Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IYD_RrLnjXTf1nnu4MLyw94f8fk.roa
File: IYD_RrLnjXTf1nnu4MLyw94f8fk.roa (raw, json)
Hash identifier: zI0w07euedSgGZHC3PJClAlQZrq2QRivUQUJQ8NOmdk=
Subject key identifier: 21:80:FF:46:B2:E7:8D:74:DF:D6:79:EE:E0:C2:F2:C3:DE:1F:F1:F9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0DEF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IYD_RrLnjXTf1nnu4MLyw94f8fk.roa
Signing time: Tue 29 Sep 2020 09:55:09 +0000
ROA not before: Tue 29 Sep 2020 09:55:09 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.160.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3567 (0xdef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:09 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=2180FF46B2E78D74DFD679EEE0C2F2C3DE1FF1F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:59:59:16:d4:61:e6:4a:92:da:3e:ba:e4:53:
32:0e:a1:43:b0:c2:f1:9e:ed:e0:38:18:02:76:1e:
10:90:f0:ec:d2:0f:45:39:85:fc:ea:8f:67:c2:8f:
0c:b5:ca:65:33:39:a8:8f:83:74:44:40:d3:8b:ef:
a1:b4:52:19:8e:51:97:d6:3c:fb:7c:9e:15:b4:7f:
06:93:92:db:31:89:9b:11:ae:9e:a6:bf:0b:cd:b3:
df:54:c4:45:5c:cf:bd:b6:bc:86:2e:74:42:3a:aa:
d8:54:49:53:ad:4f:a3:6d:46:dc:5b:37:16:be:f9:
d0:ed:3d:75:a8:cc:3d:69:f7:9e:46:f5:f0:44:ad:
68:19:39:4c:0e:a1:5b:13:63:39:8e:2f:64:e9:3e:
60:8a:b3:a3:dd:2b:8e:83:28:70:77:dc:b0:95:de:
12:f7:e9:8b:64:e7:e6:c0:0a:a1:d6:7e:68:4b:d8:
ca:99:b2:0c:c2:6f:82:83:12:f0:5b:2d:b0:3b:a3:
29:ab:1c:12:74:d7:da:11:ac:94:31:e2:e3:9b:9e:
b7:99:32:8f:01:9d:2c:bc:fa:bd:05:2c:8d:d7:f3:
a1:cc:8d:17:44:5e:08:d3:28:56:ad:5d:b1:58:c0:
f7:d1:e9:3b:d8:2c:60:16:77:35:71:68:db:d4:11:
97:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:80:FF:46:B2:E7:8D:74:DF:D6:79:EE:E0:C2:F2:C3:DE:1F:F1:F9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IYD_RrLnjXTf1nnu4MLyw94f8fk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.160.0/20
Signature Algorithm: sha256WithRSAEncryption
30:05:e3:18:95:70:b7:c2:39:c4:e3:26:30:d2:cc:8e:84:d7:
40:3f:6e:c8:4e:c8:10:0e:0b:31:78:90:eb:ff:7b:21:b2:de:
80:53:37:ec:8d:e9:bc:f0:66:c6:c5:2e:05:0b:4f:7b:52:e4:
64:1f:a6:34:31:48:28:57:2c:37:b3:ff:0b:50:c4:3a:49:48:
27:b0:c1:a2:1e:51:dd:aa:1d:20:18:76:b6:6a:b7:49:6b:9b:
5c:4a:e1:85:dd:24:30:1e:de:b2:0f:bd:f4:13:2a:07:e8:3f:
7d:27:3e:c5:62:e1:6f:e6:dc:10:9a:59:87:f4:cb:5c:7c:d0:
41:9f:5f:4d:25:9b:fc:db:60:04:1f:46:1c:0f:6b:d6:83:bc:
28:22:ed:bc:71:f3:37:2f:fc:3d:09:4b:20:fa:1f:c0:6b:32:
52:a9:f9:c2:2a:2f:d9:4c:f7:98:05:de:dc:4b:09:53:dc:b7:
09:24:63:37:95:4b:b6:cc:56:4f:ce:10:b7:f2:65:d1:fc:56:
ae:9e:93:cb:0c:03:4e:65:e3:73:93:14:31:ce:fd:64:79:1d:
7e:f6:40:6d:c8:b6:d7:ce:d9:85:b9:00:45:63:d1:86:4d:49:
dd:36:20:23:e4:21:22:f7:97:75:95:a3:26:64:20:24:a8:4e:
28:94:28:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:24:53 2025 by rpki-client