Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3z_-zLBnFSCBwfKV1O32CGwG-EQ.roa
File: 3z_-zLBnFSCBwfKV1O32CGwG-EQ.roa (raw, json)
Hash identifier: 4rYgNBtQJCsbgzmIBuyv2BakIwQC+1DkeIylCqfJDVU=
Subject key identifier: DF:3F:FE:CC:B0:67:15:20:81:C1:F2:95:D4:ED:F6:08:6C:06:F8:44
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 29D3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3z_-zLBnFSCBwfKV1O32CGwG-EQ.roa
Signing time: Fri 01 Sep 2023 10:07:08 +0000
ROA not before: Fri 01 Sep 2023 10:07:08 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.195.36.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10707 (0x29d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:08 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=DF3FFECCB067152081C1F295D4EDF6086C06F844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:09:d1:d3:b3:8f:09:50:60:8f:38:98:f6:80:
e7:49:a9:96:1c:e0:f6:b5:8b:ea:87:e6:2b:49:5b:
3d:78:48:e4:fa:ed:cc:2a:a2:81:ff:0f:b0:15:d4:
73:83:21:d6:34:9c:7b:a3:93:f8:4d:61:a8:63:34:
51:99:db:af:96:60:02:4e:f1:31:d9:b5:46:4b:4e:
4d:44:81:c9:4e:33:e5:11:ef:1f:cb:d4:ed:20:f8:
85:05:2b:58:65:fd:b0:f9:a5:e3:a7:23:88:7a:71:
a6:82:79:7a:68:d4:fe:83:cb:8c:3f:8a:08:9a:c9:
4b:db:77:a4:d5:2c:84:7d:33:a2:a3:cb:a8:97:c7:
26:75:fe:cd:61:ed:a1:85:f1:6f:e6:4a:5f:6c:53:
c8:26:b0:a6:51:db:67:a6:eb:29:43:c4:de:d6:c2:
09:88:70:95:ea:ea:79:b8:33:b9:10:55:4a:c2:ca:
0a:d2:e0:80:77:88:91:9d:9f:64:68:00:5d:19:63:
2d:2d:2d:ab:86:07:8e:bd:58:1b:3f:d2:97:fa:cc:
2c:30:b7:02:96:76:a6:2f:36:dd:c3:e7:21:9a:f2:
a7:cd:13:9d:1a:2d:bb:fe:ad:5b:eb:42:ec:67:d5:
52:a0:4b:ae:f2:06:7e:a7:5c:12:5e:33:df:d8:60:
2b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3F:FE:CC:B0:67:15:20:81:C1:F2:95:D4:ED:F6:08:6C:06:F8:44
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3z_-zLBnFSCBwfKV1O32CGwG-EQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.36.0/22
Signature Algorithm: sha256WithRSAEncryption
09:62:e9:65:0a:1e:e0:06:4c:18:55:0a:84:c2:7b:c2:56:96:
8a:d8:27:2e:ec:a7:6c:96:3d:40:da:fa:c1:66:61:8d:52:ab:
5f:5f:06:cb:26:94:51:2d:b6:ee:f9:cf:7e:a6:13:de:1f:9f:
b8:87:5c:55:03:44:53:f6:64:84:19:5c:b5:e3:8f:95:5d:85:
a4:e0:7a:cb:c1:d4:e6:8c:08:fb:fd:18:06:e1:9e:20:0a:57:
32:0f:94:e0:de:bd:b3:50:9f:28:60:59:99:c6:9d:f3:e6:6e:
78:de:2a:00:6a:4b:c5:c1:cf:3a:4c:5b:2e:67:76:7a:18:8f:
9e:2c:39:48:fb:22:83:e8:a7:13:a6:6d:ff:7b:fb:55:87:d3:
1e:70:44:8b:41:67:d0:b6:d7:05:4c:49:c9:6f:c6:09:54:5a:
cb:83:22:aa:45:0d:5f:ae:54:cc:f9:b3:96:55:c2:99:36:df:
31:8e:e0:7f:4e:31:c3:e7:30:44:86:09:72:1f:7f:35:6b:3d:
fc:87:a5:67:47:73:76:53:b5:32:3b:f4:83:6e:47:7a:6b:5f:
78:ac:b2:f9:e9:d1:36:3b:f9:89:4e:30:e7:81:c1:e8:98:c9:
2a:ea:7b:59:80:70:9e:86:15:10:2c:ec:51:2a:e6:7d:1c:70:
9b:b8:ae:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:18:06 2025 by rpki-client