e9:c5:a5:57:e0:6d:
b5:f1:c1:b5:a2:bd:d8:7c:71:1c:74:cc:ff:22:76:7c:5d:07:
1e:21:93:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:32 2025 by rpki-client