Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SNrZfekeSH4olIXmzJVz1ih5MnU.roa
File: SNrZfekeSH4olIXmzJVz1ih5MnU.roa (raw, json)
Hash identifier: DbnR1KTzcFt3sKCRMqRwiH3Bt1dwCD1xwULJzSg4iZg=
Subject key identifier: 48:DA:D9:7D:E9:1E:48:7E:28:94:85:E6:CC:95:73:D6:28:79:32:75
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 16FF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SNrZfekeSH4olIXmzJVz1ih5MnU.roa
Signing time: Sun 07 Feb 2021 12:15:53 +0000
ROA not before: Sun 07 Feb 2021 12:15:53 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.232.80.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5887 (0x16ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:15:53 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=48DAD97DE91E487E289485E6CC9573D628793275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4c:b8:e4:3a:81:cc:6d:0d:d4:4d:fe:01:45:
03:ce:6f:13:6f:5e:ba:63:c6:66:b2:0c:f2:c3:2b:
f1:f8:8c:db:86:10:6c:6b:ef:fc:bd:09:49:88:55:
83:cd:8e:ae:29:b8:6e:a3:42:65:70:b7:50:3b:f4:
1a:d2:28:2d:0f:15:58:02:2f:91:8a:8c:26:63:03:
f5:d5:0b:06:f0:52:06:7f:4d:f0:9c:a8:f3:bb:3a:
14:e9:d4:87:1d:c7:bb:e2:14:b4:d4:77:d3:79:8b:
54:b8:96:75:98:d0:3e:c9:25:c2:6b:6a:05:c1:e3:
f2:68:89:5d:88:47:fd:fb:60:c8:29:ed:ea:42:26:
fe:60:7a:38:d3:b4:11:70:12:d0:96:e4:bf:77:fd:
b8:39:de:8f:1c:95:7a:8e:41:55:7d:f9:00:7c:6e:
1b:1e:82:e8:88:00:7d:1c:f8:66:a8:68:70:c0:d5:
62:e2:51:31:22:4c:56:6c:b6:83:92:27:8f:98:96:
1a:fe:2f:fb:f3:fb:69:df:a9:16:b5:a7:a0:64:f9:
e5:99:00:aa:03:20:92:b2:f5:0f:86:3f:1b:5f:e2:
c3:52:1e:41:bf:0d:21:f8:79:a0:38:26:de:15:04:
67:02:e9:64:14:73:d8:aa:4c:6a:7d:47:a3:09:f1:
26:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:DA:D9:7D:E9:1E:48:7E:28:94:85:E6:CC:95:73:D6:28:79:32:75
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SNrZfekeSH4olIXmzJVz1ih5MnU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.80.0/21
Signature Algorithm: sha256WithRSAEncryption
4b:b0:52:29:37:29:55:81:cd:32:07:1f:6f:f7:72:eb:09:7e:
2b:0f:68:92:e8:2c:9d:e9:0e:3a:5e:93:b7:10:39:5d:3a:53:
ae:4c:19:00:6b:49:d9:8c:c8:ed:c5:8a:01:6e:d0:a1:d7:cf:
1d:0a:82:21:fe:ee:5a:93:d1:11:12:8c:f5:00:46:ef:05:14:
37:94:9f:95:8d:fb:0f:2c:07:1f:42:0f:ef:b7:4f:7f:7d:c4:
9a:c3:dc:31:50:2c:55:1f:f3:d6:d4:d8:a5:43:67:75:ee:3b:
ab:80:9d:f2:69:91:20:8f:04:e6:6c:54:65:84:89:66:15:4a:
a2:25:41:9b:46:ff:ef:c9:44:32:f6:56:bc:7b:9c:5a:1f:d2:
d5:6d:79:be:a4:41:bf:68:6d:7d:01:86:9f:23:f4:b0:42:7e:
74:2f:7c:b1:10:58:16:a9:bd:40:c6:fa:d9:28:7c:59:2f:ef:
c2:1b:49:eb:03:9e:40:0b:a3:be:f7:b3:32:a2:b5:a1:d0:f8:
b8:b4:e7:8b:cc:a1:fd:79:49:90:86:b4:72:58:af:9e:bd:bd:
5f:fd:87:eb:c0:8a:b5:39:a8:d1:1a:77:1e:05:2c:82:83:b4:
89:92:f6:64:04:ba:12:0a:c6:dc:b1:a1:e0:92:c2:d9:cb:8c:
37:05:d3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:16:04 2025 by rpki-client