Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PtP1HbprvGgn2q7mAWlFrXcAnao.roa
File: PtP1HbprvGgn2q7mAWlFrXcAnao.roa (raw, json)
Hash identifier: bG6OuyBv8EGNrxRU1B8fPu+GH8nVAp1oSLZqkbSkvFo=
Subject key identifier: 3E:D3:F5:1D:BA:6B:BC:68:27:DA:AE:E6:01:69:45:AD:77:00:9D:AA
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1B8F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PtP1HbprvGgn2q7mAWlFrXcAnao.roa
Signing time: Wed 29 Sep 2021 02:46:45 +0000
ROA not before: Wed 29 Sep 2021 02:46:45 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.194.92.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7055 (0x1b8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:45 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=3ED3F51DBA6BBC6827DAAEE6016945AD77009DAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:6e:d3:a2:fa:51:59:64:7c:c7:43:88:13:26:
9e:ea:4b:6a:31:db:95:d4:f2:91:ea:fa:07:9d:29:
df:d3:40:ac:73:65:32:de:2e:3c:50:23:0d:d2:c7:
e9:11:f3:ad:4b:97:09:2f:f8:2f:90:88:d1:85:77:
2a:5e:8d:19:50:df:28:45:1c:c7:6c:d0:b0:33:19:
9a:a1:3d:5d:92:fe:ca:a0:20:ef:a4:b4:1d:90:bb:
87:87:a5:e5:1e:71:67:04:6f:4e:c6:b7:09:ee:1f:
15:f4:1a:1c:a3:51:d5:42:49:5e:f7:aa:87:fc:5d:
21:b2:2d:03:af:c7:44:36:75:04:f0:6f:4e:01:ed:
81:48:7c:f4:56:8f:eb:cf:a8:5e:4b:2b:4c:5d:a2:
82:0c:6f:37:c9:bb:26:f4:1f:e1:78:5a:ee:48:1f:
b7:4e:2b:dd:3d:93:4a:c4:7d:26:95:fc:e7:96:9a:
69:4c:5b:46:49:d8:a3:59:d8:41:29:96:ad:f5:1e:
6b:1d:7b:ac:07:5d:f2:1d:ca:bd:f3:0d:03:c9:2d:
fa:3e:da:c2:d8:7a:78:d8:ca:73:23:30:9f:2d:54:
ff:78:0b:25:64:31:13:6a:19:73:26:f6:01:64:d1:
dd:d4:7d:2f:80:c6:62:be:f2:90:a4:05:ad:f7:b0:
ea:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D3:F5:1D:BA:6B:BC:68:27:DA:AE:E6:01:69:45:AD:77:00:9D:AA
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PtP1HbprvGgn2q7mAWlFrXcAnao.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.92.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:bc:56:bc:01:75:88:79:86:9c:0f:8a:72:c6:b5:b2:bd:61:
e4:a4:66:9e:dc:5a:d2:c7:df:e9:cd:9b:3d:80:fe:b1:e6:3b:
df:6a:ec:66:cf:1b:16:6d:9c:fe:73:df:b0:16:4c:16:5c:3c:
d5:95:9b:e7:c1:ad:b2:40:3f:65:73:97:43:e9:8a:6b:5b:66:
89:3a:f0:d7:13:b7:9b:43:d2:35:3d:91:81:b2:ba:7f:b2:25:
15:f2:67:66:29:2b:ba:c5:89:ac:24:58:53:02:7e:75:e9:3e:
0d:1f:01:a5:90:e9:8b:3f:7c:b2:c7:ef:21:38:21:75:f3:eb:
a4:6e:dc:cb:f4:6a:d9:ab:12:20:e6:1f:5e:c3:e4:f7:36:45:
e1:39:a7:b8:22:98:75:5a:ef:b6:5d:f8:3f:67:03:1b:58:ec:
61:c0:3b:e0:f4:75:47:ed:2e:e9:49:24:70:5b:20:95:65:f0:
38:7e:51:3b:06:c2:e9:bf:f3:1f:45:36:34:3b:1b:b0:57:19:
17:1d:55:d3:60:5f:8b:38:99:76:63:99:1c:a3:4b:63:4e:68:
1e:a4:0d:e6:8b:03:aa:0c:04:a3:00:9b:39:05:c5:e5:51:4a:
62:ca:21:07:92:ef:21:ec:51:70:68:a2:e2:23:ce:9b:75:bc:
a0:45:8c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:12:03 2025 by rpki-client