Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QB3yPGNxiobjpCpZOu4f2Z072UI.roa
File: QB3yPGNxiobjpCpZOu4f2Z072UI.roa (raw, json)
Hash identifier: i16h9HOvEv0nzrWKdnW0AqzG1GeLD0l1PeB6JBXMDF0=
Subject key identifier: 40:1D:F2:3C:63:71:8A:86:E3:A4:2A:59:3A:EE:1F:D9:9D:3B:D9:42
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2861
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QB3yPGNxiobjpCpZOu4f2Z072UI.roa
Signing time: Fri 01 Sep 2023 10:05:16 +0000
ROA not before: Fri 01 Sep 2023 10:05:16 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.192.88.0/21 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10337 (0x2861)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:16 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=401DF23C63718A86E3A42A593AEE1FD99D3BD942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f2:e1:12:fb:0f:db:77:3b:0e:d2:a7:62:7c:
c3:38:93:35:54:12:67:72:38:7a:d1:67:bd:f8:f4:
47:1a:8c:d9:89:bb:cc:8e:13:8d:f9:f0:e7:bf:63:
63:35:fc:ef:71:4e:2f:c7:18:7d:89:39:b5:fb:eb:
a8:b2:49:d5:9c:c7:39:e9:8e:3c:03:31:7f:71:86:
93:a4:b6:5b:b9:01:80:99:6e:5b:a4:1a:e2:4e:ee:
bf:32:c9:72:8b:3e:e9:29:07:8e:db:3b:c3:5e:ce:
d7:d8:5f:24:b0:70:3f:84:b9:3d:a6:3c:3a:5a:c9:
29:a5:ec:20:31:68:a6:ff:82:41:5b:9c:3e:3c:84:
d4:98:3d:83:57:0f:9c:5a:8d:5e:fe:96:4f:66:cf:
73:42:2b:b4:6f:aa:19:47:de:32:a8:8c:e9:a8:e3:
f4:a0:1d:8b:c4:c1:07:f3:5f:cb:73:2d:99:77:36:
ec:e8:7c:aa:7e:fc:6b:30:f4:06:7c:71:47:73:4a:
92:dd:36:6b:12:f6:99:c1:83:19:da:9b:62:f1:86:
f7:b1:c4:99:62:72:73:21:ba:f5:b0:f3:48:28:27:
78:e3:52:1f:12:0f:58:34:d5:fd:75:7c:c7:b1:4d:
0e:ea:cb:14:fb:39:39:30:16:5f:5e:1c:70:11:f8:
24:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1D:F2:3C:63:71:8A:86:E3:A4:2A:59:3A:EE:1F:D9:9D:3B:D9:42
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QB3yPGNxiobjpCpZOu4f2Z072UI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.88.0/21
Signature Algorithm: sha256WithRSAEncryption
09:7b:d1:c3:28:89:e1:df:c7:8f:d1:27:59:7c:7d:37:a5:d7:
27:71:34:44:90:e5:38:70:d0:59:04:3a:72:08:f2:7b:aa:f6:
95:f6:ad:d3:50:66:27:28:03:6b:1b:55:f8:47:fc:94:cb:ee:
9d:4c:d0:40:8f:48:2e:8a:cd:38:9a:48:83:37:99:07:5b:8f:
d4:ac:86:3d:a7:d4:9a:dd:85:3b:23:c9:a5:a8:4f:9e:da:7e:
e0:c5:bb:9e:db:6a:b5:ba:25:9b:19:25:e7:e0:7d:d9:71:1f:
6f:25:01:0a:1f:1e:1c:34:70:2b:04:81:10:a6:e3:0d:5f:65:
45:51:37:0a:03:47:68:2a:30:ed:10:11:7a:ca:15:1d:88:5a:
53:7a:55:a7:63:57:f4:b5:2b:e0:d8:80:01:39:49:88:15:58:
27:bd:ff:3d:fd:b7:1b:78:70:41:5a:ad:f9:47:4c:95:14:0b:
a8:90:bd:f1:37:d9:8e:a2:28:89:30:28:a5:d9:76:61:2d:ff:
38:5f:0e:6f:fd:69:85:23:fc:77:dc:9c:8a:ac:cd:15:ab:10:
0d:6c:29:6f:96:c5:00:d0:96:54:4c:cd:34:4f:62:6c:28:bf:
87:f6:b3:83:0d:93:24:e8:41:13:e3:51:6b:56:1f:2e:55:18:
f3:ff:04:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:28:31 2025 by rpki-client