Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XDowPZ-6gr2dCj3bWOaIICdGpC4.roa
File: XDowPZ-6gr2dCj3bWOaIICdGpC4.roa (raw, json)
Hash identifier: IEMW4D9aquE0VbJwuQy3TauiWUkiqod2ek6+PlVGyd4=
Subject key identifier: 5C:3A:30:3D:9F:BA:82:BD:9D:0A:3D:DB:58:E6:88:20:27:46:A4:2E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1521
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XDowPZ-6gr2dCj3bWOaIICdGpC4.roa
Signing time: Sun 07 Feb 2021 12:03:02 +0000
ROA not before: Sun 07 Feb 2021 12:03:02 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.193.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5409 (0x1521)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:03:02 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5C3A303D9FBA82BD9D0A3DDB58E688202746A42E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:05:ca:7c:8c:52:83:9b:4e:2f:b7:6a:15:99:
64:71:b4:62:f2:f2:88:bb:e4:69:e8:74:c0:51:0e:
77:82:09:32:b3:2a:58:c1:d3:19:b7:b0:8a:c6:57:
62:1e:72:75:25:50:54:ae:2d:d5:fb:39:26:7b:c6:
1c:f4:b9:38:eb:96:99:55:54:ec:36:6c:48:c9:d9:
fa:73:8a:b6:33:cf:12:77:2b:60:c6:53:0d:83:df:
c8:5e:c0:0b:dd:07:96:9e:0d:d3:09:71:ee:b0:e5:
6c:09:fb:d3:dd:cf:ab:70:54:7d:b9:37:05:9b:9a:
95:e0:8e:ad:f4:85:4c:2c:35:94:a5:1b:c0:1d:08:
74:02:3e:68:c9:58:29:26:14:c9:3d:b4:41:ca:91:
ce:4b:03:5b:8c:99:a8:0b:a9:49:0e:1a:8d:29:d5:
6c:42:1e:78:78:86:84:8e:fb:57:ca:50:d3:00:e5:
a4:79:0a:8f:9d:c4:b5:e3:f7:79:be:30:7c:68:9c:
71:5d:0d:c3:13:8c:86:fb:eb:22:fe:54:02:84:a7:
2e:cf:3f:94:49:ed:ad:54:3f:a4:2f:13:91:c2:d9:
9a:24:10:72:95:23:0d:a7:4b:d3:67:91:83:af:82:
c9:97:d1:f2:32:33:b0:d4:9f:d1:d9:0b:92:d7:2f:
75:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:3A:30:3D:9F:BA:82:BD:9D:0A:3D:DB:58:E6:88:20:27:46:A4:2E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XDowPZ-6gr2dCj3bWOaIICdGpC4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.9.0/24
Signature Algorithm: sha256WithRSAEncryption
15:79:30:0c:9a:81:c9:4b:9f:d7:f0:60:3b:c4:2e:8d:41:e5:
56:80:d0:69:61:68:17:7c:67:cd:28:4e:98:89:2b:24:10:2e:
0f:00:66:6e:39:87:c4:3e:5a:67:b5:5e:ed:98:a8:42:7c:f5:
3a:1a:99:f2:75:c8:40:e2:dd:ae:ad:3a:d3:a8:66:71:e4:ef:
12:46:08:41:c1:f5:49:8f:45:cd:b9:55:a0:d6:08:30:c9:7c:
a4:3c:82:32:76:38:bd:a6:84:be:aa:73:0d:59:fc:0c:4f:74:
3a:9a:ae:12:6f:08:b4:cd:20:d1:79:91:8d:ae:53:3c:d8:d2:
1e:b6:fd:ce:ee:a2:2e:4a:0c:2d:99:7f:4a:08:f5:86:25:38:
d2:07:34:44:40:6d:30:3c:7a:5f:c6:d7:cd:bf:ef:d9:66:a1:
db:ec:62:a4:5a:83:9f:bb:04:84:e2:08:01:3d:75:93:fd:1f:
b4:d2:77:04:01:0e:ff:67:b0:ea:c0:e2:83:e9:79:8f:74:41:
d6:5a:d9:d3:eb:e9:b9:44:ea:3d:84:b9:c0:89:ba:c5:59:1e:
6d:fe:0b:7e:2e:04:6b:22:ce:25:61:ef:13:36:99:45:68:4a:
01:b5:ec:52:a6:91:04:e8:54:f4:c6:f0:69:98:d8:17:75:9b:
d9:b9:97:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:12 2025 by rpki-client