Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CeselHY5a2oc3r04qJbNd4M8XqM.roa
File: CeselHY5a2oc3r04qJbNd4M8XqM.roa (raw, json)
Hash identifier: 7iiyDZiTsCHs+ume2jFULhH0hfwIg13oxwkYBFNrwyc=
Subject key identifier: 09:EB:1E:94:76:39:6B:6A:1C:DE:BD:38:A8:96:CD:77:83:3C:5E:A3
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 27BD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CeselHY5a2oc3r04qJbNd4M8XqM.roa
Signing time: Fri 01 Sep 2023 10:04:29 +0000
ROA not before: Fri 01 Sep 2023 10:04:29 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.232.136.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10173 (0x27bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:04:29 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=09EB1E9476396B6A1CDEBD38A896CD77833C5EA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:65:ac:41:f4:6f:10:dd:0b:37:fc:97:80:53:
20:7b:07:26:0e:09:97:37:29:ee:f2:98:59:ed:b9:
2f:16:a3:a0:b7:c9:b7:3e:4f:fc:76:4b:08:40:23:
a3:61:d3:d9:a6:3e:61:eb:f8:35:88:52:83:ce:65:
d8:cc:ed:f4:0e:b3:84:d5:2d:fc:6a:22:a6:1a:3b:
56:3f:af:91:3a:2e:e3:38:f2:8b:79:cd:6b:92:53:
1f:4a:21:f4:ba:e1:67:7b:38:51:81:6f:92:5c:c2:
93:32:79:2b:6e:10:07:97:cf:14:45:f5:fe:46:5c:
1a:ff:42:e5:3a:a1:2d:3e:90:cb:b8:3e:e4:96:af:
f4:f5:7a:54:36:7e:c0:12:8f:56:c0:41:19:0a:a5:
17:40:d4:7e:28:d2:34:86:64:99:cf:72:58:1d:62:
2b:d8:79:67:a8:a8:19:f4:ef:30:2c:fb:72:f7:bf:
29:d4:2a:ec:31:00:39:0c:42:2f:1e:67:5e:6f:77:
93:6a:1a:35:e1:c7:52:33:79:41:da:ef:15:dc:cf:
a9:28:20:2b:a4:12:44:82:23:02:f8:0b:9a:58:84:
56:55:77:c4:2e:7b:5f:8b:4a:2c:db:d2:44:bf:13:
e8:c6:5a:a8:89:2f:3c:ba:d1:35:09:f4:c6:a3:67:
c4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EB:1E:94:76:39:6B:6A:1C:DE:BD:38:A8:96:CD:77:83:3C:5E:A3
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CeselHY5a2oc3r04qJbNd4M8XqM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.136.0/21
Signature Algorithm: sha256WithRSAEncryption
61:00:6f:70:93:6b:84:27:f1:7d:12:a1:f1:2b:fa:78:5d:ce:
66:0a:73:33:8f:d8:27:bc:1f:d2:86:83:7f:97:9d:cd:e6:72:
6b:2d:c6:31:50:98:d5:70:eb:4b:78:5e:85:94:a6:2a:a8:ab:
e3:86:7b:a5:f4:42:7f:8f:7a:10:89:7e:9f:75:f4:4d:81:6e:
94:29:8e:ad:19:c1:ac:7d:54:19:b8:29:f7:53:2a:0e:5e:08:
cc:80:9b:a2:31:7a:be:e2:08:3e:fd:0b:1a:4c:4a:87:61:cf:
ba:d9:5c:0a:40:4c:af:3f:fa:d9:3c:0f:6a:56:14:71:f6:3d:
b7:8d:e4:85:5f:68:57:64:95:70:f3:32:5a:bd:cf:ab:bc:3f:
e2:5f:8f:71:5a:4f:9c:e0:db:bf:98:5a:63:d9:9a:ce:d6:9c:
a6:e9:1c:d6:9c:fc:25:f6:c3:e1:82:33:23:93:e4:42:85:39:
45:39:47:21:41:ac:0b:ef:0a:53:43:60:b8:b4:c5:47:2c:8d:
49:51:93:f1:33:ef:fe:61:7e:17:c1:a5:ae:ab:b5:48:69:0a:
d4:c1:07:26:2d:f6:ee:5d:63:46:17:12:7f:8e:47:75:1c:ae:
ec:75:0b:09:76:88:c8:74:fb:a2:a4:c3:48:fd:23:c3:9a:c3:
df:2e:a9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:13:41 2025 by rpki-client