Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LOhCStaslQ17mWC_p195L_3V_8s.roa
File: LOhCStaslQ17mWC_p195L_3V_8s.roa (raw, json)
Hash identifier: yGkU0YGcR91UA1atcBik+q/CCCbcncn8PSAuASVbxPI=
Subject key identifier: 2C:E8:42:4A:D6:AC:95:0D:7B:99:60:BF:A7:5F:79:2F:FD:D5:FF:CB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2940
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LOhCStaslQ17mWC_p195L_3V_8s.roa
Signing time: Fri 01 Sep 2023 10:06:19 +0000
ROA not before: Fri 01 Sep 2023 10:06:19 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.195.8.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10560 (0x2940)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:19 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=2CE8424AD6AC950D7B9960BFA75F792FFDD5FFCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1a:ed:de:b2:77:e0:d2:b0:cb:e5:99:10:2e:
f1:31:fd:5f:6e:9e:b7:8a:cd:8e:7b:90:7b:76:46:
2c:fa:2d:47:cd:77:51:b3:44:c2:5b:03:a6:ad:b2:
49:e8:5b:20:e1:22:1b:18:eb:bc:eb:0d:26:de:a3:
58:04:f2:25:70:ab:35:ab:6f:0b:a3:c4:fe:d9:33:
8d:e9:9b:ff:a4:87:14:1b:1a:d2:30:aa:5b:a1:e4:
e8:43:dd:54:08:20:86:dd:88:59:3a:e9:94:2c:17:
d6:ba:ec:f0:11:52:c1:f5:47:91:24:d7:3e:ef:43:
93:9e:ca:2a:e9:28:27:d6:a9:e8:02:35:d5:33:9d:
7d:08:53:90:75:1e:08:79:01:1e:2c:4a:98:d1:5c:
62:00:17:36:9a:c8:fa:1b:bf:ba:89:09:07:84:93:
d0:57:aa:5c:10:5c:1d:f7:fc:d0:4a:e3:f6:dd:02:
2e:e0:d4:0d:b6:7a:bd:2a:3f:29:52:e9:2c:9e:d8:
ae:95:6d:35:07:0d:8a:bd:8e:16:f3:2e:ca:f9:c7:
04:66:c7:fa:82:63:8a:9a:af:d5:16:0f:8b:cd:9a:
47:8f:7e:89:f8:58:46:cd:87:ba:db:74:36:6f:3b:
67:fc:d0:9e:44:cf:22:68:22:0d:37:36:d8:fe:65:
c0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E8:42:4A:D6:AC:95:0D:7B:99:60:BF:A7:5F:79:2F:FD:D5:FF:CB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LOhCStaslQ17mWC_p195L_3V_8s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.8.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:5b:f8:64:67:f9:cc:db:5d:29:09:8b:0e:47:56:68:26:c5:
ef:3a:33:ca:90:fb:96:3e:4b:df:cc:55:b9:2a:50:e6:5f:0a:
61:34:f8:fd:db:0a:05:e9:0d:c8:82:18:f3:00:1c:08:a4:b2:
30:b9:2b:7d:8d:d4:79:f1:f4:a8:56:49:5c:94:3d:6d:90:0d:
3a:f0:f1:39:6f:26:fc:3a:e4:4f:7d:14:90:71:aa:b4:20:ce:
2c:73:9f:26:e7:02:eb:c8:06:6c:a6:a9:f4:8f:15:48:0c:c5:
0c:00:33:c8:6a:12:13:d4:21:cc:4c:46:7b:f6:cf:80:ab:95:
f7:3d:f1:09:d5:20:12:09:64:91:03:42:66:a5:6f:a6:31:c4:
b1:1c:bf:e4:a9:40:bd:42:bc:a6:86:b3:ae:73:69:8c:f6:d1:
ed:79:82:39:36:c9:3c:66:2e:6a:0b:df:1d:0b:e7:05:2a:73:
a7:a9:97:2d:14:fe:67:31:b4:5b:c3:a0:e0:d6:3e:3b:ce:6e:
86:51:03:83:ee:d5:f5:d0:af:71:21:00:4e:b1:33:53:50:b3:
1d:94:e6:70:1a:ae:93:b3:e3:c6:fc:0f:37:a2:53:8a:97:51:
1f:0a:5d:0e:f5:ac:05:13:58:81:db:f3:b3:54:c0:e7:02:0b:
d4:a4:de:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:23:09 2025 by rpki-client