Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S5d93D-SdH0o2dC7IwXXXOPYnOo.roa
File: S5d93D-SdH0o2dC7IwXXXOPYnOo.roa (raw, json)
Hash identifier: ueQR5uQ622J0ndQXZY6SHVqhE6TtEj1R+PETgKe5ZH0=
Subject key identifier: 4B:97:7D:DC:3F:92:74:7D:28:D9:D0:BB:23:05:D7:5C:E3:D8:9C:EA
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S5d93D-SdH0o2dC7IwXXXOPYnOo.roa
Signing time: Thu 15 Sep 2022 02:56:07 +0000
ROA not before: Thu 15 Sep 2022 02:56:07 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.196.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8100 (0x1fa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:56:07 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4B977DDC3F92747D28D9D0BB2305D75CE3D89CEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f1:66:fa:da:d4:ed:e8:b7:e2:61:2d:c2:18:
8b:76:b2:13:d0:fc:d6:ea:68:75:a3:b8:06:41:02:
d5:ae:4f:b6:d8:20:4d:5d:d5:dc:0e:78:ca:f9:31:
9e:9c:a1:be:5f:ab:cf:0b:5d:ad:b7:0b:57:fa:8a:
42:14:c7:60:cc:02:47:26:1d:2a:ff:dc:bb:0f:99:
9a:45:6a:35:86:9f:e9:1a:d4:a0:9a:14:53:32:cf:
e2:ff:00:24:dd:ea:e4:52:36:75:f0:3f:c1:79:f3:
07:f3:c3:8c:23:8d:d2:40:d3:d5:64:61:32:64:b3:
fa:d8:aa:34:eb:0c:41:33:11:f6:44:29:2a:eb:18:
ef:26:9b:fc:6c:54:f6:b0:bf:8f:8f:9d:42:c0:6a:
79:18:27:88:f8:e0:db:e4:e0:75:37:1b:32:57:05:
c6:9d:f4:14:4a:38:f0:c9:8d:01:8f:83:57:54:0c:
61:2b:c1:01:3f:99:9d:f2:a4:e1:2c:19:c2:ac:15:
59:bb:13:f7:10:c2:31:2c:a9:ad:ad:67:aa:1c:b9:
fe:ec:5e:1e:5f:34:ec:00:b7:bc:f5:f8:88:14:0c:
98:19:cf:6c:6f:ef:01:17:37:9e:95:80:46:e3:b4:
a2:9d:16:f7:f0:c3:9a:3a:4c:4d:f4:ee:1a:11:a7:
8a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:97:7D:DC:3F:92:74:7D:28:D9:D0:BB:23:05:D7:5C:E3:D8:9C:EA
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S5d93D-SdH0o2dC7IwXXXOPYnOo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.196.0/22
Signature Algorithm: sha256WithRSAEncryption
54:fb:91:11:fa:80:91:ec:a7:9d:ee:cb:8e:09:41:29:c1:97:
17:4d:a2:39:71:dd:99:f8:0d:94:ab:8d:9a:c0:01:73:b6:54:
4e:cf:25:bb:75:f2:26:8e:fb:ef:9d:b1:81:cb:01:75:05:70:
5e:b8:3f:cd:ff:32:85:2b:7d:1b:7a:04:d3:80:07:ac:3c:9f:
69:08:80:e8:e4:b3:92:cb:a0:5e:83:68:6c:d5:d7:e8:a7:56:
a3:30:58:00:46:5f:b1:7e:6f:44:bd:48:fd:4c:c1:d4:c6:c7:
3f:71:38:78:e6:dd:d6:8f:47:af:68:d1:79:00:d5:44:53:b7:
06:bf:90:2b:e3:12:53:a3:e4:1f:ee:e6:e2:1e:87:f5:12:0a:
51:6b:1b:b0:bf:77:ec:0e:a5:1f:fd:18:42:11:a9:7b:8c:63:
a5:cb:63:40:7a:80:d9:a9:25:30:c3:ab:d5:ed:e3:f8:35:08:
23:48:4c:e9:86:3e:18:1d:da:55:63:62:6f:6e:38:85:1e:a4:
b0:60:94:f0:d6:43:3a:e2:31:b1:27:40:78:56:11:0a:d6:cd:
40:56:3a:be:4e:0a:5a:2d:e4:23:39:6f:fb:fe:6d:12:f3:5b:
34:15:5f:86:40:eb:68:86:01:34:10:be:a3:d0:b2:5d:df:c3:
73:d3:63:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:22:47 2025 by rpki-client