Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PFFqFkS_lCWfpa8Uh_FBI3YzPUM.roa
File: PFFqFkS_lCWfpa8Uh_FBI3YzPUM.roa (raw, json)
Hash identifier: gDxZ4XZfCxbpNyA8ojBnkcnH/Vb4SAECMY/Eu4N8P+A=
Subject key identifier: 3C:51:6A:16:44:BF:94:25:9F:A5:AF:14:87:F1:41:23:76:33:3D:43
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1B10
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PFFqFkS_lCWfpa8Uh_FBI3YzPUM.roa
Signing time: Wed 29 Sep 2021 02:46:06 +0000
ROA not before: Wed 29 Sep 2021 02:46:06 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.194.168.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6928 (0x1b10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:06 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=3C516A1644BF94259FA5AF1487F1412376333D43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:98:9f:b1:28:22:ae:27:09:16:a2:16:58:17:
e7:0c:1e:73:16:a6:49:ee:48:bf:d4:13:b4:fe:1a:
a4:bf:83:3a:11:f6:e8:0f:1e:33:f8:67:36:bd:ef:
90:f4:b7:78:d3:c4:5a:1f:b4:5f:d1:53:22:10:51:
58:4c:2a:a4:f9:b0:f0:bf:72:dd:af:70:f6:6d:76:
7b:67:35:ca:f3:a9:04:8c:50:b6:86:08:f4:b1:80:
dc:7d:0d:6b:ee:d1:3a:b7:eb:a4:6a:c6:59:05:e4:
c0:6f:a4:ad:49:67:a6:b7:85:c6:dd:3c:4f:a2:88:
aa:c0:90:84:c6:5d:f7:60:51:1d:7b:0e:6f:11:d0:
92:1a:17:e2:15:b0:e0:cb:3f:b5:fb:b7:d5:55:a1:
b8:3b:ec:24:92:32:e0:11:b0:51:3b:7c:9e:88:2b:
93:a2:68:be:c4:61:1c:9e:cf:da:c8:0f:8b:0f:24:
cf:67:bc:0c:9b:57:31:69:62:ab:6c:ae:c9:82:2b:
76:28:a0:aa:f9:f5:18:4b:a9:cf:e3:bd:d4:6c:89:
68:0c:87:f7:cb:b9:6b:0d:c4:d8:a8:25:13:06:7f:
2c:57:ec:eb:e9:09:0a:8f:b4:a0:a1:a0:b0:af:92:
73:5e:58:40:7c:49:15:67:0d:58:06:5d:b5:43:ca:
43:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:51:6A:16:44:BF:94:25:9F:A5:AF:14:87:F1:41:23:76:33:3D:43
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PFFqFkS_lCWfpa8Uh_FBI3YzPUM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.168.0/22
Signature Algorithm: sha256WithRSAEncryption
92:24:58:59:ef:56:9d:b6:07:4a:20:9d:fc:2c:61:d7:bf:cf:
cd:15:49:c2:d7:57:d9:d5:8d:dd:12:ce:6b:00:7e:ee:63:74:
7c:55:95:b6:c8:53:22:26:e2:53:a5:ed:2b:98:cd:a4:f9:e2:
e4:6e:0d:a4:17:cc:66:dd:79:59:63:9b:14:23:5d:c7:a0:44:
6e:ee:a8:e4:73:6c:6e:48:24:c3:7c:58:5f:09:bf:e6:a2:df:
b4:ab:0c:ef:04:5b:0b:81:df:56:2f:6b:8a:4a:62:eb:80:29:
20:2b:a9:51:23:05:d9:82:85:e8:0e:16:cd:93:e9:9e:dd:4b:
8d:84:d1:2c:ac:44:2c:a5:ca:63:87:c3:d7:6b:96:e8:47:72:
52:ee:97:02:27:32:1a:4b:29:fc:64:27:c5:a2:bc:0c:22:89:
10:c2:71:ea:6b:7e:2d:05:c8:2a:39:17:0e:7c:a5:b1:89:06:
5d:64:7a:79:fe:8b:4d:5e:91:95:e4:47:f1:a1:73:ae:1e:a2:
4f:27:64:e8:3e:b9:fd:7a:48:56:e3:bc:ac:9c:09:27:73:8a:
0a:aa:2d:d5:6f:ba:4b:65:c9:24:4f:80:f6:00:74:11:cf:ae:
d0:84:84:61:83:cb:02:ad:39:5a:56:c4:4c:0c:fd:1a:2b:c7:
04:fb:9b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:17:34 2025 by rpki-client