Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CrxVu3EpD4rwPcJQrcitFH_-DsA.roa
File: CrxVu3EpD4rwPcJQrcitFH_-DsA.roa (raw, json)
Hash identifier: qm8bWSROYv0DwsqZ4vuL5+X/tA3VfNEXkSU6+CelZ6M=
Subject key identifier: 0A:BC:55:BB:71:29:0F:8A:F0:3D:C2:50:AD:C8:AD:14:7F:FE:0E:C0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 17B3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CrxVu3EpD4rwPcJQrcitFH_-DsA.roa
Signing time: Sun 07 Feb 2021 12:22:51 +0000
ROA not before: Sun 07 Feb 2021 12:22:51 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.232.136.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6067 (0x17b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:22:51 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0ABC55BB71290F8AF03DC250ADC8AD147FFE0EC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:3c:69:9a:6b:49:8f:21:36:89:5d:55:6d:be:
d4:81:0b:53:d2:a0:87:fa:f9:ae:f2:ba:62:2c:db:
73:11:c6:e1:45:25:2c:2d:fd:82:57:0e:26:12:92:
04:31:20:bf:20:01:a9:0d:48:66:ff:0e:b2:95:07:
5a:91:f8:45:7d:32:a1:d2:fd:64:a2:e3:6c:92:bc:
a9:21:0d:31:6a:e4:a5:63:f9:35:6d:ef:98:6d:99:
9a:bb:9e:4d:70:61:5f:39:d3:2a:b1:6e:1b:b5:87:
5c:34:70:5c:e2:1f:4c:00:0b:80:7c:34:e1:09:9f:
35:97:87:81:0b:63:2c:99:a9:19:7a:e9:ab:24:ba:
0c:76:4b:a7:ef:62:a1:6c:45:6c:15:d3:b3:5b:68:
60:17:4f:dd:15:51:3a:d8:c1:10:f2:21:81:c2:d5:
e8:a4:b5:30:f6:cb:d8:65:02:f5:f6:bb:41:2e:bd:
1d:3a:72:e8:92:8d:b3:5a:69:e0:75:56:fc:3b:6a:
da:a0:67:5f:0b:38:ce:0d:8f:74:54:4d:6a:a8:29:
d8:f6:43:2d:e6:ea:75:b9:d4:50:38:ed:9e:f7:93:
cd:dc:f8:b0:fe:0f:bd:63:38:ba:a2:1e:96:21:6f:
64:e2:7d:5e:3d:a0:fb:30:ce:49:ca:e4:08:94:a8:
41:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:BC:55:BB:71:29:0F:8A:F0:3D:C2:50:AD:C8:AD:14:7F:FE:0E:C0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CrxVu3EpD4rwPcJQrcitFH_-DsA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.136.0/21
Signature Algorithm: sha256WithRSAEncryption
00:4d:3a:3a:2f:3c:f7:10:f0:3a:06:55:f6:72:78:53:ac:c6:
91:a0:63:23:8d:a2:0a:95:0a:68:56:a4:b9:00:67:47:27:b9:
d4:44:d7:53:c3:98:f4:3b:bc:14:b6:21:59:31:e7:5a:ee:4b:
93:4e:c3:fd:76:ba:34:ba:4b:d2:dc:00:2b:00:76:8d:b6:bd:
25:b3:10:26:41:a5:2d:59:d7:7f:79:14:1d:ef:08:04:88:a6:
1f:bd:ad:ed:9b:4f:7f:ff:a3:73:c1:2f:3a:b2:82:77:e5:51:
8e:62:22:6b:15:5c:64:e5:fa:f7:9d:67:a0:0f:95:cb:99:58:
c9:f9:42:0d:58:20:f4:57:49:20:b6:d0:9c:6c:92:b6:f3:24:
f4:bc:93:66:56:f8:0a:b2:86:0f:f3:b7:01:5d:32:1a:81:16:
98:4a:ea:4e:eb:66:e9:4e:59:e0:02:4d:20:18:62:e3:3d:84:
75:8c:52:e7:93:57:bd:f9:09:fb:43:c5:8b:da:5f:ae:6f:63:
80:e4:bf:38:96:34:dd:4d:0d:dc:a8:f8:c9:8f:23:8b:01:06:
78:85:6f:e7:2a:4f:7e:34:01:1f:22:bb:79:23:8a:35:dc:bc:
c0:d1:39:42:05:23:02:3f:ed:e1:48:a6:de:2c:71:73:8d:8a:
bb:44:a5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:18:39 2025 by rpki-client