Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ShDpr3yeXyYbIXh1XdkIe3mH3WE.roa
File: ShDpr3yeXyYbIXh1XdkIe3mH3WE.roa (raw, json)
Hash identifier: 0CYKQVgsJof33wz+WXZQMsSARWUOuctrzqbWHpk+XoM=
Subject key identifier: 4A:10:E9:AF:7C:9E:5F:26:1B:21:78:75:5D:D9:08:7B:79:87:DD:61
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 146F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ShDpr3yeXyYbIXh1XdkIe3mH3WE.roa
Signing time: Sun 07 Feb 2021 11:58:38 +0000
ROA not before: Sun 07 Feb 2021 11:58:38 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.148.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5231 (0x146f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:58:38 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4A10E9AF7C9E5F261B2178755DD9087B7987DD61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a8:a8:4b:fe:2f:b3:03:74:ed:57:21:6c:bf:
6e:9d:99:aa:3f:a0:4b:79:88:32:90:a0:a9:83:18:
4e:74:2a:ed:bf:20:9e:4e:02:a3:f3:8d:db:9a:1c:
f1:db:f4:7e:81:97:0e:1f:1f:5e:c4:af:ed:63:18:
41:3e:4c:36:68:07:89:b5:76:e7:1e:3c:e4:cb:5b:
35:d8:8c:9f:74:11:56:d4:81:2e:43:b0:f5:46:70:
72:8f:8a:ea:6f:57:84:95:e4:ed:57:4d:80:7f:ab:
5e:2b:c9:50:b8:aa:a2:52:09:32:b5:fc:f6:08:de:
e5:eb:8f:6e:de:b7:0b:1a:83:de:05:b0:b6:87:18:
44:e1:57:fb:92:a1:a2:e3:9e:ab:8e:d1:f1:22:35:
f4:ff:fa:42:00:fe:57:0c:1b:fb:78:03:94:cb:d6:
3d:d7:5a:81:95:a4:5e:99:92:a8:8c:b4:a1:26:77:
fe:66:b0:07:c3:cc:31:af:93:52:94:de:5a:47:90:
1b:47:61:7e:14:49:9f:ef:4d:c8:f0:bb:c4:81:73:
fd:f1:f8:54:c6:9f:ab:b2:fa:bb:00:b3:15:fd:fd:
17:40:69:7c:ce:9b:a7:ae:ed:78:e4:a5:47:27:7e:
d2:a9:3e:da:ec:a8:cf:7a:ad:ce:e2:7b:08:0a:c8:
c6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:10:E9:AF:7C:9E:5F:26:1B:21:78:75:5D:D9:08:7B:79:87:DD:61
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ShDpr3yeXyYbIXh1XdkIe3mH3WE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.148.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:74:7b:5a:72:6d:2b:d6:21:fe:6b:98:0e:39:fa:b0:da:d8:
13:d1:eb:9e:ec:6c:fd:e5:71:ab:95:16:9b:b3:cc:8e:f5:de:
04:92:51:f9:66:7d:57:bc:34:b8:53:32:ec:6e:3d:d6:dc:21:
bd:f1:a3:e5:f5:f8:a4:63:b6:74:07:1c:c2:72:5a:5f:a7:37:
d7:24:85:18:81:39:62:97:22:00:d7:b7:86:c1:a1:9b:b0:3b:
a8:f0:af:c5:e6:92:87:70:d7:17:3e:c3:97:fe:6a:65:b1:c1:
5d:ec:d7:20:0f:34:c0:91:c7:f2:09:06:ae:8c:0d:05:61:20:
cf:45:fc:94:a6:75:bf:95:84:6f:57:9c:a7:ad:a9:ad:1e:20:
73:53:04:7f:08:ed:27:cf:50:ff:ed:21:85:2d:6f:a2:6a:2e:
e0:4b:6b:5c:31:43:6f:a2:69:b9:13:49:76:64:2d:58:88:14:
fb:92:46:7d:6f:b9:74:ef:3f:2a:e8:4c:e6:19:30:4b:9b:cb:
1b:1e:12:5a:8b:87:1b:c0:54:68:35:aa:af:d9:33:d8:f1:9b:
36:ac:53:79:2b:c8:b0:b8:dd:0d:56:3f:44:f0:d0:82:65:2c:
f3:d2:36:e5:ec:50:74:a6:72:de:96:7d:24:43:85:e0:5b:49:
29:76:5b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:35:15 2025 by rpki-client