Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0Xx8QyBTYn8uYqexFQ_HdBc3e8A.roa
File: 0Xx8QyBTYn8uYqexFQ_HdBc3e8A.roa (raw, json)
Hash identifier: jtK5zwNMqSP7GV5iGSoEEMGauJwGuUbao5tG7vqAYLM=
Subject key identifier: D1:7C:7C:43:20:53:62:7F:2E:62:A7:B1:15:0F:C7:74:17:37:7B:C0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 18AD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0Xx8QyBTYn8uYqexFQ_HdBc3e8A.roa
Signing time: Sun 07 Feb 2021 12:51:02 +0000
ROA not before: Sun 07 Feb 2021 12:51:02 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 118.232.128.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6317 (0x18ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:51:02 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D17C7C432053627F2E62A7B1150FC77417377BC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:77:76:c8:e8:99:2e:60:f3:f7:14:8c:f5:b8:
72:05:c2:68:b2:9d:f2:f1:c3:59:6e:24:4d:a5:64:
7a:41:42:32:db:45:1f:de:41:eb:6c:75:34:32:48:
cf:d4:54:77:7e:6b:6a:ff:f2:30:a9:5c:8e:e0:46:
53:e8:e5:63:6a:33:dd:3c:72:1b:5f:de:e1:6b:51:
94:58:33:ab:6f:5e:f0:cc:df:5e:b1:ec:33:1d:18:
37:f7:64:62:98:6b:19:64:f0:9d:be:37:cc:c7:5b:
8c:28:d5:d1:03:27:62:df:7b:c7:59:5b:61:ca:b1:
fc:c3:41:4f:a6:8a:e6:98:53:10:dc:8f:57:cc:3c:
88:fb:66:5f:ae:fc:1e:c8:a5:56:1c:68:2f:9c:75:
87:8e:28:53:ae:e7:af:bc:12:db:b8:e8:74:17:8b:
e6:46:02:90:09:84:bb:ef:81:e3:e9:25:f3:3b:65:
31:40:fa:85:e6:d2:8b:d6:7e:3b:b4:de:4c:9c:cf:
18:69:ab:a1:19:f5:3e:21:c6:b3:e4:ae:6c:e1:78:
9b:f9:96:ba:d6:28:a0:83:0b:97:b4:01:2f:c7:ae:
d2:78:73:34:0f:c4:55:53:bc:ee:81:86:56:87:dc:
fe:b9:bd:57:7e:e6:f1:8e:35:05:e3:ac:56:60:89:
ed:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7C:7C:43:20:53:62:7F:2E:62:A7:B1:15:0F:C7:74:17:37:7B:C0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0Xx8QyBTYn8uYqexFQ_HdBc3e8A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.128.0/19
Signature Algorithm: sha256WithRSAEncryption
92:59:97:f2:6b:69:14:5c:cd:6d:75:78:0a:a9:e4:af:3a:6c:
a2:28:54:54:f9:42:7a:33:87:5a:09:ff:d3:ab:52:63:97:e2:
f7:26:0d:4a:20:3e:e0:22:7e:43:61:69:93:b6:8a:89:14:42:
f9:1b:d0:c8:b7:13:c7:f9:9a:38:f7:ef:23:b6:92:df:75:00:
84:d3:86:e9:f8:fe:bd:a7:0b:3a:a5:67:7e:ff:0a:c0:02:6c:
43:da:05:9b:1c:c0:9d:a8:34:2e:ce:c8:71:83:90:59:20:28:
47:25:02:fe:b4:14:4a:94:6e:32:c7:ab:74:1d:9b:6a:11:f3:
fb:a9:60:ea:40:0e:b3:75:99:a1:ff:12:51:41:e9:3d:16:11:
f1:b2:51:39:02:4e:a3:55:60:5b:08:e2:c1:3b:b9:f6:9c:1b:
bd:1d:b6:51:44:ae:85:fb:a1:58:4c:b1:d6:64:b5:91:4c:97:
79:11:48:c3:4a:b6:16:fe:12:a2:d9:04:33:48:36:a7:78:d6:
71:c4:54:a8:dd:b2:7a:71:b8:7d:f5:31:23:b8:ac:d8:48:b6:
59:02:24:e8:f5:68:37:f3:6b:e5:56:4b:bb:27:49:19:5b:80:
97:65:f4:2c:9e:96:c2:b1:39:bd:4c:8f:88:7c:7a:4a:17:32:
6e:fb:5b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:20:33 2025 by rpki-client