Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MziKl2JAIiM1rCdaNvom_F_eK7Q.roa
File: MziKl2JAIiM1rCdaNvom_F_eK7Q.roa (raw, json)
Hash identifier: IB/aUc+O50u6o8qCceqaS/TdO5E2aIfN9Y7lAuVhT1g=
Subject key identifier: 33:38:8A:97:62:40:22:23:35:AC:27:5A:36:FA:26:FC:5F:DE:2B:B4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 14C5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MziKl2JAIiM1rCdaNvom_F_eK7Q.roa
Signing time: Sun 07 Feb 2021 11:59:59 +0000
ROA not before: Sun 07 Feb 2021 11:59:59 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.193.248.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5317 (0x14c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:59:59 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=33388A976240222335AC275A36FA26FC5FDE2BB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:92:7f:61:7d:72:ed:e9:a2:b7:5a:c5:83:53:
8c:64:e1:ed:20:c4:23:dc:c6:b7:56:aa:66:af:4c:
c8:5d:f7:0f:49:e6:8f:fa:d6:e3:17:10:17:4e:fd:
d4:e4:34:0d:96:b1:8e:8a:88:04:72:b7:53:4e:e3:
a4:7b:64:f3:28:4c:08:d6:31:d2:2d:5d:16:4c:c5:
02:34:22:26:d6:94:87:64:62:69:f7:50:00:34:00:
1a:a0:4c:84:4f:07:4e:46:85:4c:19:3e:f8:98:34:
40:45:8f:d7:c2:02:5a:39:d5:df:45:81:c9:e3:a6:
c9:56:0a:36:0a:41:55:bc:3d:9c:91:c8:4e:6c:d2:
51:21:b9:af:60:5a:54:ac:34:ca:93:41:85:21:0e:
06:3d:f0:6b:8d:d9:02:82:9c:4b:2e:8f:67:12:45:
06:4e:08:4c:97:8a:e7:25:a4:7e:9f:fc:b2:b2:ac:
b2:7c:36:47:7d:2c:52:09:b7:cb:10:b4:e2:51:f4:
3e:06:90:e9:d9:61:1f:0f:66:dd:80:38:9b:ef:ea:
05:19:61:b6:b4:fa:5f:58:f2:9c:de:15:30:c8:07:
a8:15:cb:88:12:12:45:bd:bb:6c:6c:ab:3e:00:cc:
75:fd:2b:01:8b:f8:f1:d7:d0:ff:52:71:58:3e:3a:
ff:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:38:8A:97:62:40:22:23:35:AC:27:5A:36:FA:26:FC:5F:DE:2B:B4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MziKl2JAIiM1rCdaNvom_F_eK7Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.248.0/21
Signature Algorithm: sha256WithRSAEncryption
91:cd:7a:3f:6d:e9:e8:0a:2c:6a:6c:91:bf:50:1c:9b:4d:7f:
56:ed:81:06:f9:6c:d6:84:f7:70:da:b7:cd:41:37:45:4a:ec:
97:1f:a9:96:2f:46:b8:7b:f6:13:5b:a1:88:fa:6b:47:de:7e:
fe:1e:64:8a:b2:fc:6b:4c:08:64:47:0b:e5:02:a9:7a:26:65:
78:f0:cd:65:61:5c:27:4e:32:af:0a:48:54:05:f8:75:48:e7:
d4:1a:e9:b0:11:14:e4:ea:48:38:5b:44:6b:e8:f7:bc:f2:ab:
9f:27:94:f2:42:a6:04:5e:9d:b9:1f:54:ff:fa:ac:52:9e:8d:
c7:c0:82:7a:26:7c:4b:b5:e3:eb:40:49:e4:f8:46:92:72:fa:
97:ec:b4:3b:71:ac:f4:3f:ec:a4:e4:00:18:7b:82:48:b8:3b:
35:19:ba:79:d8:fd:45:b5:20:ab:72:03:9e:03:97:80:9b:f9:
bc:58:39:f6:ce:36:09:cd:3c:b2:3c:6d:61:ce:a0:3a:1f:34:
d5:78:68:3b:ea:f3:06:a1:eb:10:7c:2e:e8:7a:0d:5e:e7:f8:
2b:bd:0a:6d:52:57:d0:81:ae:57:88:11:8e:e9:f5:86:b4:15:
6c:5d:27:d8:62:f0:2f:8a:ad:29:e2:56:7e:f6:f0:1e:1d:a6:
e1:b1:2c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:24 2025 by rpki-client