Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IfATYDF8jAP1EKhGJEQddWE15PY.roa
File: IfATYDF8jAP1EKhGJEQddWE15PY.roa (raw, json)
Hash identifier: zMKwrnO5RFzocdaqhIbHDaIiO9De0tiUZlMtn0WX3YU=
Subject key identifier: 21:F0:13:60:31:7C:8C:03:F5:10:A8:46:24:44:1D:75:61:35:E4:F6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A0E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IfATYDF8jAP1EKhGJEQddWE15PY.roa
Signing time: Fri 01 Sep 2023 10:07:26 +0000
ROA not before: Fri 01 Sep 2023 10:07:26 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.193.196.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10766 (0x2a0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:26 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=21F01360317C8C03F510A84624441D756135E4F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a9:1a:ab:a6:ca:8d:59:06:2a:90:51:bf:34:
7a:dc:61:ac:8c:90:74:3b:bc:ca:51:46:1e:98:eb:
9c:2f:4b:cf:8f:ac:60:82:c1:78:96:de:48:21:92:
49:17:5c:ff:b7:e9:61:66:c5:67:42:22:05:37:f2:
a6:19:71:f7:61:98:5a:39:e1:36:4e:bd:5e:58:99:
11:49:48:17:ce:5c:b3:db:11:d3:3e:ca:1f:31:09:
44:c3:42:68:6f:88:0d:05:31:26:6e:78:36:9d:98:
5a:91:f4:57:36:a7:77:d1:e7:4d:32:2a:87:00:17:
c1:01:ba:6b:0f:1d:72:10:59:a5:61:1a:ce:18:32:
f9:52:cd:49:f5:a4:19:8d:16:25:dd:29:56:65:9b:
65:6b:b9:a9:a4:62:3b:a3:79:06:39:f4:cf:df:25:
0a:81:a7:8b:5d:6f:cf:56:d1:fd:0e:4f:0c:cb:68:
43:2c:f6:82:2d:a6:05:4e:39:d2:23:96:88:4c:73:
6b:7b:f2:00:f9:85:88:25:80:5c:47:08:8d:c0:0b:
a5:f7:1c:1f:89:fc:fe:54:81:21:4f:a3:5d:42:70:
a9:65:19:ad:98:84:c7:6d:e3:d7:89:cf:33:e3:f7:
19:0a:da:77:7d:61:e1:cb:50:7d:77:d0:d2:d3:73:
6f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F0:13:60:31:7C:8C:03:F5:10:A8:46:24:44:1D:75:61:35:E4:F6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IfATYDF8jAP1EKhGJEQddWE15PY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.196.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:28:d5:d6:1c:77:d6:4c:87:6c:41:49:4d:15:36:1f:70:cd:
1e:6c:eb:4d:8d:4a:1d:e9:e4:48:28:1b:be:44:0f:20:54:f4:
c7:e1:a4:83:0f:a8:53:5a:e4:4b:cf:36:82:97:11:b5:b3:cb:
f5:cd:3f:47:60:a6:13:f5:55:ce:17:34:bf:41:ce:53:a3:b1:
2e:98:ce:19:f8:ce:c2:05:3a:70:2c:87:ff:2f:56:b6:a9:f6:
fc:32:fd:3a:45:53:5f:d3:d4:9e:a8:29:e1:61:74:73:58:3b:
2c:d2:64:6f:75:1a:3f:ac:38:ac:8e:16:9f:82:ee:df:49:46:
4e:8e:41:8b:00:01:70:a7:2c:5c:15:ea:65:18:94:6f:15:a8:
01:5d:f6:ba:0e:17:b7:7a:cb:bd:a8:c4:f2:53:f8:2b:8e:0d:
9b:dc:cb:05:3a:1b:0c:0b:24:f6:ce:b4:3d:8a:83:cd:64:ec:
2b:23:54:a7:4e:46:de:18:c7:1c:ba:0b:78:06:3f:28:b4:fb:
59:d2:ad:46:f9:02:3d:76:6d:07:8b:91:44:fc:dc:c1:07:bd:
b7:1e:15:97:1b:ac:67:4b:8b:ff:ef:19:01:b8:66:7f:ef:3c:
a9:f3:b8:03:73:d2:47:36:38:c9:55:4c:b0:38:9d:b0:9d:c7:
2f:22:a3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:42:38 2025 by rpki-client