Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cCvvyOtDWxtobmuDooHJ0N4KSnM.roa
File: cCvvyOtDWxtobmuDooHJ0N4KSnM.roa (raw, json)
Hash identifier: fh2rGjmnBb2vhBNbVTEghTSDTWriN88h/vy+Y+cf454=
Subject key identifier: 70:2B:EF:C8:EB:43:5B:1B:68:6E:6B:83:A2:81:C9:D0:DE:0A:4A:73
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 292B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cCvvyOtDWxtobmuDooHJ0N4KSnM.roa
Signing time: Fri 01 Sep 2023 10:06:14 +0000
ROA not before: Fri 01 Sep 2023 10:06:14 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.195.224.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10539 (0x292b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:14 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=702BEFC8EB435B1B686E6B83A281C9D0DE0A4A73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:14:77:96:09:ac:e4:48:4b:8d:2e:b5:24:db:
08:8b:fa:cf:59:a9:6a:4a:f3:fd:f2:8a:41:18:a7:
1c:c3:b5:25:16:f0:88:e1:85:d2:ff:a4:ad:a7:be:
e6:d7:5d:f9:32:04:d2:19:08:42:04:f3:69:21:d9:
73:b3:46:af:ab:65:11:d0:eb:1f:43:3d:7a:cf:d4:
dc:31:af:13:78:66:3f:49:40:3f:19:7f:4c:41:ef:
78:03:c8:12:0a:d6:92:64:7f:5b:a1:14:e7:7a:86:
bb:70:d1:0a:14:07:23:f4:6b:ab:13:b9:1c:70:29:
9e:2a:03:8c:87:00:5e:ce:04:cc:8b:40:29:55:24:
eb:f6:dc:dd:04:8d:25:7e:5a:b6:b5:08:43:06:e7:
00:12:d2:b5:6a:87:00:76:27:13:c4:03:c7:ba:f7:
8e:c2:86:85:7d:d3:a8:cd:d5:13:24:da:25:ad:15:
9c:36:20:03:72:9f:c6:8d:b0:26:6a:c8:f1:82:fc:
c6:c5:6f:19:e0:41:4c:1c:3f:a3:3a:8a:b9:45:8f:
f2:08:4c:78:d6:40:88:85:1e:70:6e:b4:fb:e3:fb:
89:ab:fc:54:c6:e2:83:aa:82:f8:f5:3c:77:8f:0a:
5d:e6:e2:c8:6d:8d:e2:f7:d0:c9:98:cb:b0:bc:b7:
2c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2B:EF:C8:EB:43:5B:1B:68:6E:6B:83:A2:81:C9:D0:DE:0A:4A:73
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cCvvyOtDWxtobmuDooHJ0N4KSnM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.224.0/22
Signature Algorithm: sha256WithRSAEncryption
02:6f:0a:c0:61:95:9e:99:0d:43:99:09:af:f4:b0:b4:25:4b:
05:20:e6:cd:f9:6f:ff:ed:1b:af:41:ae:e7:4d:3f:87:f7:37:
74:fc:c9:4d:ac:dd:3a:d2:be:ae:1b:03:80:91:1e:a9:c8:1a:
f7:b8:d8:64:09:82:ac:69:40:ab:57:14:69:b5:88:25:ac:18:
86:c5:16:d9:26:bf:f0:03:32:8c:eb:1a:50:6d:14:7a:de:af:
ce:33:1d:dd:a7:ea:68:1f:3f:55:35:e3:a1:31:6c:25:ce:2c:
0b:05:48:e4:76:cd:e0:8a:c5:1a:0f:1d:94:ef:3a:8f:ba:4c:
31:f5:3f:89:f3:4d:1c:75:1f:93:11:14:04:51:ec:cb:64:73:
c4:59:06:ac:c8:54:01:0a:f7:81:ec:56:51:4d:81:19:59:60:
1a:e6:43:69:5d:b6:d0:c2:0d:12:91:8b:83:e1:27:ad:28:fd:
1e:b4:9e:45:05:f9:ce:96:76:21:17:46:16:33:37:2d:cf:87:
e1:b9:af:6a:a7:fd:b1:40:9b:09:78:42:d3:e6:b2:ba:61:e8:
4e:ee:a6:36:98:1f:f8:03:d1:e1:97:b7:98:b7:cb:c8:3b:e9:
6a:b5:0e:a3:e2:b4:3b:20:df:3e:8e:8f:c6:92:c4:02:54:00:
c4:4f:20:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:17:38 2025 by rpki-client