Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0Iy1QiFfRIVoHdCGotnSpn0ozPo.roa
File: 0Iy1QiFfRIVoHdCGotnSpn0ozPo.roa (raw, json)
Hash identifier: q5tHcLLzLNa9+cZROOU15BZLx0Beh3q+BW5mfa6xoHY=
Subject key identifier: D0:8C:B5:42:21:5F:44:85:68:1D:D0:86:A2:D9:D2:A6:7D:28:CC:FA
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2817
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0Iy1QiFfRIVoHdCGotnSpn0ozPo.roa
Signing time: Fri 01 Sep 2023 10:04:55 +0000
ROA not before: Fri 01 Sep 2023 10:04:55 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 123.195.192.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10263 (0x2817)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:04:55 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=D08CB542215F4485681DD086A2D9D2A67D28CCFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:85:a8:bf:ba:5d:52:6d:7b:a6:f7:89:17:90:
71:ec:80:9c:6f:5b:4f:0f:a5:cf:4a:92:c4:8f:02:
16:ec:55:d5:03:ad:68:ee:d0:5d:cc:7a:a2:76:c2:
ac:25:8e:18:6e:c7:30:dc:ad:ed:0f:1d:48:e1:7a:
e2:c0:42:0d:13:e8:70:86:53:e9:38:19:15:94:50:
5d:a3:7b:d0:07:b3:e4:f7:aa:53:8a:1a:23:28:f2:
51:6f:2c:e3:fe:52:16:34:31:3f:a0:5e:cb:46:c0:
9c:c2:e5:3a:c8:08:6f:44:22:5c:b8:2c:83:f9:25:
fe:3c:6a:32:6c:02:65:24:0c:69:03:5b:f6:49:28:
35:fa:13:f6:14:d4:f9:cc:22:a0:13:a8:33:a0:ee:
c7:3f:10:db:b7:f5:5a:3a:d0:67:c6:50:61:08:a7:
90:cc:ce:4a:24:6c:8c:c7:c3:13:61:a9:96:a2:54:
61:db:06:c0:8d:b8:fe:0c:f9:c5:42:1e:34:b8:d5:
14:55:7a:d5:fc:d3:34:71:a3:f2:3d:80:52:71:38:
be:fc:e8:d4:65:f1:7b:1d:8a:82:06:61:1f:13:62:
0f:39:60:4b:52:8b:50:df:8c:6d:13:37:68:bd:4c:
5e:ad:83:ed:54:5d:f8:6f:1e:e6:f2:b3:03:26:5e:
51:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:8C:B5:42:21:5F:44:85:68:1D:D0:86:A2:D9:D2:A6:7D:28:CC:FA
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0Iy1QiFfRIVoHdCGotnSpn0ozPo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.192.0/20
Signature Algorithm: sha256WithRSAEncryption
5a:a1:e5:a0:48:79:ac:a2:6a:57:66:d6:fd:2d:4f:32:20:c6:
af:62:a2:99:28:52:e1:a0:42:e1:4e:9b:3a:91:58:47:3c:da:
f4:7b:cb:a8:7f:90:8d:c9:e1:ab:1f:79:3b:3a:70:47:b0:0d:
51:8c:2e:62:cf:14:c9:bb:0f:5c:b8:c2:bf:b2:1f:00:e1:53:
85:70:e5:51:38:b3:9c:4a:7f:68:37:4e:ff:df:45:ee:6d:67:
e6:ab:db:29:d6:fe:00:f9:a6:8e:57:ae:1f:50:29:68:50:61:
0b:80:b5:7a:82:5a:5e:26:10:0c:17:0f:fa:6d:a2:69:30:dd:
3f:90:5e:ec:8d:0c:da:55:12:27:95:de:7f:16:8a:fd:d9:79:
87:0f:34:e0:b3:75:a6:58:d1:3c:d7:68:b1:c3:4e:10:66:8f:
2d:a8:19:26:e6:7f:ff:89:50:e7:9a:d6:40:84:43:af:3a:f4:
88:3c:60:ab:c3:18:62:ed:5d:63:d7:f8:95:e6:84:29:90:dc:
97:6d:2f:f0:1b:18:ed:c6:fd:26:11:a1:29:16:cd:3a:97:ba:
00:5b:17:19:06:2d:86:3e:40:aa:fa:3d:50:08:2c:cf:c1:cc:
83:24:06:67:2d:96:fa:2c:1e:ed:51:40:05:37:8e:64:c5:04:
3f:c7:53:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:19:26 2025 by rpki-client