Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/16MPvQcXtZUD4mSp11ImpF7BlxM.roa
File: 16MPvQcXtZUD4mSp11ImpF7BlxM.roa (raw, json)
Hash identifier: inewxaST71POt5gva1e+7L0SArrpU/AfsolmoOhLTxc=
Subject key identifier: D7:A3:0F:BD:07:17:B5:95:03:E2:64:A9:D7:52:26:A4:5E:C1:97:13
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1E37
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/16MPvQcXtZUD4mSp11ImpF7BlxM.roa
Signing time: Wed 27 Apr 2022 08:36:45 +0000
ROA not before: Wed 27 Apr 2022 08:36:45 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.193.208.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7735 (0x1e37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Apr 27 08:36:45 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=D7A30FBD0717B59503E264A9D75226A45EC19713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c6:c1:f2:4a:c9:c2:e8:02:02:98:a7:e0:f9:
b5:cc:e7:32:c3:ad:03:6a:a5:eb:3f:4e:22:57:d2:
9e:f1:71:42:e7:cf:e1:a6:10:f6:9a:90:62:35:86:
fd:50:5f:96:9b:f4:25:07:a8:40:0d:26:38:3b:16:
14:f1:75:e9:ec:57:84:8d:5e:1f:b9:fe:9f:a4:87:
6d:00:05:ed:81:79:b7:8c:1e:89:f6:c2:c3:24:02:
33:99:86:3b:d1:45:75:81:5e:b0:5c:42:cc:87:67:
d0:6e:13:d1:8c:76:96:55:17:37:42:d1:fa:c9:f2:
86:49:10:93:04:46:26:af:ee:4c:5c:67:84:21:2f:
7c:89:5a:11:fe:47:4e:05:d5:b9:2b:d8:0c:57:07:
27:ff:dd:0c:56:a8:61:d9:f7:d8:9e:e8:7a:d5:23:
54:9b:51:06:9d:e4:2c:06:ab:5b:d7:cf:30:76:9b:
a2:3b:b5:b8:6c:8a:c0:59:70:dd:71:1f:ba:8e:49:
24:03:49:14:ac:f1:da:30:ac:60:f9:e3:b0:2a:5e:
0f:f5:a9:96:f3:8c:03:8c:85:65:79:76:20:8e:24:
bf:25:d0:3c:81:3d:e4:c3:68:cd:bf:f4:f2:9b:0d:
b6:1f:fe:7f:fc:33:53:89:91:50:5c:f6:81:a7:3a:
20:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A3:0F:BD:07:17:B5:95:03:E2:64:A9:D7:52:26:A4:5E:C1:97:13
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/16MPvQcXtZUD4mSp11ImpF7BlxM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.208.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:f4:76:85:86:14:a7:04:3c:13:88:02:25:ab:29:c2:83:37:
d9:63:e4:b6:0a:7f:73:dd:14:13:44:bf:e2:9a:a1:ac:06:4c:
ce:17:76:57:d2:d6:74:04:77:b5:d7:89:91:5f:23:07:80:2f:
39:b9:07:66:05:3c:35:3d:36:98:e0:e3:f0:11:c5:e8:0f:bd:
c5:16:b0:df:08:d1:3b:03:a5:3a:32:2a:a7:ad:ab:e9:14:12:
a3:bf:aa:4b:4d:0d:a2:24:0b:3d:1b:6d:3f:93:ca:3b:89:f4:
2b:dd:df:7c:50:12:ac:29:c8:be:70:60:6f:e9:27:d8:b3:7d:
85:77:5b:87:ed:98:81:80:78:e5:15:97:e0:21:2a:2c:80:fe:
01:f0:42:7f:83:a3:fe:5c:f8:e3:a9:fd:6f:19:2a:b1:bd:8f:
d1:fd:2d:6e:49:d6:1b:d8:2c:ca:ac:72:5b:d7:97:6e:33:d6:
ba:1f:b5:af:16:46:f7:d3:02:7e:df:b7:ea:b1:89:a0:a8:3c:
a5:01:68:d3:ec:69:37:d1:17:cc:9a:ee:fb:96:31:22:6f:c6:
ea:4b:5f:55:0d:91:f8:13:10:27:8f:2a:c9:8e:c1:88:32:84:
0a:17:d7:2c:ad:31:38:de:bf:78:a3:d0:8d:3b:f4:bb:b1:64:
5e:11:74:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:32:40 2025 by rpki-client