Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bK4ID3DrrhsThiB_mVl2OsPyyEY.roa
File: bK4ID3DrrhsThiB_mVl2OsPyyEY.roa (raw, json)
Hash identifier: Dk/9wKGwnCbNcQMjMOiZOHL4iSOS47af6t+qMfAdB9M=
Subject key identifier: 6C:AE:08:0F:70:EB:AE:1B:13:86:20:7F:99:59:76:3A:C3:F2:C8:46
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1EFF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bK4ID3DrrhsThiB_mVl2OsPyyEY.roa
Signing time: Thu 30 Jun 2022 01:50:12 +0000
ROA not before: Thu 30 Jun 2022 01:50:12 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.193.64.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7935 (0x1eff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Jun 30 01:50:12 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=6CAE080F70EBAE1B1386207F9959763AC3F2C846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3a:06:0b:c8:15:11:6c:0a:aa:31:6a:7a:2c:
2b:ec:7b:14:8a:b0:73:b9:70:4d:44:ae:5e:c1:b0:
f9:06:a4:bd:53:a3:b4:ac:3d:c7:8c:2e:f2:6a:80:
3a:d6:38:65:59:46:9a:3a:19:5c:cf:c8:78:8f:1d:
90:4c:67:85:c8:29:76:3b:86:8b:4c:13:d1:0e:04:
91:1b:07:ea:73:14:2d:80:d2:07:ed:17:13:2e:87:
a2:1e:37:32:c7:34:7e:c7:27:e7:bd:ad:c1:90:bc:
7e:7e:e5:70:6b:ad:f7:de:70:b0:f7:be:c1:16:44:
cc:9d:29:61:85:41:c6:b0:ef:51:ff:38:b2:97:f1:
f2:cf:9e:bf:46:37:fb:33:18:f8:79:d2:ef:3d:91:
15:aa:59:a0:8c:03:f5:c4:a9:ac:e3:f5:38:68:99:
80:36:b5:83:7f:d3:f7:79:e3:1f:0e:77:d8:69:e0:
51:c0:ea:5e:db:49:aa:4d:87:be:5d:54:1d:38:35:
19:a4:85:43:3c:ac:b4:e1:19:78:e7:14:d9:95:c7:
07:5c:de:a0:6d:4d:37:9a:f3:0a:c9:89:e1:d3:86:
60:6b:45:67:36:f8:e0:6d:06:05:cc:b6:89:39:f5:
80:ce:8e:30:59:5b:6e:a7:a9:64:b9:68:95:ff:0a:
75:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:AE:08:0F:70:EB:AE:1B:13:86:20:7F:99:59:76:3A:C3:F2:C8:46
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bK4ID3DrrhsThiB_mVl2OsPyyEY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.64.0/21
Signature Algorithm: sha256WithRSAEncryption
1a:21:48:f0:23:7a:1c:23:c0:09:c8:4a:3a:f1:a6:40:5d:1d:
4c:24:14:2b:9c:ef:51:e5:40:e6:60:db:e9:d5:35:ea:8b:6f:
53:f4:b9:2a:9a:a6:64:d3:81:a4:99:ac:a7:2a:71:8c:fb:a8:
27:2d:c2:92:ce:c8:12:bd:05:67:ff:d3:7e:f5:43:2e:37:9c:
10:64:7b:6d:1f:16:df:c6:12:04:da:e7:7c:fa:c6:36:d1:53:
3f:a0:5c:2f:d5:e3:92:29:db:97:e0:84:d8:22:9f:84:19:fc:
f1:a7:7f:01:95:25:10:e4:d3:9d:91:48:4f:6a:a4:20:c6:c9:
d6:01:dc:20:d3:b5:e4:26:ea:26:ae:8d:42:46:21:9e:f8:97:
d4:6e:d4:24:24:93:9d:86:19:ad:17:69:e3:82:8e:6e:7e:9f:
d7:43:d7:60:0d:19:77:d0:db:2e:ee:7e:31:10:eb:80:a8:3d:
57:9b:6f:54:2e:93:c7:18:37:80:44:c6:8f:da:64:55:9e:e4:
8d:45:c0:af:98:96:61:90:f2:bb:76:47:44:b6:2b:c1:b5:2e:
4f:84:c8:48:b5:e8:27:5e:1e:7c:09:e6:94:4b:99:2c:da:56:
d4:31:81:d4:64:72:25:6b:65:0b:ac:30:f5:43:09:11:fd:01:
a8:1b:3b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:18:08 2025 by rpki-client