Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KzWY9W_zj3Y_StrdeSK9qEFELqk.roa
File: KzWY9W_zj3Y_StrdeSK9qEFELqk.roa (raw, json)
Hash identifier: wnFa+0YR0kU9z4nolJ+ywbpfdrFH/ODwl2XUdFIgXx4=
Subject key identifier: 2B:35:98:F5:6F:F3:8F:76:3F:4A:DA:DD:79:22:BD:A8:41:44:2E:A9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1CE2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KzWY9W_zj3Y_StrdeSK9qEFELqk.roa
Signing time: Wed 29 Sep 2021 02:48:21 +0000
ROA not before: Wed 29 Sep 2021 02:48:21 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.195.48.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7394 (0x1ce2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:21 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=2B3598F56FF38F763F4ADADD7922BDA841442EA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3a:17:8c:aa:38:a5:22:8e:9e:60:5b:25:be:
0c:7b:d9:06:9e:d6:78:07:76:c7:69:48:c4:a7:dd:
c2:cc:76:33:d7:94:2c:b2:2a:3a:ae:51:82:a1:52:
8c:14:ba:5c:60:4e:c0:a3:b6:a2:3a:79:cf:b3:61:
c8:e1:93:c9:00:01:2e:42:85:fa:30:78:16:ab:e8:
fa:5e:f7:bb:a7:81:66:23:85:47:40:7d:9b:3a:32:
ac:2d:6a:60:0c:ee:5a:24:1a:5a:09:e0:2a:b2:61:
86:08:5b:41:6d:09:fc:a8:71:3a:26:67:e7:d7:d4:
cb:d3:9f:34:62:b8:e8:a8:10:25:d0:61:34:10:18:
84:e2:cd:2b:23:44:6f:98:29:67:97:f9:64:a7:49:
e8:81:0a:40:3d:28:f4:01:ec:be:df:a5:40:e3:7e:
3e:3e:38:36:20:2d:93:5b:f5:5e:fc:5a:7a:1c:34:
d9:36:e8:ea:49:59:c8:52:0c:9c:45:6f:b4:74:14:
2b:69:8a:09:50:b7:be:5e:8b:93:af:47:0d:83:8f:
db:8c:0b:97:27:be:59:56:97:94:00:ff:cd:41:b9:
a9:d0:6e:14:32:45:98:51:8b:6b:b6:e8:69:24:82:
31:88:d3:2c:88:74:e8:b1:68:6c:2e:7f:27:26:e5:
e7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:35:98:F5:6F:F3:8F:76:3F:4A:DA:DD:79:22:BD:A8:41:44:2E:A9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KzWY9W_zj3Y_StrdeSK9qEFELqk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.48.0/21
Signature Algorithm: sha256WithRSAEncryption
9e:05:bd:33:c8:23:7d:48:da:33:65:9d:c8:68:4a:a3:14:b7:
70:f8:07:ad:25:7e:4f:9f:cc:ce:6b:66:0b:fa:7d:13:06:a7:
4d:6e:dd:94:f3:e0:5b:70:c0:92:c7:04:c5:3c:67:6f:69:d4:
6f:5e:65:f4:68:3a:8a:fd:05:44:37:34:08:8c:ae:b2:49:06:
3b:12:7f:0a:de:03:96:bd:67:c8:77:be:05:bf:3a:8c:29:3f:
66:33:78:98:b5:10:78:bb:4e:ce:ce:71:64:5c:50:46:f6:ed:
78:de:f8:f6:e4:b6:d4:23:60:d1:95:6d:3f:65:45:73:2a:ad:
4a:87:e6:e6:b3:34:b7:da:b1:50:1f:a3:a7:e2:a5:19:b7:83:
11:d7:8f:d4:f4:8a:17:95:29:a2:97:9e:1f:00:e0:cd:64:d7:
8b:67:61:0d:13:1d:1a:7d:85:70:ea:69:bb:81:c1:28:bf:56:
24:13:87:b7:4e:7a:6c:f2:4e:f3:a3:1e:e5:2b:6f:02:1b:a8:
7b:5a:35:ea:96:5b:78:12:fd:f9:e0:a1:78:68:59:9f:cd:71:
52:27:e7:3b:56:27:c9:78:28:7c:73:9f:7b:a2:ab:7d:7c:1e:
c0:51:02:eb:2d:51:4c:1c:86:ca:32:65:18:ca:97:18:ca:6e:
ea:38:20:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:12:52 2025 by rpki-client