Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3J_J4QcpBYOxxVsJHgO1Q0HcUq4.roa
File: 3J_J4QcpBYOxxVsJHgO1Q0HcUq4.roa (raw, json)
Hash identifier: yH6EvGOz2Z8wM+Jf7W4CnJULwbhqpvKFzBIQJOAmMmI=
Subject key identifier: DC:9F:C9:E1:07:29:05:83:B1:C5:5B:09:1E:03:B5:43:41:DC:52:AE
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 28F4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3J_J4QcpBYOxxVsJHgO1Q0HcUq4.roa
Signing time: Fri 01 Sep 2023 10:05:57 +0000
ROA not before: Fri 01 Sep 2023 10:05:57 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.193.56.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10484 (0x28f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:57 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=DC9FC9E107290583B1C55B091E03B54341DC52AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:62:40:dc:f7:b1:70:2a:9f:f3:bf:86:d6:8d:
dc:6a:02:2c:90:8c:ba:75:02:fa:50:ad:73:8a:95:
88:1e:17:d2:01:7a:5d:c1:df:db:2d:82:a5:8f:74:
c0:f8:1d:de:50:2b:3d:f9:ed:7c:0a:a4:1b:f2:e7:
b0:90:c8:9f:20:f5:32:2d:3d:b7:f1:69:d4:a6:a1:
06:2e:86:5b:62:7e:57:c9:18:e5:c7:61:00:56:c4:
7e:3c:23:97:e8:16:c1:db:94:38:c0:92:f8:9c:be:
16:dd:b6:ea:a0:61:34:2a:16:91:c9:9e:ba:94:0b:
28:35:9a:ed:97:6a:a9:07:82:58:9d:b7:09:5c:d2:
9d:60:aa:11:84:25:ad:80:8b:23:e2:d5:8e:14:88:
7b:82:0c:16:46:cb:7f:83:fa:d1:b1:9b:6d:5c:68:
7f:7d:53:bf:df:d8:ab:52:d1:4c:99:b2:9f:7b:85:
90:40:f7:12:52:cc:4b:ee:e8:3f:5e:9d:16:dc:c0:
68:eb:99:2d:78:f8:6d:f5:b3:50:ec:65:c4:3b:31:
40:17:95:d9:43:06:d5:ca:3f:96:91:64:43:c2:69:
3e:92:85:49:8f:2a:fa:ef:68:81:d4:56:20:4f:59:
85:b1:f4:82:17:86:a1:99:0a:de:7f:fb:8f:9a:ea:
ba:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9F:C9:E1:07:29:05:83:B1:C5:5B:09:1E:03:B5:43:41:DC:52:AE
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3J_J4QcpBYOxxVsJHgO1Q0HcUq4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.56.0/21
Signature Algorithm: sha256WithRSAEncryption
55:3d:b5:33:be:05:f2:a9:25:1a:05:63:af:23:4c:33:a1:01:
98:5a:e5:38:8c:be:16:82:e2:f8:3d:a9:81:4e:76:93:a2:d9:
1d:a7:6a:8c:a1:5f:4f:3f:19:0e:cc:3f:2c:08:91:cf:46:81:
4f:3c:b1:9c:85:8d:10:78:f5:c8:e4:54:0f:7e:12:91:26:eb:
1a:9f:4b:30:a4:e7:75:d2:75:92:98:57:70:8e:04:5a:2a:ba:
38:d3:41:db:39:05:27:d1:b5:1b:1e:f7:ea:2c:31:74:7c:52:
12:dc:cb:75:e6:32:72:05:51:0f:27:c2:58:1b:e0:4e:3d:8b:
1b:cc:66:ec:78:9f:aa:66:7f:52:ec:a9:8e:ac:22:82:14:a2:
78:90:dc:fe:fc:15:12:e7:f0:74:55:d0:43:62:cb:02:4f:dc:
f3:58:e5:7d:03:c4:9b:cc:90:f7:8f:71:b8:74:5c:a4:67:1f:
42:d6:c8:d2:ed:23:18:7e:b5:5f:24:a9:8a:48:3d:dc:b8:ff:
4f:ca:9c:ca:c5:32:f3:27:75:6d:83:76:87:a8:89:29:c0:2d:
76:42:31:64:e4:3c:34:07:fb:3d:52:92:f7:84:4b:89:f4:3d:
36:fd:ca:bd:24:1b:53:12:41:b2:42:b4:82:b7:c1:7e:2b:03:
e4:a8:c7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:37:33 2025 by rpki-client