Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VfBr0DL7tFE0uHBfTm_0wD9300I.roa
File: VfBr0DL7tFE0uHBfTm_0wD9300I.roa (raw, json)
Hash identifier: 1bDyn9PFbnvv/erhfdShGsPgZUxGZtjFFTpABA3pAa4=
Subject key identifier: 55:F0:6B:D0:32:FB:B4:51:34:B8:70:5F:4E:6F:F4:C0:3F:77:D3:42
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A09
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VfBr0DL7tFE0uHBfTm_0wD9300I.roa
Signing time: Fri 01 Sep 2023 10:07:24 +0000
ROA not before: Fri 01 Sep 2023 10:07:24 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.195.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10761 (0x2a09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:24 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=55F06BD032FBB45134B8705F4E6FF4C03F77D342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:55:e3:04:6f:30:8c:ee:d2:0b:74:d4:5c:da:
ff:71:99:67:2e:0b:4c:b9:56:0d:f7:26:63:10:66:
c1:67:fc:99:02:3a:95:cd:68:04:6f:a5:f6:8b:23:
af:8c:e8:5d:6a:4d:94:89:27:0e:5c:6f:11:bd:27:
7e:e1:db:a4:02:7c:7e:e2:35:0a:4c:90:c5:a1:f9:
0c:ad:e9:09:a3:17:c4:8e:8f:06:8f:e4:1e:8c:33:
7b:f9:35:7d:5f:bf:63:76:0f:a8:a4:68:63:12:af:
3e:99:f7:86:9c:84:83:4c:28:75:2d:eb:be:a8:ea:
f7:07:33:f4:35:ca:bb:89:54:37:0e:99:61:f0:96:
3a:81:95:b0:32:77:9b:8c:a4:72:79:0b:5e:7d:44:
a2:5e:3c:cd:23:01:5b:b6:9e:78:4f:56:a7:cb:2d:
2a:fd:6a:94:17:ef:50:b3:06:5b:80:45:ab:4d:4a:
ce:87:89:2c:b0:bc:2a:c3:34:20:f7:22:15:5d:2e:
99:72:90:6d:3c:c9:0b:d7:4a:65:e4:a3:2e:6a:a8:
ec:ea:29:4e:20:cd:87:c2:4c:22:8e:bb:d3:9f:c2:
c3:3a:55:fb:fd:b8:f9:da:b6:7f:72:14:1a:c5:50:
a7:54:ef:f9:2e:c9:c4:e1:21:3a:3d:38:6c:0a:cf:
e7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F0:6B:D0:32:FB:B4:51:34:B8:70:5F:4E:6F:F4:C0:3F:77:D3:42
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VfBr0DL7tFE0uHBfTm_0wD9300I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.237.0/24
Signature Algorithm: sha256WithRSAEncryption
47:95:2c:28:3c:2d:a0:07:bf:9c:18:52:30:f3:09:6c:89:0e:
bb:a7:6a:9e:d6:c7:54:8d:ca:5d:df:5e:c5:03:80:de:4f:55:
38:d3:e9:e6:35:f6:83:a8:1e:f7:68:01:31:56:e7:2d:77:c6:
b3:29:33:61:59:79:c4:dc:73:f8:3a:df:a2:9b:c8:fe:4e:fe:
6f:3e:3a:49:b8:57:d9:d4:42:b5:0e:87:1f:48:e6:65:fb:c1:
7b:8f:0e:a3:9b:f4:fe:35:4c:1a:21:57:65:70:c6:27:5b:44:
e8:94:61:17:71:97:7d:f8:cb:d2:ec:fa:73:01:ed:0b:38:50:
31:4d:0b:b2:fe:0b:6c:55:25:c8:99:5d:dc:03:e5:1a:e3:21:
3f:ba:58:59:82:0d:e6:92:02:93:f1:21:17:ef:68:6b:1f:e0:
52:bc:87:7d:0e:bf:18:fe:9d:57:4f:5a:3a:ea:07:7a:96:62:
c4:82:4a:ad:1d:40:f3:c3:f8:13:51:ad:f3:c4:20:40:84:ea:
5f:80:50:be:46:cb:90:24:2f:85:86:29:db:a0:2b:65:a3:4f:
3d:d1:a9:97:4e:5a:f5:e3:91:15:83:82:f2:bb:a8:80:a2:e1:
5d:76:0d:8f:3a:3b:7f:39:7a:4e:f6:39:b4:37:0d:6f:32:62:
1a:96:25:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:30:43 2025 by rpki-client