Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LoPyDds_SsMKe6tMjdvvSprpC2U.roa
File: LoPyDds_SsMKe6tMjdvvSprpC2U.roa (raw, json)
Hash identifier: RIul7L9c0dt8ilu3lC0/jg+bO9QwEluNtpmSaa50AAU=
Subject key identifier: 2E:83:F2:0D:DB:3F:4A:C3:0A:7B:AB:4C:8D:DB:EF:4A:9A:E9:0B:65
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0D53
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LoPyDds_SsMKe6tMjdvvSprpC2U.roa
Signing time: Tue 29 Sep 2020 09:54:27 +0000
ROA not before: Tue 29 Sep 2020 09:54:27 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.192.224.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3411 (0xd53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:27 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=2E83F20DDB3F4AC30A7BAB4C8DDBEF4A9AE90B65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ae:0e:4f:63:17:aa:0d:c2:2f:e9:5d:ba:e7:
7e:19:40:e1:66:ff:1b:75:fc:15:04:f5:6e:f9:86:
5b:9d:13:c3:95:36:ff:ff:96:91:e4:6b:7d:e7:fe:
66:fd:a9:17:2d:98:cf:97:70:c3:2b:9c:f4:5a:68:
16:ec:5b:e7:86:9b:54:0a:ff:76:28:ba:bc:07:a3:
cd:4f:f1:45:50:7d:5f:92:44:82:7c:9b:b6:3a:9e:
8e:e1:19:07:3a:53:04:f0:94:a9:52:0e:9c:ee:bd:
69:20:95:d9:d6:52:33:e1:d9:6e:fe:23:3d:ea:8a:
f3:9f:b4:9f:96:12:ad:0b:d1:87:0b:23:4a:2e:21:
c3:be:5c:d7:3c:f4:7a:ed:0b:fb:b3:65:e1:a0:94:
e9:b1:24:27:a6:85:0c:e7:94:dc:e6:7f:a0:06:69:
8d:ec:46:bd:dc:7e:88:95:15:be:a9:cf:a6:77:79:
af:ca:5c:e6:74:2b:97:e7:2e:e4:2f:33:2f:c6:e4:
5f:5c:ec:c2:40:9f:03:d5:0e:e1:bf:b0:d8:37:5f:
04:89:25:ee:f3:5f:72:91:b2:78:31:1a:72:0b:76:
40:b6:0c:31:5a:9f:e5:7e:ba:b8:a5:0c:a2:5d:00:
a6:ea:91:87:c5:dd:d0:42:a1:ff:50:f2:b3:8f:7e:
1e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:83:F2:0D:DB:3F:4A:C3:0A:7B:AB:4C:8D:DB:EF:4A:9A:E9:0B:65
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LoPyDds_SsMKe6tMjdvvSprpC2U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.224.0/22
Signature Algorithm: sha256WithRSAEncryption
34:ad:7b:f4:de:7e:19:5c:67:a2:72:c8:4d:df:6c:54:e0:89:
7b:c9:78:eb:08:af:35:b3:04:bb:10:c0:c4:6f:c9:8b:84:fd:
3e:82:6d:0e:4f:81:25:73:d9:95:8e:b8:c9:b4:6b:99:a8:ca:
fc:9d:93:9c:4d:bc:9c:b1:f2:ac:3d:31:e0:b5:96:8b:d8:13:
fa:14:b6:9b:6c:14:b9:41:e6:9d:2d:cb:d9:41:38:21:3a:b4:
7a:66:9f:de:3d:ca:c2:c3:db:00:3d:ab:b5:63:18:10:e1:23:
98:65:a5:2b:cb:22:20:35:a6:ce:64:47:15:ae:48:38:43:e4:
9f:b9:07:82:a7:8b:54:ec:4d:5b:1e:52:17:4b:f4:a7:18:4b:
49:f4:85:4c:a5:3a:a3:a6:3d:98:8a:8e:dd:5c:e4:3b:0c:6a:
6e:0e:8a:e1:dc:82:4c:d4:ef:64:e4:6d:fb:b3:28:fb:56:bf:
64:9f:47:5d:00:67:32:8d:57:4e:b3:34:13:09:ae:0a:2d:13:
82:8a:71:53:32:0a:61:cd:6a:84:9a:da:73:6d:87:e3:80:82:
4e:8d:d0:0f:98:26:cb:24:84:7a:dd:81:73:40:40:a8:19:57:
65:ab:ff:85:a8:77:14:13:ec:e1:40:93:18:c5:69:f4:50:37:
39:82:e4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:16:50 2025 by rpki-client