Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0eldpiY1xEhqRXKz-trI9h08Odw.roa
File: 0eldpiY1xEhqRXKz-trI9h08Odw.roa (raw, json)
Hash identifier: OUcDhtEjWMVlCNHfbbjeKpn6NnBQtFN5FU/EbA+D9GQ=
Subject key identifier: D1:E9:5D:A6:26:35:C4:48:6A:45:72:B3:FA:DA:C8:F6:1D:3C:39:DC
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 18ED
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0eldpiY1xEhqRXKz-trI9h08Odw.roa
Signing time: Sun 07 Feb 2021 12:55:14 +0000
ROA not before: Sun 07 Feb 2021 12:55:14 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 123.195.0.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6381 (0x18ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:55:14 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D1E95DA62635C4486A4572B3FADAC8F61D3C39DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6a:e3:45:b3:85:89:b0:f8:6a:03:cf:6b:3c:
ba:09:af:c4:e4:be:4a:22:7e:23:e5:8a:1d:d7:c6:
be:b2:04:59:4e:e9:4b:1c:a0:c5:c3:d9:99:c9:41:
8c:c7:e0:90:9f:f8:7d:da:f7:8c:4f:37:35:c0:48:
a1:3f:cb:13:4d:a1:88:d0:3b:a6:6e:c1:d9:22:44:
f7:8c:4c:30:27:21:56:14:82:2c:7d:90:51:b1:52:
84:57:56:69:e0:b8:e1:7e:b8:cd:73:fb:d0:9f:6c:
a5:e9:31:9d:a1:ca:c1:0d:8b:cf:83:e6:e8:7e:ce:
fd:94:90:9b:2d:01:a3:b5:9b:6a:1f:de:50:db:bc:
bb:d6:fb:d6:04:6c:3c:ad:5e:80:c0:21:58:4d:4b:
73:2f:41:ad:06:55:6f:5f:d8:c7:12:54:3e:50:66:
97:17:77:87:14:02:0f:c4:5c:93:de:e7:87:ec:45:
ce:fe:b0:fd:8f:56:95:55:11:02:bc:2c:af:c0:60:
46:4e:f8:21:e6:60:69:c2:43:d6:f6:fc:b2:52:63:
7d:4a:be:88:5a:23:71:b4:0f:4e:9a:a5:27:28:8e:
7e:37:cc:57:0c:84:1b:9f:df:7b:d6:49:d9:41:7d:
43:d4:c1:d4:8c:6d:6b:f7:7a:c9:ad:c8:73:38:c1:
95:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E9:5D:A6:26:35:C4:48:6A:45:72:B3:FA:DA:C8:F6:1D:3C:39:DC
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0eldpiY1xEhqRXKz-trI9h08Odw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.0.0/18
Signature Algorithm: sha256WithRSAEncryption
08:85:aa:f5:24:59:54:72:5f:90:06:8c:11:6d:5c:6d:4b:8c:
98:51:22:d9:22:11:89:c6:e3:ef:fa:9c:ee:14:e9:bf:10:54:
f9:ca:06:ee:bd:4c:a1:9b:20:ea:51:c1:53:5e:c7:64:85:dd:
f2:7b:9b:35:89:b3:5f:41:ab:55:01:58:d4:c4:99:fd:58:87:
a5:94:2a:1b:a3:97:1b:83:8b:1d:d1:07:17:35:85:be:ef:59:
80:c5:95:66:54:a2:92:1a:07:4e:06:cf:8d:9b:78:cb:4d:58:
41:34:58:d3:71:cf:a5:4a:ab:06:b9:ad:df:bb:9a:bf:aa:9a:
d3:51:30:32:a5:6d:dd:f2:3d:9c:49:41:7d:53:e9:76:f1:9c:
48:e2:d8:b5:aa:97:fe:b6:c0:ff:e6:a0:95:a2:fe:3b:45:9a:
84:03:93:ec:95:57:a5:60:c3:05:64:80:78:7a:fc:83:3f:6c:
d5:06:09:63:24:02:32:a9:5d:c0:a8:09:a4:ad:b4:a0:a0:c0:
66:e3:9a:56:55:62:1e:0e:b2:0c:c5:47:c0:25:05:bc:26:60:
31:ea:14:49:0f:05:3a:ee:60:8d:43:79:04:c1:68:17:e7:60:
d4:0a:69:42:e2:f6:7a:87:f1:d4:3d:c8:1a:ee:eb:9b:ae:6c:
46:dc:6c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:44:23 2025 by rpki-client