Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XLoZdDbxpBlw3UJOfkkKTuGtnJE.roa
File: XLoZdDbxpBlw3UJOfkkKTuGtnJE.roa (raw, json)
Hash identifier: JLTZkE925abdtj7zdrJ0qC1nxMHasDcW/1eiVud2AGg=
Subject key identifier: 5C:BA:19:74:36:F1:A4:19:70:DD:42:4E:7E:49:0A:4E:E1:AD:9C:91
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1411
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XLoZdDbxpBlw3UJOfkkKTuGtnJE.roa
Signing time: Sun 07 Feb 2021 11:57:17 +0000
ROA not before: Sun 07 Feb 2021 11:57:17 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.193.109.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5137 (0x1411)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:57:17 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=5CBA197436F1A41970DD424E7E490A4EE1AD9C91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c6:d1:b4:7c:63:bf:d3:fa:f1:50:a2:06:21:
fd:ab:29:66:3d:4b:c3:08:20:54:76:30:51:3f:46:
11:36:f4:a2:ca:64:d6:5f:f8:10:0f:88:93:66:a5:
48:b9:af:2e:12:8f:a2:1f:fe:3c:d0:d5:9e:25:ef:
cd:5a:e2:93:f0:8c:53:59:7c:1f:91:69:cd:ea:9f:
9e:4f:74:35:e1:65:37:e5:22:5b:e3:cd:1f:c7:c4:
7f:f9:51:95:d8:cb:1b:8b:ea:9f:7a:2e:85:9d:f8:
1e:8c:2c:5d:92:51:83:f3:4e:88:ed:79:20:b2:ab:
62:22:bb:97:aa:a0:26:9b:a6:43:6b:0c:1d:73:d5:
5b:17:42:8a:07:45:c7:66:8b:43:eb:e0:80:af:5d:
05:cd:0b:64:ba:ff:87:ff:d5:fe:dc:d2:b3:9f:e7:
44:bf:e7:bc:46:06:43:93:1d:64:0c:6d:e3:b9:7e:
1f:12:0d:4c:75:aa:fa:e3:5f:00:a4:56:04:ca:11:
0b:6c:27:a6:c4:e2:98:44:df:6b:d5:26:fa:39:2a:
13:b8:e3:ee:f5:28:7a:a2:76:59:23:1c:59:41:97:
13:93:6a:1c:84:15:0c:11:fc:b8:ab:fb:9b:c9:db:
33:fd:51:76:e1:25:1c:ab:1c:cd:02:e4:09:77:fd:
dc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:BA:19:74:36:F1:A4:19:70:DD:42:4E:7E:49:0A:4E:E1:AD:9C:91
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XLoZdDbxpBlw3UJOfkkKTuGtnJE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.109.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:ce:04:8d:03:f9:12:ce:e9:aa:c7:1d:9d:ac:b4:10:81:31:
1e:53:c3:ef:cb:1e:7b:78:82:59:4a:31:7c:50:5b:32:f6:45:
4b:44:f9:0b:4e:30:24:57:c0:7e:2f:25:5a:27:7f:0c:f5:1e:
54:d2:71:99:4a:3b:b2:b5:07:cf:d1:85:ad:c4:cb:b9:c5:70:
78:c0:f0:89:45:9c:02:25:31:e5:73:b2:d3:a3:04:00:74:71:
33:e3:d3:e9:ad:bd:8d:ec:66:9a:16:0d:e8:0f:f6:40:db:00:
12:fb:57:c3:7d:ac:fe:ee:96:1e:43:64:43:77:6a:8f:fa:0e:
55:56:b0:e7:69:e2:74:11:c7:a0:f5:a3:b7:8d:30:ab:c7:6b:
7c:bb:4f:5c:34:67:53:e4:24:c9:0b:d5:8c:68:0b:10:98:6a:
e1:fb:a2:be:75:18:77:8f:80:a1:d2:9f:73:12:f2:83:4c:e4:
44:70:bc:39:84:1b:a7:21:2b:a3:7e:40:25:3c:58:82:cd:00:
86:f8:46:32:b3:38:f4:d8:6a:57:ee:01:cc:8a:a9:54:72:0c:
20:ff:a5:53:c3:57:dd:8d:a3:82:fa:45:46:93:3e:f8:82:97:
36:4d:50:c0:c3:cf:cc:b3:6d:7c:f1:24:49:05:2f:c7:57:95:
aa:d2:26:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:38:07 2025 by rpki-client