Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EvtJdJpYMNJeJ5nqRk7U51sJ8AM.roa
File: EvtJdJpYMNJeJ5nqRk7U51sJ8AM.roa (raw, json)
Hash identifier: q5zkjVHGt2ZqbFwmShChjOi41GnCQ2owikDExkBBpH4=
Subject key identifier: 12:FB:49:74:9A:58:30:D2:5E:27:99:EA:46:4E:D4:E7:5B:09:F0:03
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0D81
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EvtJdJpYMNJeJ5nqRk7U51sJ8AM.roa
Signing time: Tue 29 Sep 2020 09:54:38 +0000
ROA not before: Tue 29 Sep 2020 09:54:38 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.112.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3457 (0xd81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:38 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=12FB49749A5830D25E2799EA464ED4E75B09F003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:05:26:66:a6:e8:d2:a7:8f:d3:c1:af:1f:94:
a7:24:f9:c7:6a:ff:0e:8e:03:6e:b3:2e:46:95:40:
dd:8a:2a:7a:91:12:ff:35:ae:dd:8b:02:6a:2f:f6:
87:55:f2:55:46:f1:1c:40:c2:31:7d:a2:1f:a4:88:
b1:74:bf:3f:e8:7f:24:db:2f:3d:9d:e6:da:43:b0:
4b:93:15:b3:a5:43:4f:29:48:f9:c0:e7:7e:ec:76:
b1:44:0c:0e:16:83:dd:f9:25:7c:bc:1b:ca:ed:51:
a5:1c:b8:61:e2:3b:77:4d:b9:5e:6d:35:1d:e6:5d:
e0:6a:be:cc:4b:0d:bb:ca:b7:9c:7a:a5:9b:da:dc:
cc:d8:3f:c5:d9:2f:86:47:30:5f:e8:5f:f4:f3:11:
6e:f1:ba:4d:b4:3c:49:1b:28:82:58:db:2a:15:3f:
13:dd:17:1c:16:b0:39:b6:2c:07:e4:cb:b5:cf:1c:
6e:55:f3:b6:30:70:52:15:7a:06:ed:c5:12:50:b5:
7a:87:d5:d9:f6:3b:95:02:e6:d9:38:a5:b3:d9:74:
03:9a:fb:5e:1f:42:c1:bb:88:e0:57:a8:ea:a6:2d:
6b:7a:1a:84:c2:59:20:0e:b7:fd:39:a1:b9:b1:a5:
06:ca:91:05:a8:d8:95:a8:64:46:42:b2:76:fd:74:
e7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:FB:49:74:9A:58:30:D2:5E:27:99:EA:46:4E:D4:E7:5B:09:F0:03
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EvtJdJpYMNJeJ5nqRk7U51sJ8AM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.112.0/22
Signature Algorithm: sha256WithRSAEncryption
79:78:22:12:63:3c:08:dc:a2:c7:61:5f:f9:d3:66:38:f6:92:
5d:d7:47:09:53:63:69:17:7f:1f:ff:ff:1f:e1:43:87:bb:70:
ac:99:d2:97:ae:a7:2e:b2:97:33:89:55:b7:92:bf:36:a3:51:
8e:7a:85:bd:0b:0a:8d:fa:89:b6:4b:85:9c:be:81:58:93:fe:
52:28:d8:56:17:fe:5b:37:89:25:9c:6a:5b:c9:ff:99:cb:44:
76:f9:fa:5b:7a:2f:97:ea:51:f4:8e:8d:f2:6e:28:60:5d:44:
2d:28:35:d7:78:36:99:90:76:cb:1c:53:70:84:0b:0e:5d:85:
8c:0c:6f:8e:4c:4d:f4:db:4a:1d:e2:df:71:8b:db:7a:01:84:
7e:a2:7f:32:30:f1:45:f9:3c:7b:a9:7d:3b:84:51:7d:d7:c6:
bf:16:37:08:ac:87:18:01:06:9f:58:ff:1a:f2:88:3c:b1:54:
80:13:e3:7a:1e:a4:b4:4c:a9:86:0f:49:b5:8c:ca:2c:02:27:
8d:0a:ad:54:d1:af:37:69:36:bc:8e:1b:ad:ee:04:2d:0b:c3:
fa:e2:bf:da:c3:ba:4e:4e:cd:ca:76:2d:a4:a1:57:ee:4f:69:
35:43:dd:de:10:d2:cf:da:4f:45:5d:54:b4:7c:14:80:aa:6e:
f8:55:1c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:12:23 2025 by rpki-client