Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Keyrtbwf3bvL_KwfIPOU6M5VZh0.roa
File: Keyrtbwf3bvL_KwfIPOU6M5VZh0.roa (raw, json)
Hash identifier: rCAWp+AFVJmznW4yG5y/D6CV1ZGFQuyDffeLDC5h2Cw=
Subject key identifier: 29:EC:AB:B5:BC:1F:DD:BB:CB:FC:AC:1F:20:F3:94:E8:CE:55:66:1D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1577
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Keyrtbwf3bvL_KwfIPOU6M5VZh0.roa
Signing time: Sun 07 Feb 2021 12:04:47 +0000
ROA not before: Sun 07 Feb 2021 12:04:47 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.0.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5495 (0x1577)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:04:47 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=29ECABB5BC1FDDBBCBFCAC1F20F394E8CE55661D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:7a:50:d6:33:75:d8:3a:2a:69:ec:6f:64:a3:
f1:1f:28:86:b4:19:c9:ac:98:a2:2e:32:a6:3d:e5:
db:53:a9:26:5d:a4:df:26:a5:69:8a:92:b6:12:1d:
34:15:fd:d1:fb:ff:c6:0f:c4:00:a9:c3:67:61:35:
70:a6:70:4b:79:77:16:40:a9:63:05:bb:82:49:d7:
c6:f0:70:32:3f:7a:45:9c:77:9a:68:de:05:7d:a1:
8d:36:ba:65:47:52:36:5e:56:6e:2f:8e:8e:ef:5d:
66:89:f6:01:e9:c7:1a:67:a1:2c:64:45:1f:96:4e:
4f:16:2e:42:ff:8d:1c:59:ba:66:6b:c9:e8:11:f6:
e5:d7:4b:6c:22:15:05:99:09:eb:b3:d6:c9:e3:44:
ce:20:af:cd:25:3b:b9:c3:0a:00:24:d6:6a:04:df:
83:d1:31:b3:92:85:a9:9e:0c:d1:79:ea:6e:b0:86:
e9:b4:0c:04:cc:fb:58:e3:77:ec:53:f9:fc:24:c5:
e0:52:6e:52:3f:58:f7:3f:64:1c:56:dd:7b:55:86:
18:8f:0e:d4:80:7d:7d:22:7d:8b:7e:fa:af:3c:e9:
92:2a:56:c7:80:f7:40:ad:5b:7e:78:37:05:71:55:
38:4c:1c:79:90:dd:3a:35:9d:bf:7d:02:bc:76:8e:
f3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:EC:AB:B5:BC:1F:DD:BB:CB:FC:AC:1F:20:F3:94:E8:CE:55:66:1D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Keyrtbwf3bvL_KwfIPOU6M5VZh0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.0.0/21
Signature Algorithm: sha256WithRSAEncryption
66:2c:b1:4a:75:01:fd:a0:c9:d4:1a:6f:0d:4c:d2:a4:dc:f3:
ea:cc:52:df:e7:dc:48:53:8f:84:c0:50:8d:e6:7c:e2:9b:82:
b7:8e:c3:f2:22:fc:23:26:5d:b6:1f:ff:78:c5:01:4a:26:35:
f8:b5:6c:bd:df:6d:3f:20:ee:3a:db:b1:44:19:35:15:47:42:
66:8e:85:fe:0a:14:6e:11:1a:90:05:67:eb:8f:7c:15:f8:0f:
b0:05:1b:dd:db:83:a8:40:72:67:ef:a6:86:db:06:f1:81:91:
02:69:03:ee:10:4c:fe:5e:8b:93:a3:a4:11:04:2d:24:2a:aa:
63:b4:73:70:69:58:2f:36:ac:54:7e:07:16:94:91:d1:b8:65:
05:43:b0:5e:98:b3:56:1b:28:c2:c6:96:d1:20:42:25:2e:3c:
fb:40:28:b6:72:69:7f:f4:07:d8:ed:80:8c:7b:b2:da:df:4f:
e0:8e:4f:a0:8e:e7:41:5f:64:45:7d:62:86:33:d1:e3:6f:46:
fb:81:48:85:1b:28:38:cc:cd:cb:aa:99:e8:ee:34:3a:58:ad:
64:01:6c:96:3e:fd:31:69:a0:b8:54:08:ec:d8:b7:f8:bd:56:
83:78:6c:81:38:05:52:69:d4:4f:31:10:62:de:6f:1f:7c:65:
b2:89:f1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:30:59 2025 by rpki-client