Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HZRH9i98P8LoKUkFZgdVKfwzvBU.roa
File: HZRH9i98P8LoKUkFZgdVKfwzvBU.roa (raw, json)
Hash identifier: dwFUdTsNawi2gv6VqBO34yQrnOs0GcAlEmLnnQgl8Ko=
Subject key identifier: 1D:94:47:F6:2F:7C:3F:C2:E8:29:49:05:66:07:55:29:FC:33:BC:15
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A9A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HZRH9i98P8LoKUkFZgdVKfwzvBU.roa
Signing time: Fri 01 Sep 2023 10:08:05 +0000
ROA not before: Fri 01 Sep 2023 10:08:05 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.195.148.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10906 (0x2a9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:08:05 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=1D9447F62F7C3FC2E829490566075529FC33BC15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1d:96:b8:66:fc:04:b2:bb:81:60:b7:f4:41:
6c:ca:26:47:4a:88:76:c0:af:5d:68:db:85:ac:a7:
c9:12:9a:97:96:f0:0c:2b:1e:da:11:d7:f7:6d:6f:
62:99:9d:d4:34:4e:10:9d:95:fd:0b:ce:ab:72:45:
45:3c:b0:23:2c:eb:cc:7e:e2:60:be:6c:e0:8d:85:
e2:f4:19:e2:ba:25:5a:6c:21:4c:10:50:53:4b:72:
c8:f0:d7:7c:dc:57:5e:c0:5b:19:69:39:49:f5:0c:
11:75:65:f2:c4:f6:42:7c:12:91:f0:d2:a0:ee:66:
c1:82:60:f9:ce:57:64:01:ef:a2:9c:ce:37:3c:e6:
02:7d:6e:fa:d3:9d:e1:b6:36:e0:86:7f:fb:d7:0f:
47:a3:4f:fb:09:eb:e1:57:8f:bd:ad:a6:56:ad:4b:
d8:b2:dd:12:8c:74:0f:9f:f1:56:2a:df:5d:94:ad:
9b:fb:5b:a2:ba:51:66:34:72:9a:7a:68:a3:89:ce:
19:c3:17:57:9f:18:6c:61:ec:3f:72:ce:da:4d:d2:
80:0f:df:a8:b5:28:48:a0:00:01:fd:4e:b1:11:21:
fb:60:78:fa:c7:b7:56:3a:07:a0:b3:76:f1:f1:82:
ce:0c:09:8c:fc:26:22:ee:9d:5b:bd:c3:fc:49:58:
02:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:94:47:F6:2F:7C:3F:C2:E8:29:49:05:66:07:55:29:FC:33:BC:15
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HZRH9i98P8LoKUkFZgdVKfwzvBU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.148.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:36:2b:96:0d:32:0b:00:0f:ed:c9:f2:4a:a2:35:84:a7:44:
d6:c6:c9:72:c2:51:cb:3f:44:93:c6:75:64:4e:3e:fe:50:1d:
96:99:a8:f2:d2:d2:aa:2b:ca:db:cb:ff:62:95:b8:2c:ba:4e:
97:7b:7c:c2:ba:f7:96:3f:87:e5:7c:fd:59:9e:5b:c5:41:92:
6a:0a:1a:24:e7:00:ac:75:a4:c2:98:2a:89:07:f8:84:8e:6c:
39:e1:5b:b2:be:85:dd:04:7f:8a:35:fe:4d:b6:af:51:c6:a5:
11:ac:a0:c0:9a:fd:eb:3e:70:87:cb:a7:fe:54:f5:94:bf:3d:
49:5f:35:3d:55:e8:ca:3b:ea:21:9f:c5:9b:7f:96:13:a7:ed:
23:e5:39:6f:97:81:01:fc:24:1f:20:a4:0c:e4:17:46:67:1a:
76:d0:92:d1:8b:29:5e:64:15:87:e3:62:59:10:39:ce:c9:f2:
63:85:b9:39:8b:1c:01:83:78:83:d3:0e:cb:ac:44:07:aa:ec:
cf:bb:06:51:79:27:d0:67:1b:63:9c:f8:2d:75:7e:f1:29:ad:
bd:4b:7a:d7:f0:c2:8f:d3:d7:e4:74:37:52:66:b1:d5:9a:15:
c2:46:63:14:1f:80:72:2b:8f:2c:87:07:83:fd:09:1b:63:30:
de:05:4e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:13:41 2025 by rpki-client