Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1G-zyj3RkHIFSFWev3H6U2Zctsw.roa
File: 1G-zyj3RkHIFSFWev3H6U2Zctsw.roa (raw, json)
Hash identifier: ktO5DPuYLm0dP4uLl2iUDmkjv5akGmkjQmujLjBHnOE=
Subject key identifier: D4:6F:B3:CA:3D:D1:90:72:05:48:55:9E:BF:71:FA:53:66:5C:B6:CC
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0D58
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1G-zyj3RkHIFSFWev3H6U2Zctsw.roa
Signing time: Tue 29 Sep 2020 09:54:27 +0000
ROA not before: Tue 29 Sep 2020 09:54:27 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.180.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3416 (0xd58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:27 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D46FB3CA3DD190720548559EBF71FA53665CB6CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6e:0f:db:51:1c:d8:39:3f:93:74:3a:44:48:
ae:5b:1f:05:9a:11:7b:ad:be:55:f5:ff:6a:9c:8c:
f0:8f:8f:9c:8e:62:51:2f:19:0c:27:32:46:da:a8:
41:5c:53:7b:06:4a:46:4f:88:a8:f3:28:d9:83:6c:
0e:17:d0:ab:4f:12:ff:57:e5:1a:c8:d0:e1:45:18:
ad:48:6d:b6:51:6a:f3:03:4e:ae:91:11:3c:16:e5:
57:d5:69:97:b1:8b:32:61:19:b7:ad:50:92:6d:0f:
ae:16:4c:e4:50:65:83:dc:3e:24:93:b9:6f:af:af:
d6:e8:f4:89:16:64:9a:2b:c7:ce:47:29:93:62:1f:
83:3f:49:71:60:e4:8d:52:e7:4a:27:b2:93:00:ba:
79:98:fb:93:06:02:bf:1c:44:3c:bf:df:ee:49:55:
14:16:f5:5d:2b:67:c5:46:89:a6:e1:2e:67:46:84:
f3:9e:01:77:6b:56:25:86:81:30:8d:50:3d:0c:0a:
95:ee:6d:3e:43:78:73:5c:4b:63:89:dc:e4:04:05:
78:a0:fe:f7:2d:77:73:17:55:39:af:94:a2:5b:b7:
c5:e3:2b:f2:78:a2:68:ba:57:d3:d3:cb:92:a4:63:
58:1f:9d:46:ab:91:30:bc:20:4a:94:32:90:c8:a2:
f6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6F:B3:CA:3D:D1:90:72:05:48:55:9E:BF:71:FA:53:66:5C:B6:CC
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1G-zyj3RkHIFSFWev3H6U2Zctsw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.180.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:10:30:04:61:36:e2:ad:7d:32:cc:95:af:b7:96:d5:ad:87:
33:59:46:8c:c9:72:13:11:a3:16:bd:21:d4:f6:7f:a2:e4:aa:
bb:00:47:bf:d8:94:13:99:40:81:79:94:f5:79:70:58:0f:37:
98:9f:6e:aa:f3:cb:54:8c:a5:8f:85:70:86:e6:15:a2:2e:5f:
74:13:87:3b:f5:91:11:4f:8e:ad:7f:7a:0e:23:01:65:90:c4:
ee:92:44:85:b4:9e:8c:65:64:b3:82:8c:44:7e:bf:15:66:4c:
1b:2a:d7:18:ec:ae:36:12:06:8c:e1:cd:12:18:c5:52:f6:b2:
72:2c:82:25:21:49:7a:e9:86:15:16:e3:31:df:34:83:6e:89:
f3:67:e7:7b:7f:13:2e:df:d9:36:f5:e0:49:7f:67:03:94:e7:
a0:0a:70:9c:a6:ac:6d:7f:ad:5e:a4:19:b4:0e:82:9a:1f:cb:
b9:5e:c2:94:9e:c2:da:be:74:3e:97:6f:35:7c:70:ff:03:e1:
15:4d:98:a6:d0:7f:3f:0e:55:d4:de:0e:ae:06:fa:4d:c8:a3:
87:4a:d8:92:1f:cc:0b:fd:eb:9b:6b:4f:a8:8a:18:42:40:82:
60:56:63:b6:bc:53:30:f0:6a:c9:07:b5:03:21:ea:f5:31:23:
b9:d4:a2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:18:35 2025 by rpki-client