Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_HyVZsl9rh0DE1XyMdG4VHwuDmE.roa
File: _HyVZsl9rh0DE1XyMdG4VHwuDmE.roa (raw, json)
Hash identifier: q3UhdA6upI7sVG0gvuT9aDzjlHjR3ACAlFGyU+KqTRg=
Subject key identifier: FC:7C:95:66:C9:7D:AE:1D:03:13:55:F2:31:D1:B8:54:7C:2E:0E:61
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0D6E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_HyVZsl9rh0DE1XyMdG4VHwuDmE.roa
Signing time: Tue 29 Sep 2020 09:54:33 +0000
ROA not before: Tue 29 Sep 2020 09:54:33 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 118.232.32.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3438 (0xd6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:33 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=FC7C9566C97DAE1D031355F231D1B8547C2E0E61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:22:98:c1:30:c7:21:88:bf:59:99:bb:37:17:
c7:73:17:df:1e:3c:04:8f:cf:1d:bf:1b:4a:13:f2:
81:67:d7:e4:f8:78:a4:39:0b:a4:3c:16:8d:10:cb:
39:b7:c2:f9:a7:7f:58:40:71:d5:f0:48:f4:78:e4:
9b:a5:e2:dc:9c:53:3a:fc:dd:c3:c0:39:77:e8:a0:
e3:5c:0c:83:87:34:f6:80:18:31:ce:03:b3:1b:ec:
1c:06:b9:e4:79:a5:86:ef:1e:4a:f2:5a:39:ce:31:
ca:e9:8e:22:ef:f2:f8:bb:f7:14:d4:05:cd:3a:32:
d7:cf:f6:90:d7:55:87:af:55:3e:bf:35:1a:36:b3:
4b:e3:58:b3:65:91:c5:20:d9:14:fa:68:95:fa:9b:
7f:85:69:83:e4:61:ca:15:91:fb:2c:8c:6f:2e:f9:
5b:60:fd:fe:c4:2a:d8:b0:66:a9:ae:30:12:47:ac:
38:12:03:5b:8e:24:e4:c1:15:08:84:f3:cd:64:13:
6d:4c:0b:f0:ad:6f:49:13:52:4f:f1:be:02:f6:94:
f8:b9:81:8c:9b:3a:0b:73:f0:08:72:f9:68:12:d8:
cb:49:3c:bf:4f:27:77:75:de:06:b7:19:3f:10:74:
3d:88:21:ce:96:d5:a0:47:cb:8c:b2:b0:f1:b8:8a:
1c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:7C:95:66:C9:7D:AE:1D:03:13:55:F2:31:D1:B8:54:7C:2E:0E:61
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_HyVZsl9rh0DE1XyMdG4VHwuDmE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.32.0/19
Signature Algorithm: sha256WithRSAEncryption
36:e7:7d:e4:70:43:02:16:20:da:34:83:3c:d4:92:8e:3d:ee:
27:05:5f:ed:a8:65:a4:58:a7:af:f1:22:fc:30:70:30:82:03:
c9:43:a3:51:5a:92:74:dd:eb:a5:a9:e1:de:a1:60:2e:ef:c9:
96:af:1d:7f:61:7d:a3:90:1d:72:2d:bd:e3:92:b8:ea:ce:15:
e5:2e:04:2f:a2:e7:cf:ae:58:ca:4c:42:97:b8:dd:98:f6:27:
03:5e:bc:b6:a2:3b:6b:a9:95:35:33:b4:0e:d7:7c:45:41:8f:
9a:eb:67:e1:ef:e8:ad:2e:0a:7e:0c:3e:84:aa:6f:45:d2:6d:
10:e3:c2:fd:ec:e4:40:46:f1:19:98:9e:e3:59:89:31:37:49:
88:af:ae:17:d9:d4:a0:fd:45:a6:b7:59:a7:5c:17:58:dc:dc:
86:56:1b:7f:42:72:74:59:c4:47:ce:13:ff:b8:7f:f3:31:15:
33:c6:ca:3e:21:d5:d4:cf:ed:2c:90:94:4d:8e:d2:d4:92:77:
58:cc:05:e5:9d:75:eb:40:80:7a:a2:9f:db:36:50:a9:1b:f3:
49:a7:e2:ac:ff:27:be:40:3a:1c:80:d4:53:6e:2f:fb:e4:1d:
db:bf:61:2e:4d:35:2a:81:02:95:c5:a4:d4:0e:f1:7f:cc:cc:
69:4d:57:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:19 2025 by rpki-client