Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Tta3gbh3kceT28sYSzVRpJQrXmU.roa
File: Tta3gbh3kceT28sYSzVRpJQrXmU.roa (raw, json)
Hash identifier: 5ZSzX5TZo6aNbXHttiuJeTmMr9ImrAlXdZ9tkYJaYX0=
Subject key identifier: 4E:D6:B7:81:B8:77:91:C7:93:DB:CB:18:4B:35:51:A4:94:2B:5E:65
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1C90
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Tta3gbh3kceT28sYSzVRpJQrXmU.roa
Signing time: Wed 29 Sep 2021 02:47:55 +0000
ROA not before: Wed 29 Sep 2021 02:47:55 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.194.204.96/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7312 (0x1c90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:55 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=4ED6B781B87791C793DBCB184B3551A4942B5E65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a1:c1:71:20:43:7b:1e:7e:e3:25:8a:41:38:
bb:4b:ee:50:40:6b:72:7d:1b:51:a6:13:45:9a:0b:
59:1a:0a:00:07:f1:18:a9:b3:cd:98:9b:c3:c8:4d:
e3:ef:f9:6a:c5:f9:15:32:95:e2:ae:0b:d4:b7:84:
37:af:94:2c:27:7f:e9:72:cd:72:54:b7:90:78:17:
cb:7d:4c:c0:20:3e:b3:de:a2:1a:47:34:16:f4:7a:
49:e6:4a:df:d5:14:e4:99:5c:b8:1b:78:cf:30:8d:
f5:bd:e7:9d:c7:fe:fe:11:c0:fe:35:af:18:ea:b5:
3f:e2:ef:ef:19:15:4c:c2:97:1c:e7:d4:2f:d7:77:
a0:76:85:00:60:4f:31:51:7f:f8:0c:48:9b:b4:31:
10:13:15:9c:4f:6d:b4:64:f3:74:30:5b:b4:98:69:
ef:c3:84:3a:d0:63:69:af:4c:df:a1:21:1d:c7:35:
9d:d2:82:f7:1f:ae:98:5b:aa:cb:d2:f7:df:04:87:
fc:9a:64:bc:1c:57:bf:d3:65:d5:4c:bd:36:a4:da:
08:e6:69:1d:a6:82:ac:08:32:02:03:8a:ac:7f:8e:
c4:3f:d9:4a:80:98:c5:f4:35:2b:72:27:cc:b6:1d:
cb:81:ed:24:0e:19:cc:fc:63:c9:59:7d:24:68:6d:
99:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D6:B7:81:B8:77:91:C7:93:DB:CB:18:4B:35:51:A4:94:2B:5E:65
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Tta3gbh3kceT28sYSzVRpJQrXmU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.204.96/29
Signature Algorithm: sha256WithRSAEncryption
34:d2:de:b3:85:1d:86:4a:c2:dc:e5:e6:07:3f:d2:78:41:d5:
04:5d:da:a8:a0:a6:8e:bf:3f:1e:60:1f:89:97:15:30:33:e6:
4c:2b:82:5e:1c:eb:26:97:4b:99:e8:c7:9c:be:cd:d6:13:6b:
24:3c:b3:46:c3:e9:d9:c8:8c:22:d1:63:4a:da:17:89:87:ee:
ae:0e:e6:c1:13:89:f0:4c:b1:8e:fc:d6:67:46:0e:11:23:f4:
90:17:2e:87:04:6d:8a:5f:02:c0:e8:77:ef:dc:8a:aa:53:63:
fb:da:d1:b7:58:81:5a:c7:d2:88:11:cc:72:d8:17:75:75:69:
4f:74:a9:d2:99:bb:7a:c0:9c:f7:78:20:3f:9e:af:fe:db:6c:
9f:24:07:18:47:2c:91:64:8a:6e:fd:db:a0:3f:3d:ce:5f:a9:
7f:d0:ff:0e:71:f1:12:eb:c0:b1:c9:50:6c:ad:25:6d:cb:fb:
d0:18:3a:b5:46:ae:7b:1e:43:a5:23:f3:95:1e:61:17:c0:e8:
08:57:3d:da:bd:49:36:f2:1d:df:4b:51:43:8d:94:cf:52:ee:
b6:e0:70:04:da:79:2b:39:a7:66:db:57:60:cf:7f:a5:a0:20:
9f:fb:e3:b1:d3:7c:b3:f3:71:a2:22:64:f8:af:8a:2e:d0:74:
46:8a:cf:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:36:21 2025 by rpki-client