Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Aq4mqL9_RbEvdfRSmrQ8sOV__H0.roa
File: Aq4mqL9_RbEvdfRSmrQ8sOV__H0.roa (raw, json)
Hash identifier: NVsGUVyOHbkQtdfgdg1dsYwnJV7oyUhQLUlJFOS+TU4=
Subject key identifier: 02:AE:26:A8:BF:7F:45:B1:2F:75:F4:52:9A:B4:3C:B0:E5:7F:FC:7D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1D13
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Aq4mqL9_RbEvdfRSmrQ8sOV__H0.roa
Signing time: Wed 29 Sep 2021 02:48:35 +0000
ROA not before: Wed 29 Sep 2021 02:48:35 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 118.232.0.0/21 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7443 (0x1d13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:35 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=02AE26A8BF7F45B12F75F4529AB43CB0E57FFC7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2e:61:02:b2:b4:15:f7:22:08:ba:56:20:15:
cf:b1:62:4c:16:e2:0f:5e:80:dc:12:65:97:75:45:
e6:37:6e:69:a2:99:f0:9a:7d:be:e2:90:21:0b:6c:
f4:4f:da:5b:3d:da:c8:c9:31:cd:74:46:45:54:fd:
9d:0c:9e:be:f1:b2:33:13:d9:55:9e:f7:db:fc:c0:
e0:8f:a8:09:b5:4a:13:39:f7:ce:d6:f6:71:eb:1b:
dc:76:3b:b7:45:22:c2:6b:cc:bd:42:b3:36:aa:e6:
54:da:8c:bc:7a:90:ae:b9:34:c7:b3:7a:8c:a2:56:
42:b9:6a:67:55:97:b7:2f:15:8c:44:9a:b1:45:0b:
01:dc:c5:13:99:d4:7e:b6:74:2e:ce:43:55:2b:d6:
cf:b5:a1:21:f5:1e:63:9e:b7:01:7a:5b:c6:7a:60:
75:aa:7b:e6:75:b3:42:87:f3:4f:67:e1:ea:a1:4e:
91:45:d1:a9:7c:f2:20:83:87:36:b1:1d:0b:cd:91:
82:04:9e:3c:97:da:8a:d1:3c:60:42:e9:44:54:ac:
31:52:cd:00:4b:16:ba:58:5c:1f:36:e1:74:35:d5:
01:70:f6:87:d2:9e:8a:46:a0:d7:06:a5:b8:b0:27:
13:c1:9c:74:10:3c:2d:a0:cf:1d:bc:eb:e5:69:bc:
9a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AE:26:A8:BF:7F:45:B1:2F:75:F4:52:9A:B4:3C:B0:E5:7F:FC:7D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Aq4mqL9_RbEvdfRSmrQ8sOV__H0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.0.0/21
Signature Algorithm: sha256WithRSAEncryption
0c:eb:0c:02:1a:b5:b4:da:0e:60:fe:04:3e:c6:0e:ff:ae:d2:
c6:b7:09:64:f9:c0:da:d8:27:5d:c0:3b:36:09:8d:c3:ce:f2:
24:25:29:a2:38:de:9a:69:aa:f1:b3:8a:9a:53:a6:94:f8:c7:
5e:7a:ef:63:20:eb:6c:2e:85:f8:38:da:84:3f:a0:00:a8:a2:
83:e8:1b:fd:b0:bf:d0:f2:1f:21:08:66:f3:3e:b3:9e:01:8a:
b0:5a:14:36:bf:3b:da:26:24:30:45:da:ec:a3:c6:b9:e4:9e:
b8:91:70:ca:f9:db:3d:c1:23:e6:c0:d4:10:9c:8c:2b:e4:7d:
a2:9b:82:de:88:49:fa:ee:dd:b9:5e:d9:7e:9e:d4:38:19:9e:
c8:71:b4:24:ff:62:15:4f:60:ce:9d:c8:0c:4d:6d:9f:53:a9:
60:c5:e5:97:d6:be:32:5c:c5:6c:cb:bc:9f:d8:e4:5d:e6:b5:
7f:b2:c1:71:ad:48:9d:0f:c5:03:60:df:bd:24:58:a8:69:10:
5b:58:ae:fc:ee:37:18:61:13:95:cc:98:5f:fb:3c:bf:d9:65:
d1:9b:e7:f9:0d:36:a0:71:2b:3b:cd:83:8a:a3:50:99:87:da:
f6:f4:36:d4:d9:5f:40:28:ba:ce:6b:81:2e:29:f0:77:19:53:
c5:cd:d2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:12:20 2025 by rpki-client