Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1DjCIoripxjw3p-T37c9x7YfpJ4.roa
File: 1DjCIoripxjw3p-T37c9x7YfpJ4.roa (raw, json)
Hash identifier: +79BLTNmqgly3C8GoOdMG1pnKhPyWMfwvasFvNIr3ZQ=
Subject key identifier: D4:38:C2:22:8A:E2:A7:18:F0:DE:9F:93:DF:B7:3D:C7:B6:1F:A4:9E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 167F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1DjCIoripxjw3p-T37c9x7YfpJ4.roa
Signing time: Sun 07 Feb 2021 12:10:51 +0000
ROA not before: Sun 07 Feb 2021 12:10:51 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5759 (0x167f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:10:51 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D438C2228AE2A718F0DE9F93DFB73DC7B61FA49E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a8:51:1a:ab:96:23:9b:1a:b8:5f:e2:3f:00:
c2:55:2e:76:45:f6:11:12:73:9a:3c:35:27:db:cd:
7e:cd:74:35:70:26:97:84:c6:52:42:e1:7a:d2:09:
fb:3b:5e:5d:bb:f8:d8:c2:78:cd:fc:31:56:bc:17:
1a:73:6e:41:19:73:63:2a:3a:eb:d5:5b:3a:cd:13:
e0:d7:3b:01:af:a4:68:db:ac:01:96:71:12:dc:81:
ed:8c:fa:4f:7a:2a:a3:ae:d3:b3:b5:97:24:d4:a2:
4f:7f:66:cf:f3:90:c9:a5:f7:0e:89:1d:ea:73:c9:
b7:f0:7d:3a:ce:44:e6:77:af:d5:bc:2c:79:87:be:
8a:bf:90:29:9c:c8:67:63:77:b8:30:9c:dd:ae:2b:
dd:db:96:30:09:68:8c:98:5b:69:61:a3:70:e4:ec:
7b:08:b3:20:ca:df:3e:bc:22:3a:92:34:27:28:36:
cb:bc:ba:9f:fb:0e:24:91:8f:b1:47:5d:55:42:dc:
4a:b6:df:99:9e:8f:c3:01:50:98:3b:c9:4d:aa:22:
49:a1:af:52:3b:7f:99:aa:f8:0d:87:4e:a3:49:a5:
76:94:be:7a:bc:bb:e5:5a:f7:23:3b:a4:d4:34:8c:
56:9f:03:2a:5c:d3:35:9d:e1:c4:55:14:58:8e:1c:
c9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:38:C2:22:8A:E2:A7:18:F0:DE:9F:93:DF:B7:3D:C7:B6:1F:A4:9E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1DjCIoripxjw3p-T37c9x7YfpJ4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.183.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:ba:b6:21:a4:46:00:44:f9:50:94:10:b5:9b:84:e4:1b:0f:
5d:3e:22:63:d6:a6:c1:de:8f:69:d5:28:42:4c:10:77:9f:0e:
4c:c6:97:a5:4a:46:55:18:5c:da:a1:04:5f:82:42:ce:72:4c:
70:73:ad:10:5f:e9:67:5e:d4:08:83:77:00:15:ed:dc:32:2c:
bf:79:bf:ae:b6:8d:0b:6c:a5:7b:40:80:30:40:8d:f7:57:d1:
de:9b:e3:4b:dd:95:9b:da:06:6c:f8:a4:12:cf:ad:fa:d4:ce:
32:fb:65:b4:9e:6a:7f:5b:9f:7d:ee:f7:5a:80:1e:be:88:5a:
83:2b:68:45:71:b3:0b:64:af:b3:ef:5e:77:13:95:ff:bb:40:
83:2a:05:e2:31:fa:d5:fd:b0:ef:16:01:df:e9:be:ce:fa:fe:
b5:c9:fc:5c:1e:7c:e0:a4:7d:39:6c:c8:66:ff:6a:20:e4:61:
66:78:7c:ef:90:ab:5b:de:c0:b9:5b:3d:cf:14:11:c9:00:5e:
6d:68:2a:51:92:7a:44:27:b5:90:33:6d:b4:fa:96:d1:4e:75:
c1:1c:13:bb:59:d5:af:d1:a0:14:f4:53:02:7c:eb:00:27:0a:
16:a1:93:97:2e:f9:1c:e3:f5:5a:5a:19:45:64:b5:98:72:c1:
36:4c:75:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:40:16 2025 by rpki-client