Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MUZzyRgxFUhTDIEM4rpIhnz4K3k.roa
File: MUZzyRgxFUhTDIEM4rpIhnz4K3k.roa (raw, json)
Hash identifier: imswKi+JOix+ullHIgnSDxpf4tA19tHBwfrEKNNkGwE=
Subject key identifier: 31:46:73:C9:18:31:15:48:53:0C:81:0C:E2:BA:48:86:7C:F8:2B:79
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A98
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MUZzyRgxFUhTDIEM4rpIhnz4K3k.roa
Signing time: Fri 01 Sep 2023 10:08:05 +0000
ROA not before: Fri 01 Sep 2023 10:08:05 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.194.24.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10904 (0x2a98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:08:05 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=314673C918311548530C810CE2BA48867CF82B79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c6:f3:f1:97:e8:5a:aa:cf:65:b3:88:c0:8b:
3a:0c:13:45:60:67:49:66:dc:dd:31:e3:c4:e8:68:
95:f5:9c:53:e4:3c:69:63:f9:c1:bd:4d:c0:ba:34:
58:9b:a9:86:9c:d7:09:d9:68:3d:0f:0e:a3:e7:0c:
b3:2a:49:1b:31:81:d1:c8:0f:24:92:93:86:2e:1c:
3f:84:d3:63:8f:ca:3b:40:37:16:eb:d9:57:82:84:
0f:b2:3e:4f:8f:ae:3c:95:91:a2:47:56:b4:68:e1:
5e:a5:ba:68:7a:75:b5:4a:af:9d:06:c0:61:44:34:
ec:76:de:d0:15:b6:7f:4e:36:de:cd:73:05:9c:07:
15:cf:f7:7f:1c:46:48:d7:38:66:1a:3d:37:fd:70:
d1:f0:fe:2d:d6:ee:ef:21:c4:cc:64:5f:a0:f7:aa:
9d:05:7a:fc:ff:e6:20:9d:c0:45:2f:22:24:ad:3f:
a8:f6:7c:e6:d2:fc:74:a9:e5:b5:d0:f7:ce:be:b8:
1c:a9:b2:41:f8:8f:d5:f4:42:57:54:ce:0a:4e:32:
9f:c1:c8:9b:d4:19:25:60:7f:f1:13:fe:39:91:2b:
64:20:92:f5:76:a7:da:d9:4d:9f:50:0d:df:b2:1b:
ee:f8:0b:d2:fa:af:4a:9b:14:78:a7:44:c4:42:46:
f5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:46:73:C9:18:31:15:48:53:0C:81:0C:E2:BA:48:86:7C:F8:2B:79
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MUZzyRgxFUhTDIEM4rpIhnz4K3k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.24.0/21
Signature Algorithm: sha256WithRSAEncryption
7d:b2:5c:47:e6:cf:23:7c:f8:7c:47:7e:5d:9c:98:56:77:06:
c2:95:47:23:24:79:c2:d6:6d:fe:a4:dd:57:dc:70:01:23:3e:
b1:88:26:98:a1:6b:eb:36:18:b2:b6:a1:98:df:ab:da:3e:28:
1e:cf:02:50:39:59:6c:08:0e:d2:34:a6:d8:a0:ee:69:8e:de:
ea:f2:8b:25:17:25:36:ca:bb:ae:7f:dc:82:9c:aa:06:a5:ba:
05:8b:d0:b1:d0:2c:a4:42:b6:bb:e7:75:6d:62:20:50:4a:9b:
d3:d8:a4:c1:65:2a:7b:8b:e3:5d:45:d5:b0:50:a4:88:0a:5b:
0c:4a:6a:c7:fa:a7:52:3d:b9:38:6f:e6:d9:db:cc:5c:3c:ad:
de:11:aa:14:0b:a0:33:42:fd:e0:ff:e5:4b:d0:d3:65:79:50:
7f:de:bb:65:87:64:b8:4a:4d:2a:d4:a0:a6:53:72:df:9c:68:
01:8b:b8:56:a2:d8:3c:a2:43:2b:fa:de:95:e0:50:bd:00:07:
cd:0e:57:5b:6f:1a:df:8d:0a:3b:ef:49:6a:f9:fc:d7:50:34:
c1:60:15:1c:ad:c9:20:18:29:e5:02:04:d9:a2:07:34:5f:12:
9c:8b:ab:46:a6:b6:11:63:eb:ea:0b:2c:68:85:bc:26:a1:c6:
e1:db:c8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:16:28 2025 by rpki-client