Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NA2V8CBTNOwvKIYFc_2An8Xlopc.roa
File: NA2V8CBTNOwvKIYFc_2An8Xlopc.roa (raw, json)
Hash identifier: knXZ3WJqaK7fjmNYqI3RSmnE0oh8cMOEk40yvMkAw/k=
Subject key identifier: 34:0D:95:F0:20:53:34:EC:2F:28:86:05:73:FD:80:9F:C5:E5:A2:97
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NA2V8CBTNOwvKIYFc_2An8Xlopc.roa
Signing time: Thu 15 Sep 2022 02:53:44 +0000
ROA not before: Thu 15 Sep 2022 02:53:44 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 123.195.236.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:44 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=340D95F0205334EC2F28860573FD809FC5E5A297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a3:b3:78:c5:0d:f8:0d:04:60:6d:87:1e:03:
fa:71:bc:2c:2b:74:e1:36:47:fa:48:c5:47:a3:6c:
f3:84:0a:a4:3c:e7:2b:78:da:c1:b8:6e:48:83:80:
2d:c6:6c:9d:7c:0c:48:5d:59:a1:75:2b:3b:3f:64:
11:53:41:84:57:5d:23:bd:72:96:59:14:4a:9f:b5:
31:53:c0:fa:49:6b:11:95:6f:d2:e3:2f:3a:f4:4b:
2e:65:a0:a9:92:a2:a2:1c:ed:f2:1a:6d:4a:ea:24:
ea:de:e2:07:7f:03:ea:92:a6:66:48:b6:c4:23:45:
e6:ab:03:a9:ee:66:a0:80:0a:2c:7a:5c:a2:3b:09:
7d:ff:30:95:ed:5f:d3:a3:95:00:89:20:5d:64:90:
99:96:a2:94:a0:27:b7:ce:9a:01:b3:bb:14:5c:9e:
5e:8e:7d:f1:fa:04:5b:19:a9:71:e9:9f:fc:ff:01:
60:4b:4d:d2:d9:4a:00:93:18:cf:db:9a:f3:0f:d6:
17:a2:7b:cf:7e:f7:1a:cb:04:bf:dd:24:b1:e1:1c:
89:bb:c5:66:44:75:1f:68:96:ab:5b:e2:e5:cc:89:
0a:33:84:80:de:84:fd:47:4a:f9:bf:96:a3:71:c8:
1b:85:0b:ad:17:46:85:e3:b1:0e:63:e3:ba:d8:a3:
dd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0D:95:F0:20:53:34:EC:2F:28:86:05:73:FD:80:9F:C5:E5:A2:97
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NA2V8CBTNOwvKIYFc_2An8Xlopc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.236.0/24
Signature Algorithm: sha256WithRSAEncryption
03:b0:f4:ea:74:03:48:c9:3f:e2:fa:5f:a7:c6:40:d7:6f:4d:
b1:f9:81:ff:4a:dc:06:b5:8e:16:97:18:98:a7:10:a5:dd:af:
65:61:c8:55:fa:59:49:65:75:62:6e:58:1b:bc:75:87:e5:4b:
f6:11:d2:48:c7:00:6f:6c:91:f7:87:f7:fc:bd:f4:91:93:58:
69:22:63:e8:49:3f:b8:d4:5d:71:4d:69:66:42:69:64:ed:72:
35:f5:18:53:8f:6d:b2:68:45:78:e5:72:49:cf:b7:eb:e6:9c:
f6:aa:9c:06:3f:46:c3:5b:c9:17:ee:7f:d9:01:31:9c:0d:ab:
26:f6:06:b1:8f:f4:f2:f6:74:82:a5:05:37:4f:68:2e:ad:e6:
9e:7d:61:37:b4:9f:cd:41:6e:fe:49:1a:6a:a2:0d:80:3b:36:
0a:d8:78:30:14:77:c9:f1:50:54:3a:f3:ec:43:6f:e1:16:cb:
4b:76:c3:87:b5:3f:9d:61:59:b4:1e:18:4c:b7:13:ec:33:02:
2c:ec:d3:14:71:7a:2f:d0:ce:77:ce:6a:38:bb:a6:49:9e:7a:
98:8b:c6:d0:45:c3:18:84:5e:ab:6e:e8:da:f7:98:d4:cd:3c:
0d:b0:bf:02:b4:55:31:a4:02:be:0d:d2:05:14:2a:77:df:57:
a8:ee:54:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:22:25 2025 by rpki-client