Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4tdJqzLyi02hlkj4IkL-LiFkIZA.roa
File: 4tdJqzLyi02hlkj4IkL-LiFkIZA.roa (raw, json)
Hash identifier: dp1ei6s98EoAG+kH/MU0yY4C3wou0+/UDgRGc/8sg+Q=
Subject key identifier: E2:D7:49:AB:32:F2:8B:4D:A1:96:48:F8:22:42:FE:2E:21:64:21:90
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1D2D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4tdJqzLyi02hlkj4IkL-LiFkIZA.roa
Signing time: Wed 29 Sep 2021 02:48:42 +0000
ROA not before: Wed 29 Sep 2021 02:48:42 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 123.193.96.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7469 (0x1d2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:42 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=E2D749AB32F28B4DA19648F82242FE2E21642190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:32:d7:67:b6:d6:ec:4e:e1:72:34:06:26:bd:
94:ba:55:89:0a:4c:83:86:a7:ea:1d:c2:da:e7:a5:
f9:d2:35:56:2a:ef:c0:b0:9b:12:e4:23:6e:0a:74:
fa:1b:1a:50:ae:4c:b5:9c:ae:e2:36:4b:d2:52:0c:
ed:f4:61:b4:16:a6:4a:6c:9b:62:cf:fe:ba:d8:26:
00:02:c6:f0:05:b0:54:21:ee:04:21:44:dc:b8:02:
36:b9:b7:01:e8:f1:2c:db:06:b9:5f:e5:4b:ed:7d:
fc:ea:a6:3e:8a:ef:cf:95:e8:2a:cf:77:de:77:c9:
c4:fa:c3:f7:c6:39:1f:03:12:55:24:8d:4e:e4:9c:
83:c9:0e:13:c4:59:73:f3:74:35:d4:22:df:07:15:
24:7a:b6:c1:f5:e2:a8:a8:f6:18:76:40:74:94:e5:
92:88:70:08:64:64:20:1d:f6:7c:d2:2b:de:9b:8d:
31:d3:e8:23:51:6b:e9:ea:24:b7:9c:4b:4d:29:27:
69:d1:99:27:1f:93:ec:35:78:3d:5d:dc:dc:d5:9d:
e7:0f:99:bf:3b:81:67:ed:17:a3:d4:d6:51:fa:97:
73:60:9c:e6:da:ee:72:b7:9c:88:11:9f:7a:58:bd:
22:89:27:bd:57:1b:d6:9e:70:59:ab:6a:fc:53:4a:
e6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D7:49:AB:32:F2:8B:4D:A1:96:48:F8:22:42:FE:2E:21:64:21:90
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4tdJqzLyi02hlkj4IkL-LiFkIZA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.96.0/21
Signature Algorithm: sha256WithRSAEncryption
84:12:c7:3e:91:d2:51:eb:83:ae:5c:f9:c6:0a:0f:37:54:89:
91:2c:fd:50:f3:4f:74:e7:57:36:cf:db:1b:32:80:fa:6a:43:
60:37:b6:21:c9:5a:3f:9c:ab:45:e1:f1:b8:d0:97:e2:ea:cb:
7a:07:43:c9:4f:b0:da:2c:67:7d:68:de:43:48:2b:22:bf:35:
87:50:73:6e:f7:87:f0:c6:e5:8c:a4:ee:6f:a3:dc:7e:49:fb:
9d:e8:f1:88:28:fb:54:72:21:79:da:a2:ce:c1:66:26:99:84:
2a:d2:52:d4:e0:6c:a9:93:72:4c:da:74:d2:b4:e5:7c:93:94:
0e:a6:b9:64:49:66:12:91:5b:1c:c1:e4:10:21:58:28:59:ca:
72:d2:91:21:cf:12:6e:a2:6f:45:60:31:31:36:b4:85:eb:87:
bc:55:23:2f:ff:0b:95:e1:f6:15:26:54:55:71:7a:4a:13:df:
35:13:62:f5:ea:6f:60:6f:8c:86:83:e3:8b:18:45:f2:48:1c:
c3:d0:12:e2:75:04:6c:c9:ad:84:80:5a:27:39:80:fe:22:95:
89:c1:31:94:33:ad:f8:60:7d:4e:b8:cf:db:f4:3a:4d:00:93:
7c:e9:e9:fd:7b:2c:a8:e5:f3:cf:68:2d:68:02:2e:f9:29:f4:
a0:d3:7f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:32 2025 by rpki-client