Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9-TI_0VI6FnmLb4oagx4OMmgitw.roa
File: 9-TI_0VI6FnmLb4oagx4OMmgitw.roa (raw, json)
Hash identifier: OYuty5fQKUPe+sf1JUlR4MClmtx3zYhhFrVAf2/BxT8=
Subject key identifier: F7:E4:C8:FF:45:48:E8:59:E6:2D:BE:28:6A:0C:78:38:C9:A0:8A:DC
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1AD8
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9-TI_0VI6FnmLb4oagx4OMmgitw.roa
Signing time: Wed 29 Sep 2021 02:45:49 +0000
ROA not before: Wed 29 Sep 2021 02:45:49 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.194.136.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6872 (0x1ad8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:45:49 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=F7E4C8FF4548E859E62DBE286A0C7838C9A08ADC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:97:a8:7f:7e:39:ba:63:e0:e1:f1:1c:4f:20:
0a:12:eb:b1:ee:c8:e1:c3:cc:fe:df:70:5b:27:13:
fc:21:39:84:dc:1e:44:1f:18:68:c2:09:8d:ca:6a:
16:e9:ef:be:82:6e:f2:9f:93:c3:29:0b:30:20:9f:
66:c1:0b:0e:4a:50:cd:d9:17:53:c8:48:f7:ee:58:
db:ab:2c:e8:63:78:48:c0:93:73:4a:f9:66:68:20:
1a:6e:e4:f0:fa:4c:e3:a1:cf:8a:2d:7c:d7:39:79:
bf:71:2b:c5:9a:c1:8c:0d:e6:27:b3:72:9b:3f:55:
0a:11:4f:0d:76:30:50:04:c8:72:50:03:39:77:cd:
ee:00:8c:7f:63:04:e6:78:87:08:10:2d:6a:79:1f:
dc:c1:f6:93:2a:54:48:00:5c:70:ae:e4:ed:ed:2d:
02:fa:49:23:15:a9:3a:dd:12:4f:1b:b0:5a:17:c1:
4e:9e:3d:a2:e4:99:8e:56:57:21:27:4b:b5:f4:c0:
71:35:fe:43:f7:c8:e2:f8:1a:3a:df:a8:50:61:75:
93:ed:c1:1f:b7:8c:f3:03:d0:21:fb:02:b9:07:a3:
ee:6c:b7:7b:7c:17:af:1e:d3:6b:20:9d:4e:6c:a3:
0c:be:9c:ec:64:35:d0:1b:02:70:b2:93:67:7a:25:
dd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E4:C8:FF:45:48:E8:59:E6:2D:BE:28:6A:0C:78:38:C9:A0:8A:DC
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9-TI_0VI6FnmLb4oagx4OMmgitw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.136.0/21
Signature Algorithm: sha256WithRSAEncryption
75:51:24:db:b6:90:5b:51:21:9e:9a:98:2c:55:13:37:2e:b8:
bf:72:78:c9:94:83:5a:2d:3f:9c:60:25:39:28:5e:0c:9b:44:
45:db:ca:c1:1c:da:03:2c:95:05:f5:4c:16:ec:89:b0:f1:9a:
d1:aa:79:24:91:1f:f1:9a:d8:0e:55:92:b7:de:e3:ed:82:b3:
19:6e:9b:9e:03:89:f7:77:52:2b:e6:75:bb:be:8e:4f:aa:97:
35:a9:be:05:90:4e:2e:fe:fd:cd:87:88:7f:aa:ae:11:d7:95:
01:d0:f4:af:4e:e1:9c:a5:c5:ed:b4:37:36:c1:4a:b5:9d:2a:
b3:8d:54:3b:be:f8:f1:60:ed:86:fd:e1:3c:e2:7e:19:db:41:
20:ce:a1:a6:f3:ec:67:ad:39:3b:5c:47:0c:e6:98:b7:61:ca:
ae:ec:9e:e9:7b:71:0c:0b:4b:84:94:8b:c7:c2:f8:97:d1:3b:
e7:57:73:11:55:90:b6:81:67:67:69:0f:0b:dd:ce:ef:65:89:
4b:6f:6c:9a:4d:7d:8b:17:09:ec:15:ad:02:04:a4:e6:82:61:
05:06:a6:17:dd:f9:f6:e8:fb:2c:3a:d6:81:19:d6:3b:c4:4c:
c1:9c:6d:84:19:5c:10:c6:9f:89:78:49:3c:06:81:88:04:36:
29:e3:98:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:24:14 2025 by rpki-client