Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LX0I2Ct7Qy1Iw9hh0beITgIeODM.roa
File: LX0I2Ct7Qy1Iw9hh0beITgIeODM.roa (raw, json)
Hash identifier: Dq9q6co4fDAb0GeHTvM0ONfr2hGDGaPpfxJc0+j4+X8=
Subject key identifier: 2D:7D:08:D8:2B:7B:43:2D:48:C3:D8:61:D1:B7:88:4E:02:1E:38:33
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1C64
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LX0I2Ct7Qy1Iw9hh0beITgIeODM.roa
Signing time: Wed 29 Sep 2021 02:47:42 +0000
ROA not before: Wed 29 Sep 2021 02:47:42 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.195.248.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7268 (0x1c64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:42 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=2D7D08D82B7B432D48C3D861D1B7884E021E3833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ac:8b:b0:e3:82:16:90:c3:a1:61:3f:da:ae:
f3:d6:13:95:a5:b6:77:15:b8:06:4b:58:bf:f4:d8:
6b:75:5e:82:d8:7e:e3:d0:c2:51:45:84:0d:f4:cb:
06:de:79:99:c4:9a:9d:74:bc:cc:11:11:25:fa:2e:
9a:b1:cf:77:bf:77:c9:32:4e:d7:b6:d7:d9:72:20:
35:35:46:eb:96:64:0b:a4:4c:d7:52:39:39:f5:23:
00:13:ab:69:9c:ce:97:6e:c9:39:89:d6:73:93:36:
19:df:83:c5:ac:b9:ec:02:3b:dd:72:83:48:f3:a4:
b0:96:94:54:f2:42:8d:6a:c0:95:af:d7:fd:03:92:
7e:c2:37:2f:d9:93:1c:6c:28:f8:1a:d0:fa:71:ff:
6f:73:4c:be:86:a9:06:16:37:35:b4:77:4b:7c:f8:
d7:6e:82:17:c5:8a:f4:e1:32:43:b7:cd:06:ec:07:
43:27:13:ae:41:43:0f:46:b7:f7:76:15:84:af:0c:
b1:70:f9:30:59:3d:d3:e5:98:75:ac:b9:e3:21:ee:
a3:4a:1c:8b:65:c0:d2:b8:30:b4:1a:bc:3f:f8:ad:
6b:7b:e4:4d:d4:cf:1c:f0:30:82:1d:85:2a:f7:71:
ea:fa:fb:7d:a1:ae:34:20:01:1f:bd:99:a0:bc:9f:
e5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:7D:08:D8:2B:7B:43:2D:48:C3:D8:61:D1:B7:88:4E:02:1E:38:33
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LX0I2Ct7Qy1Iw9hh0beITgIeODM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.248.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:1d:32:f1:07:42:93:66:2d:e9:4a:e8:1d:19:70:3a:ce:97:
a2:cb:71:1e:9a:34:1c:ed:8d:ac:82:90:48:2b:bd:7f:32:f3:
b5:a1:77:45:5d:b5:c5:74:77:1f:c4:90:c1:d3:08:33:3a:72:
31:21:23:69:90:bb:98:6d:53:d5:e1:e8:8a:b6:80:cc:11:e1:
b2:b4:54:7c:28:df:da:91:c9:63:25:94:79:e1:90:58:e5:34:
e0:92:15:b8:1e:eb:27:2f:a8:a4:5d:14:01:66:30:f4:48:1a:
7d:eb:bf:cf:51:9c:37:93:77:39:9e:c4:b6:c0:e4:73:60:37:
21:f6:cb:a2:26:fb:da:c1:5f:ab:d2:91:6f:9e:80:5b:94:59:
53:bc:92:d7:84:c7:c2:89:18:5b:a9:b1:d1:a4:df:5b:d6:ad:
e0:cd:e1:fa:ce:5d:bb:6e:fa:f4:25:82:a4:38:c9:f0:d4:4a:
8f:25:70:ce:90:52:e6:4f:94:dd:85:01:81:6a:58:8e:70:98:
e9:fe:6d:14:b1:d1:fe:87:92:1b:48:75:2e:fc:62:c2:d4:03:
94:10:a3:18:b6:86:af:d1:36:ac:ff:ad:c5:8d:ff:82:9b:87:
79:cd:9d:75:90:77:47:5f:d0:c4:73:fb:27:33:06:e8:a6:34:
c1:96:75:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:18:34 2025 by rpki-client