Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Oc0scdPEhCB0kKYba9uaOEIthMw.roa
File: Oc0scdPEhCB0kKYba9uaOEIthMw.roa (raw, json)
Hash identifier: dyc03bud3DjMWj74uM7PQJsmfrqR8NIY87sNaavum3U=
Subject key identifier: 39:CD:2C:71:D3:C4:84:20:74:90:A6:1B:6B:DB:9A:38:42:2D:84:CC
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2AA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Oc0scdPEhCB0kKYba9uaOEIthMw.roa
Signing time: Fri 01 Sep 2023 10:08:07 +0000
ROA not before: Fri 01 Sep 2023 10:08:07 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.195.148.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10914 (0x2aa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:08:07 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=39CD2C71D3C484207490A61B6BDB9A38422D84CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9f:ed:50:e1:36:16:b1:38:95:9b:ed:2a:56:
67:13:41:12:64:25:4c:7d:96:23:fe:61:a3:37:3e:
46:41:f0:a7:ee:74:a0:e4:6c:47:67:d8:de:f3:3a:
4a:be:32:6f:34:7c:24:3c:07:be:8b:e0:cb:55:b9:
80:c8:ea:e0:0a:7e:55:fb:24:71:d1:d1:6e:86:28:
5d:9f:aa:52:f9:de:1a:b2:be:43:da:24:60:21:e4:
a9:fe:25:38:8f:4b:3b:43:92:52:4d:29:13:19:8f:
7a:b3:64:06:7c:93:e0:81:c9:88:90:be:35:de:90:
a3:10:2a:23:15:c2:36:31:32:36:50:6f:6a:18:c5:
ea:7d:e6:3a:be:74:44:58:6d:2b:bf:59:ad:1f:65:
ae:8f:cf:7d:98:c5:6e:2f:a9:09:e5:22:1b:b2:c6:
00:03:c6:4a:c9:68:f8:10:d8:5d:37:6a:5e:27:ff:
ae:38:25:93:dd:96:fa:2f:26:11:1e:ee:c8:32:04:
0e:61:8a:79:12:64:d0:9d:5e:2b:77:e0:35:c8:b2:
47:5c:81:a0:c9:e4:65:54:60:9b:c4:0a:73:0b:f6:
08:e8:8f:81:89:be:e3:4e:53:ac:d1:fd:30:ee:56:
a7:6d:fc:4d:34:0b:d7:bf:b8:fc:89:f1:37:0d:77:
e7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:CD:2C:71:D3:C4:84:20:74:90:A6:1B:6B:DB:9A:38:42:2D:84:CC
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Oc0scdPEhCB0kKYba9uaOEIthMw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.148.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:11:be:ab:4f:72:7a:38:f2:60:d2:d6:4b:85:0b:cb:b0:1a:
dd:3f:06:cf:40:d1:d5:6d:bb:d0:6a:e2:db:30:ac:92:41:ba:
80:c4:35:05:c1:d2:8a:98:88:af:66:e6:41:04:36:32:01:0c:
f8:4b:c4:44:4f:fa:09:26:0a:20:bb:91:59:01:30:a0:95:a3:
9d:c7:58:b6:b1:1e:7c:d3:73:88:a0:7d:5b:af:7a:57:cb:84:
53:b2:27:18:74:aa:f9:34:f4:e3:56:ce:f7:8e:56:7e:b4:33:
d3:95:43:11:bb:6e:a1:b5:5d:86:1b:66:8d:bc:57:64:db:85:
c1:a9:25:1c:5c:06:65:8d:8a:9d:5e:d1:79:e1:fe:95:4b:4f:
ff:83:a8:1a:83:d7:67:2a:b8:be:3a:e1:56:95:4b:3c:58:60:
ac:5c:fe:2d:60:0a:2f:90:98:57:77:bf:dd:fd:70:31:2e:1e:
e4:c9:30:de:ad:48:fb:8a:d1:e9:88:a0:42:47:9a:8f:eb:f3:
97:5c:bd:4f:59:bf:6c:8c:ab:1d:55:f9:f1:90:71:ee:4a:c2:
df:92:b0:5b:e9:6b:7f:07:a7:71:69:82:89:88:e4:35:19:f8:
21:36:42:3a:5d:4d:9b:19:f9:03:1f:7b:85:0c:5f:b0:83:f6:
fb:8a:33:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:25:54 2025 by rpki-client