Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3X5mrc2hArBAQkWAnebUxxrS6gU.roa
File: 3X5mrc2hArBAQkWAnebUxxrS6gU.roa (raw, json)
Hash identifier: Dl5b0FyMdooVtvpx5gwc1M/2RSgeS3IVsIesdeoNG6g=
Subject key identifier: DD:7E:66:AD:CD:A1:02:B0:40:42:45:80:9D:E6:D4:C7:1A:D2:EA:05
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1B67
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3X5mrc2hArBAQkWAnebUxxrS6gU.roa
Signing time: Wed 29 Sep 2021 02:46:34 +0000
ROA not before: Wed 29 Sep 2021 02:46:34 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 123.193.0.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7015 (0x1b67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:34 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=DD7E66ADCDA102B0404245809DE6D4C71AD2EA05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e3:4c:e3:93:03:9a:ea:06:7b:fc:77:a8:d1:
19:1b:b1:ab:8a:19:fc:a6:75:4b:0b:49:c1:9b:7e:
65:c7:8f:a8:a0:7a:ba:59:1d:b7:bd:26:7b:51:4b:
66:66:a8:93:27:d0:30:53:21:41:92:dd:94:bd:a3:
4c:23:17:7d:c9:d5:3a:48:06:01:d0:68:51:09:12:
15:ff:e7:d0:77:84:a7:e2:4d:50:63:eb:21:d6:82:
30:72:eb:1f:a4:af:43:40:b8:ce:7b:c6:d7:94:31:
bb:e6:f0:69:7d:7c:5f:60:9a:65:99:6a:bf:a9:64:
06:a9:48:05:fd:db:ee:10:37:41:be:d4:01:8b:1c:
ca:dd:5b:ec:3c:91:cf:a9:8c:f0:dc:95:b7:85:9e:
3d:87:a5:19:bb:af:3d:2f:a0:e5:4d:2f:27:c5:94:
32:06:6b:14:81:40:42:09:6e:4c:59:6c:b7:77:cf:
e4:0b:23:ec:fd:ed:d7:b1:6c:25:3b:1e:d5:ba:17:
2c:b4:86:81:59:5a:ee:dc:5f:81:9c:d3:0d:cb:82:
9c:3f:18:71:7e:d1:b0:52:a0:68:6d:88:f7:8f:af:
da:35:4d:3b:a2:0e:59:fa:d0:97:2a:40:09:ce:05:
ba:bc:65:e0:fc:2b:30:07:98:3d:4e:8f:ae:0f:86:
d3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:7E:66:AD:CD:A1:02:B0:40:42:45:80:9D:E6:D4:C7:1A:D2:EA:05
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3X5mrc2hArBAQkWAnebUxxrS6gU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.0.0/18
Signature Algorithm: sha256WithRSAEncryption
2b:e1:c7:d9:4c:84:6e:d4:ed:2e:d6:78:70:c9:ca:26:af:45:
b1:9a:27:f6:a9:83:1d:e6:02:29:73:90:13:b2:19:a7:f9:ea:
3b:8d:d1:d7:d2:d1:83:62:26:49:f4:3e:c8:b0:b1:d3:d0:8b:
83:46:b5:16:dc:f2:9d:48:20:fa:64:7f:32:2f:11:dc:86:47:
46:8a:25:1e:64:1f:9f:68:e3:99:68:cb:4b:01:55:e8:0a:3d:
56:a1:84:ca:fa:f9:07:9e:5d:e5:65:7a:c0:25:03:3b:ba:e8:
7e:6b:0c:2b:63:48:e7:59:5c:78:35:ad:21:6a:e6:37:6e:a4:
1b:0b:db:c5:01:9e:45:c3:27:fc:85:d7:72:c4:63:40:7c:ab:
9e:ed:7f:17:df:c5:51:b0:fa:b1:97:7e:27:8e:3c:7a:df:34:
62:67:2d:fd:87:38:f1:e1:a0:ce:f7:c5:93:be:23:8c:6c:f4:
34:cc:65:81:3a:b0:d9:42:9f:81:d7:ba:78:8a:d4:14:d4:e3:
c1:57:42:38:5c:d7:75:a9:c4:9d:2a:56:89:38:cf:09:2f:7c:
5d:79:e3:0c:d5:a2:4b:a2:6a:e7:b5:c9:f1:29:3c:a7:55:1a:
db:fc:9d:d9:ea:95:9f:d3:a0:9d:8c:83:c3:d9:ba:1a:b6:39:
94:b8:5a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:40:17 2025 by rpki-client