Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NzSctq8eGcm2ey4zyU3OW0-WVxQ.roa
File: NzSctq8eGcm2ey4zyU3OW0-WVxQ.roa (raw, json)
Hash identifier: zhXVpmMnitWnysDxKZmpoekH2jxz8UMyXeMCWe3pSSg=
Subject key identifier: 37:34:9C:B6:AF:1E:19:C9:B6:7B:2E:33:C9:4D:CE:5B:4F:96:57:14
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 294D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NzSctq8eGcm2ey4zyU3OW0-WVxQ.roa
Signing time: Fri 01 Sep 2023 10:06:22 +0000
ROA not before: Fri 01 Sep 2023 10:06:22 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.193.132.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10573 (0x294d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:22 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=37349CB6AF1E19C9B67B2E33C94DCE5B4F965714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:14:55:c7:e7:db:7c:e3:ec:c0:7a:91:ff:29:
c1:2a:a7:dc:db:c6:d7:70:90:cc:00:f5:ff:b5:c9:
06:c7:3e:d7:e8:b1:7d:72:be:e4:e0:60:90:4c:0a:
08:8b:40:39:52:1c:6a:fb:0d:38:bd:a9:aa:f5:d0:
08:ea:b7:0b:c4:a1:bf:fb:0e:5a:29:ae:f1:39:f8:
03:66:ba:5d:7f:e6:95:d1:71:a0:05:9f:a9:b7:a4:
b6:8e:60:22:b7:8d:cd:f3:77:2d:d8:e5:a9:6c:22:
35:c1:cb:7b:3e:2c:f2:e8:8a:5c:e5:64:ff:f3:f4:
40:1a:1a:d2:be:a6:0c:ae:a6:5a:bc:a4:d1:c2:73:
92:3b:e9:5f:74:9d:de:98:21:81:9c:e8:21:1a:49:
03:db:cc:5a:96:9b:4d:2a:10:15:a3:15:38:1d:86:
a9:bb:de:63:6a:23:85:ba:71:d7:2f:b8:eb:2f:b8:
1b:f3:e6:83:32:dc:3c:78:7a:a1:d2:27:21:da:c4:
27:a4:6a:a8:51:49:c6:56:85:3f:bb:bd:40:80:f2:
59:4c:0f:42:dc:02:aa:51:f3:1d:bd:ed:9c:d6:85:
a0:30:76:0c:49:aa:3d:ec:90:19:1e:7b:a7:4a:72:
f6:3a:f5:c9:13:b9:03:0c:e3:45:cc:d2:e8:a5:dd:
31:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:34:9C:B6:AF:1E:19:C9:B6:7B:2E:33:C9:4D:CE:5B:4F:96:57:14
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NzSctq8eGcm2ey4zyU3OW0-WVxQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.132.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:10:30:e2:db:40:5e:06:6a:b1:41:bd:92:6e:0a:f8:6e:ac:
99:55:81:f4:91:5d:d4:af:67:f7:d8:89:15:1f:91:5a:24:b4:
87:e1:6f:5f:6a:d2:8d:83:0c:a8:50:1b:ad:cb:04:cf:4f:5f:
bb:e5:d1:46:39:d5:2f:8b:84:30:df:fa:2e:2d:64:ee:bf:e0:
13:26:88:01:84:f5:c0:58:33:0d:37:82:2f:15:40:7b:59:74:
32:b8:01:eb:db:82:13:5a:47:04:b4:fe:0f:fe:b3:b3:a0:e0:
db:8e:9d:0c:c3:5a:1a:87:62:9c:1c:5a:ab:01:a9:2d:ef:17:
1e:06:05:ed:a2:2b:95:1a:0c:fa:c7:28:2f:12:8c:b2:f2:22:
3c:81:a6:76:e3:73:0f:ff:1b:52:8a:cd:6c:55:0a:5e:e6:d7:
4f:17:d2:66:69:e2:25:25:8f:4c:e5:46:c9:94:82:e2:1e:9a:
e8:64:b1:1e:a6:8e:a4:3d:f6:38:7f:32:6e:40:00:f9:53:cb:
21:3e:a5:4d:b3:93:ed:ce:9c:bb:5f:9c:a4:61:e4:16:2c:1c:
62:b2:d2:37:a3:c7:c1:9f:9c:85:1c:85:35:15:72:11:1a:ac:
ad:dd:95:7d:8b:43:ca:aa:4f:eb:62:21:5f:c3:48:68:96:b4:
f8:ab:3e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:34:12 2025 by rpki-client