Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Qx_rADr46-vwRGQ_oUYK3R23p6k.roa
File: Qx_rADr46-vwRGQ_oUYK3R23p6k.roa (raw, json)
Hash identifier: lxGu/M/uNFOKCtGF2TP1FeGhfz2Y87oY6X86btKkl4Q=
Subject key identifier: 43:1F:EB:00:3A:F8:EB:EB:F0:44:64:3F:A1:46:0A:DD:1D:B7:A7:A9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2229
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Qx_rADr46-vwRGQ_oUYK3R23p6k.roa
Signing time: Fri 25 Nov 2022 04:40:51 +0000
ROA not before: Fri 25 Nov 2022 04:40:51 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.109.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8745 (0x2229)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:51 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=431FEB003AF8EBEBF044643FA1460ADD1DB7A7A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b8:c2:c1:a4:fc:69:e3:c9:67:9b:3c:d7:b0:
f7:b6:d6:a4:68:24:6a:49:0a:14:d8:f0:ed:11:2e:
37:3a:0f:7d:3e:fa:38:a4:5c:0c:85:54:0e:1c:c5:
94:91:00:e3:67:d1:c7:07:b9:b6:ae:67:59:da:fe:
4d:b2:7d:08:81:84:5f:a7:62:1a:de:92:5e:42:2b:
73:6a:20:e6:91:c4:6f:a7:ca:6c:b3:5d:1e:bf:2b:
d0:f8:a4:86:51:82:10:fe:97:ba:05:18:b4:ef:0c:
89:6c:11:59:51:9e:79:70:9b:d5:09:90:d2:57:e5:
7a:4b:2b:15:61:81:47:07:fd:a7:f4:2a:62:44:94:
1d:51:d3:04:06:eb:96:ff:4c:90:a3:a4:16:6f:1c:
ee:80:32:f6:c3:fe:c9:88:0d:cd:f7:c3:2d:7c:c4:
77:90:e0:18:a1:5c:ae:77:ef:1e:31:e7:33:8f:c5:
10:12:a0:2d:9e:60:11:c9:64:cb:b3:b2:37:91:4e:
1a:5c:bf:b8:28:0f:fc:a1:59:c4:d1:ad:00:cb:11:
e2:45:6a:55:0f:24:75:5d:2c:35:55:2b:84:70:fb:
89:57:81:5c:d6:ba:25:3a:0f:92:88:33:c4:fc:94:
c1:a0:9c:2a:33:e9:28:ce:74:71:26:bd:91:50:25:
b1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1F:EB:00:3A:F8:EB:EB:F0:44:64:3F:A1:46:0A:DD:1D:B7:A7:A9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Qx_rADr46-vwRGQ_oUYK3R23p6k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.109.0/24
Signature Algorithm: sha256WithRSAEncryption
56:1e:0b:d4:ff:06:a4:11:8e:a0:e0:a8:68:c5:48:4d:27:86:
19:e5:fa:b9:a3:ff:dc:e3:a3:aa:e1:d4:19:c1:8d:bb:14:25:
c5:f8:00:36:c7:05:82:f3:6b:46:4e:4a:33:f4:0e:b7:2d:fb:
4e:2a:bd:3b:f5:77:2d:14:91:9b:7b:d5:90:f0:41:fb:8e:0b:
bf:d6:5f:1e:36:77:b1:ef:bb:0a:73:4e:35:87:5c:67:7f:55:
1e:e4:00:12:e5:ed:43:9d:a6:97:49:67:28:e4:94:ad:03:58:
20:ae:fb:df:23:19:72:f8:c3:1c:89:ed:92:b8:36:5e:5f:32:
90:93:a1:b5:e9:d0:9e:54:b1:89:12:bd:bd:83:80:1e:2f:1f:
b8:d9:8f:c8:d5:52:be:9b:2d:f2:1f:f2:bd:7c:59:77:ae:6e:
43:90:91:20:d4:10:ea:77:52:49:0a:3a:41:f6:59:c6:86:e2:
71:e3:77:b8:bc:0e:21:eb:20:3d:ee:d2:b9:59:a4:ec:c0:5d:
ad:19:3c:55:ec:26:07:14:85:a1:01:bc:6f:f3:19:74:b1:7d:
06:a2:7a:b6:23:d2:25:f5:46:52:9a:14:8c:69:15:e6:fb:22:
55:f7:de:5b:9a:11:58:b5:69:7e:4a:83:67:12:39:a9:ce:9c:
a5:83:12:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:22:32 2025 by rpki-client