Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IEOCuvWjqughz9nEhWOXTi7aX6M.roa
File: IEOCuvWjqughz9nEhWOXTi7aX6M.roa (raw, json)
Hash identifier: Iguxyj0C2bvigbcEZL99cwYE5hoRbgvE4BYDnZoT/Jk=
Subject key identifier: 20:43:82:BA:F5:A3:AA:E8:21:CF:D9:C4:85:63:97:4E:2E:DA:5F:A3
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1B01
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IEOCuvWjqughz9nEhWOXTi7aX6M.roa
Signing time: Wed 29 Sep 2021 02:46:00 +0000
ROA not before: Wed 29 Sep 2021 02:46:00 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.192.208.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6913 (0x1b01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:00 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=204382BAF5A3AAE821CFD9C48563974E2EDA5FA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:00:9d:54:66:40:25:dc:da:35:bf:a0:73:21:
f6:8c:13:bb:4f:cd:72:0a:92:f5:e8:ce:36:15:a4:
4f:4b:9f:69:b4:e7:00:a9:60:a0:72:da:d0:19:30:
09:4b:e0:3c:ac:cb:83:64:e2:67:61:24:36:0b:b3:
8f:7b:02:c0:66:4b:e1:c7:a0:80:c4:bd:e1:14:77:
c5:c7:d6:99:99:da:3e:fa:5e:d7:5b:c3:36:37:2f:
e8:ae:a6:fb:54:43:3c:26:81:db:d7:ca:a4:ec:be:
f9:14:08:d4:2a:e4:fb:29:0b:9c:e3:5d:60:94:c6:
a5:c2:ff:44:c6:f6:a1:10:7d:b5:f1:6f:20:e8:96:
d3:dd:6d:24:2c:0e:fd:df:ec:d0:54:cd:57:b7:63:
ac:8a:50:d8:f5:b9:c9:e9:75:f9:92:e1:8f:ec:05:
f4:32:15:61:5f:ac:97:92:09:82:bb:de:a0:f0:dd:
26:90:68:cd:a0:d5:b8:c0:24:be:25:4d:dc:be:95:
7e:21:09:59:9b:cb:3c:fb:91:2b:30:2d:fe:1a:a7:
52:fc:48:7f:f9:09:56:ea:f6:3e:c8:12:28:c8:70:
a0:66:82:34:52:09:96:d5:b3:93:71:48:c1:4a:89:
dc:de:40:fc:f2:c7:c6:b6:63:1f:17:b3:30:54:99:
2f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:43:82:BA:F5:A3:AA:E8:21:CF:D9:C4:85:63:97:4E:2E:DA:5F:A3
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IEOCuvWjqughz9nEhWOXTi7aX6M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.208.0/21
Signature Algorithm: sha256WithRSAEncryption
69:33:0b:82:00:20:fd:e6:fb:f6:18:90:c6:c6:71:8a:ca:0c:
79:d8:83:4a:64:f9:52:81:af:58:43:14:06:7f:dc:a4:f9:97:
14:c1:c6:cb:b0:dc:78:07:76:23:2d:64:4c:73:e8:dc:7b:a5:
89:eb:cb:91:79:73:a2:91:21:3e:03:3e:e4:34:e6:09:a5:96:
cf:80:cf:25:4c:ef:a9:9b:75:3a:99:4a:fb:6d:31:56:c6:fe:
1b:17:37:bf:58:de:10:b1:91:a5:9a:54:1f:a0:ed:3c:70:3d:
3e:07:f9:e3:b2:f2:33:65:47:a5:22:2c:4e:c5:5d:a5:9c:a5:
7c:65:52:06:bd:e2:3f:99:b3:1c:9c:6d:f9:f0:9d:3f:a9:b4:
17:d3:1d:b8:71:ea:5c:97:2b:b4:99:91:33:19:5c:f9:19:13:
82:10:8b:e6:c3:8c:cb:4c:c3:c5:f0:4f:9a:a9:74:b3:19:56:
24:fe:8f:9b:42:05:a6:f6:d0:24:c5:5a:dc:37:68:ad:6f:b8:
70:83:57:2b:d8:1c:3a:6f:3a:14:9f:9e:6d:be:27:66:5d:f5:
97:74:16:f2:5a:e5:13:f6:00:6d:0f:b5:99:73:5f:09:34:52:
c1:e2:15:9d:f3:8a:4b:f2:d3:0e:88:e7:75:34:f8:7a:c2:18:
f9:44:02:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:24:53 2025 by rpki-client