Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TWhAJIIjvcmcLoxI-56iSydHDDQ.roa
File: TWhAJIIjvcmcLoxI-56iSydHDDQ.roa (raw, json)
Hash identifier: 0yIZ6sT7zrZHHj4bRTa1TEmS8aJtt/+AqriiN0QJ0S4=
Subject key identifier: 4D:68:40:24:82:23:BD:C9:9C:2E:8C:48:FB:9E:A2:4B:27:47:0C:34
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2AC5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TWhAJIIjvcmcLoxI-56iSydHDDQ.roa
Signing time: Fri 01 Sep 2023 10:08:16 +0000
ROA not before: Fri 01 Sep 2023 10:08:16 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.232.200.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10949 (0x2ac5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:08:16 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=4D6840248223BDC99C2E8C48FB9EA24B27470C34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e8:65:4d:c8:75:69:ea:d6:be:c8:2d:7a:c8:
d9:42:32:27:f1:7f:2d:97:43:4e:e2:3b:40:97:6b:
b4:97:2f:60:e2:be:e5:bb:c4:5e:31:7a:2d:e3:49:
56:76:09:10:53:06:eb:ea:d0:56:41:c0:c2:a3:56:
af:0e:c6:13:96:ce:99:a2:5d:f6:47:e8:4e:d6:3e:
6e:e1:dc:79:2d:06:ae:20:9e:28:71:c8:99:73:d7:
2d:9b:85:07:f3:61:7f:f4:78:ba:25:8f:e0:b6:7b:
a1:c3:53:81:45:de:27:96:6a:d3:5d:13:7c:23:bc:
92:df:1d:79:66:87:03:3d:be:94:7d:47:50:6e:04:
6a:f9:72:48:b0:f0:15:b1:3f:f8:82:75:07:74:64:
bb:48:6c:4d:3c:68:9b:a2:aa:e7:da:a5:28:5c:1c:
14:79:3d:59:24:d2:05:a4:c7:a2:3d:67:56:d9:a3:
17:ec:12:5c:46:a3:cc:75:47:d3:7f:f4:d5:05:22:
fd:c1:c1:9d:bd:ca:86:73:d6:da:2f:34:5a:5e:3a:
22:87:5c:d7:ec:f4:15:bf:14:36:22:79:7f:21:2d:
7c:55:53:81:d1:e3:b5:6c:ea:d7:e8:d2:24:31:19:
0a:c0:30:84:a3:01:c5:fa:bf:33:37:c2:89:89:ba:
64:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:68:40:24:82:23:BD:C9:9C:2E:8C:48:FB:9E:A2:4B:27:47:0C:34
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TWhAJIIjvcmcLoxI-56iSydHDDQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.200.0/21
Signature Algorithm: sha256WithRSAEncryption
9d:ae:fe:cc:a3:cc:87:a8:04:7a:2a:7a:b8:05:bd:6e:b7:06:
99:27:5a:41:79:ed:c6:a2:13:68:bf:3d:ed:11:28:0e:36:88:
1a:b5:a0:ef:87:5c:a1:fa:a4:91:37:f3:1c:ae:e1:6f:dd:36:
58:03:ea:77:6a:f4:79:59:67:02:dc:ff:93:42:31:fa:01:b4:
1a:14:20:7e:92:ff:8c:52:75:e8:ac:b6:5c:2d:01:ba:45:64:
0c:21:7f:e5:da:fe:50:20:e6:6a:94:9f:02:2f:c6:03:30:e1:
a4:52:c0:85:19:59:4e:bf:44:08:fe:38:eb:5f:d5:9a:5e:34:
07:d4:c1:67:46:78:c8:8a:53:3c:f9:91:a7:69:1d:ae:da:f6:
cd:d6:3c:90:b3:57:2f:f1:c4:3c:b0:c4:6f:ef:eb:03:04:de:
fa:a7:6c:d3:be:5a:a7:60:41:b3:c1:b1:60:6d:35:7e:ca:4e:
b5:b6:5e:56:10:b0:c3:9e:b8:1f:61:cc:ae:c8:51:40:47:c8:
fd:86:bb:9c:9b:77:38:ad:f4:d0:4e:0d:6f:bf:97:87:d2:1a:
04:e6:52:f1:e8:8d:9a:00:6c:51:af:56:d9:33:34:49:83:c1:
52:b6:d2:a0:cc:ed:ee:42:d1:e3:61:de:74:1b:0e:c3:61:37:
08:f2:ff:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:23:14 2025 by rpki-client