Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3F-CjWoN2QTbNLeLHjJ2AWOfW1c.roa
File: 3F-CjWoN2QTbNLeLHjJ2AWOfW1c.roa (raw, json)
Hash identifier: uV/4OBEB3blWvAZ7OUlFKepk/KMTXDGj4Cgtj+F+JYo=
Subject key identifier: DC:5F:82:8D:6A:0D:D9:04:DB:34:B7:8B:1E:32:76:01:63:9F:5B:57
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1831
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3F-CjWoN2QTbNLeLHjJ2AWOfW1c.roa
Signing time: Sun 07 Feb 2021 12:27:06 +0000
ROA not before: Sun 07 Feb 2021 12:27:06 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.232.192.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6193 (0x1831)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:27:06 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=DC5F828D6A0DD904DB34B78B1E327601639F5B57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f6:14:96:0d:14:49:a1:bc:61:6a:ca:b7:fb:
e8:dc:b4:28:04:f9:99:41:65:61:ca:e5:3a:e8:c4:
49:34:1d:bb:48:8b:89:50:c2:77:62:b3:4e:9d:5e:
4a:bb:6c:8d:71:d1:d1:05:14:eb:c1:bf:a4:19:92:
73:2d:11:78:ce:d1:d8:14:0e:c0:6c:ef:1d:83:9d:
78:49:3b:85:16:1a:76:25:20:88:83:d6:dc:f0:7d:
c0:58:4d:ad:09:ae:25:21:37:3e:80:3f:e1:09:ca:
0c:e9:0a:95:54:3e:fb:d7:da:65:f1:7b:8a:74:91:
7d:b9:31:6f:e1:f2:f4:4c:02:01:2e:89:a0:6c:97:
de:25:37:e8:fc:2c:d4:f2:e1:1d:6a:34:41:6f:f5:
60:90:89:bc:2b:b5:6a:21:5e:13:53:ff:b0:46:d2:
b9:81:c0:f0:df:a6:82:fd:88:9f:83:e1:b6:5f:02:
13:ee:25:c9:d1:ec:ad:8d:39:bf:96:20:d3:63:1a:
5b:b3:a7:0a:93:30:25:20:c4:9c:7e:4b:bb:6a:ff:
b3:49:7e:bd:a8:57:00:0c:84:50:8c:37:f6:1f:a4:
ff:9b:04:e4:04:9d:60:35:07:b3:eb:98:ae:bc:c5:
c6:5f:89:b3:3a:53:0d:92:12:05:33:2d:0a:eb:10:
d9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5F:82:8D:6A:0D:D9:04:DB:34:B7:8B:1E:32:76:01:63:9F:5B:57
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3F-CjWoN2QTbNLeLHjJ2AWOfW1c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.192.0/21
Signature Algorithm: sha256WithRSAEncryption
a5:eb:72:eb:03:9d:ab:92:f6:51:4f:19:20:24:fa:c6:d9:b9:
da:cf:f2:f2:04:21:37:7e:c6:90:8a:90:97:ac:12:bc:48:bb:
31:81:80:ac:61:90:9b:53:77:a8:22:62:6a:69:ae:21:88:05:
11:63:9e:30:02:e5:ed:9b:62:6d:5f:85:b8:19:9a:95:9f:34:
89:83:d1:d7:f8:67:bc:2e:40:e5:09:95:f1:53:43:aa:63:d1:
23:f8:c2:22:dd:20:c1:39:13:c0:0c:48:8d:33:d0:d0:08:49:
05:2c:7e:df:d4:0b:8b:72:7d:61:2e:e1:ac:5b:72:c0:b1:8d:
4c:7c:79:a7:43:89:b7:e3:52:6e:7e:97:66:33:46:a8:68:df:
5c:bb:b4:d5:e2:f8:db:73:09:87:20:e3:cf:d6:55:86:3a:fd:
5b:a2:eb:02:81:c4:46:86:88:78:41:9c:6f:b8:d1:c5:88:fd:
97:4d:bd:8a:64:2a:e0:4e:ea:ef:fb:b9:43:e3:55:69:fb:a6:
66:fa:4d:eb:11:4a:9e:61:90:4c:46:b7:2f:86:14:ed:6d:b2:
47:3d:ce:7e:b0:48:1e:30:d4:06:13:fb:2a:21:83:d1:0d:fa:
fb:bc:31:e2:8b:a1:7e:9b:e0:73:79:30:c9:7d:e6:20:20:bf:
05:28:80:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:31:04 2025 by rpki-client