Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/E3WH2xuiIALCgba7JANgxQRsEsQ.roa
File: E3WH2xuiIALCgba7JANgxQRsEsQ.roa (raw, json)
Hash identifier: JBUL0OTw+RHML+zOMmjUv0fVdtbIWhVQZ1GABzX6Fks=
Subject key identifier: 13:75:87:DB:1B:A2:20:02:C2:81:B6:BB:24:03:60:C5:04:6C:12:C4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0E35
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/E3WH2xuiIALCgba7JANgxQRsEsQ.roa
Signing time: Tue 29 Sep 2020 09:55:28 +0000
ROA not before: Tue 29 Sep 2020 09:55:28 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3637 (0xe35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:28 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=137587DB1BA22002C281B6BB240360C5046C12C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8a:a8:96:06:b0:7a:96:01:2a:8c:06:36:71:
d8:94:52:92:95:ab:0f:91:c2:94:3b:06:9e:f6:5d:
02:af:4b:8d:d4:6f:4b:a0:ee:ea:71:ae:e0:d9:73:
34:fd:6d:99:3c:1f:8e:13:e4:a5:fd:37:02:ba:37:
03:7d:7c:d6:39:50:5b:f7:70:e7:00:36:55:e4:a5:
30:29:c4:7c:6d:d7:bc:e3:a7:86:f5:aa:cd:63:d0:
a4:96:06:b9:68:0b:4c:57:8c:6c:de:00:fb:1b:5d:
3a:11:3a:7a:6e:4a:5a:fe:22:27:60:f5:60:db:2a:
6f:ee:90:c6:1b:2c:c8:d5:0f:71:a8:2b:61:ba:b3:
3d:ba:fa:27:91:d6:03:97:16:f0:bb:02:6f:f6:5d:
48:29:0c:d5:00:6e:d3:49:5c:35:8d:bf:2b:9f:51:
da:27:8e:1b:06:fe:43:4a:46:37:e8:d1:67:b1:4f:
ca:e8:d9:f9:c0:39:81:e2:54:16:db:78:f2:df:06:
0a:f4:4f:46:6d:27:b4:0c:ae:4e:b1:ae:c5:38:8e:
74:87:ed:b9:49:67:f3:19:8c:31:e1:08:4a:f2:9e:
22:9c:11:73:9f:09:5d:a5:51:3a:ae:6a:3b:e4:2f:
a0:68:7a:e8:87:37:61:34:98:14:c0:72:e1:06:1e:
6e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:75:87:DB:1B:A2:20:02:C2:81:B6:BB:24:03:60:C5:04:6C:12:C4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/E3WH2xuiIALCgba7JANgxQRsEsQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.128.0/20
Signature Algorithm: sha256WithRSAEncryption
41:8f:5e:b7:03:91:e1:e1:17:1a:33:4e:0d:20:d6:28:f1:a7:
2a:16:fc:a5:2b:58:18:a0:5a:ec:65:c3:54:61:d4:9d:3a:7d:
04:ef:fd:a3:97:a5:8b:67:0e:33:ab:54:ae:1c:81:92:c5:05:
92:f8:1e:07:6c:1b:79:70:c8:d5:7e:2d:29:2d:c9:35:f1:b2:
92:8b:ad:7a:83:3d:fe:0d:6d:13:21:1a:f7:a0:12:ae:5b:8e:
8f:31:9c:1b:83:b6:8e:6e:e6:96:b7:da:d1:98:94:3a:9c:1d:
df:20:02:43:63:cb:5c:a6:0d:a6:ed:0d:07:98:a9:e4:d4:ae:
0d:fe:b3:5c:ba:6d:28:c3:1d:36:d5:66:0e:f0:3b:5d:38:da:
3f:a0:67:fc:b8:25:0c:c0:39:53:58:19:18:09:4e:ca:d0:44:
69:e9:04:5d:c3:ec:9c:29:12:0e:fd:6a:c0:5a:2c:58:e8:d1:
f1:11:0a:00:fd:a0:5e:89:84:fc:1d:8c:65:1a:6b:fe:1f:db:
00:06:10:b3:e0:04:c6:af:e8:b6:f5:4f:c4:30:99:80:24:77:
19:73:12:eb:7a:8b:1c:1d:9d:e8:6f:85:cb:ce:46:36:0f:ed:
f9:cf:e2:48:cd:19:dd:ea:cc:fa:1c:88:0c:5c:3e:b2:eb:52:
60:95:ba:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:14:09 2025 by rpki-client