Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dF1UzvoQ6BM2jfx6mxosiUyxG0U.roa
File: dF1UzvoQ6BM2jfx6mxosiUyxG0U.roa (raw, json)
Hash identifier: mX335/kKrw0eEChPKRQEM+vLG4TzW/57jJLwbEkQ/qY=
Subject key identifier: 74:5D:54:CE:FA:10:E8:13:36:8D:FC:7A:9B:1A:2C:89:4C:B1:1B:45
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2AE1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dF1UzvoQ6BM2jfx6mxosiUyxG0U.roa
Signing time: Fri 01 Sep 2023 10:08:23 +0000
ROA not before: Fri 01 Sep 2023 10:08:23 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.195.232.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10977 (0x2ae1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:08:23 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=745D54CEFA10E813368DFC7A9B1A2C894CB11B45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0f:3b:ab:89:0f:13:4b:50:b8:50:fc:37:3c:
12:ed:f0:1b:63:ae:b8:da:71:4a:b5:23:dd:0b:02:
ea:d4:e0:e3:a1:35:48:60:aa:fb:c4:ad:d1:f6:64:
83:2d:01:9b:28:bd:0c:18:f4:21:cc:19:73:b6:df:
50:06:30:87:cc:ea:b0:d4:27:45:f3:90:7c:a5:fa:
73:e0:bf:0a:bb:04:ff:3c:3e:bd:cb:e7:8f:87:62:
9e:16:8b:96:fe:93:d7:96:9a:b8:50:7e:5f:a7:a0:
6e:d6:2e:d7:fc:e2:0a:91:76:26:0e:25:0a:8c:c6:
4a:dd:b1:86:61:a0:96:e6:b3:ba:8c:5b:36:99:f1:
a8:b7:42:fd:fd:50:1d:e5:60:77:41:64:cb:c0:37:
c9:3c:07:ad:7f:82:62:29:9b:e3:fe:da:79:31:4c:
4b:7f:aa:68:ff:03:23:9a:22:ae:06:29:72:54:29:
58:36:df:c0:0d:47:56:0c:bb:07:fa:6d:c7:cf:83:
3d:86:60:d1:a9:25:72:66:26:7d:28:a6:28:2b:df:
63:3a:9d:63:b0:87:91:87:27:cf:17:4a:2a:ba:42:
fd:c4:5c:9b:24:07:43:04:6a:77:96:de:27:a0:fc:
07:47:3f:0e:77:ef:42:ec:c3:28:ad:eb:19:f9:2a:
a8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5D:54:CE:FA:10:E8:13:36:8D:FC:7A:9B:1A:2C:89:4C:B1:1B:45
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dF1UzvoQ6BM2jfx6mxosiUyxG0U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.232.0/22
Signature Algorithm: sha256WithRSAEncryption
65:0c:5d:ba:32:f9:6b:2f:48:3f:bb:0c:3c:19:96:92:b4:02:
90:e8:42:bb:8f:00:dc:97:f6:a0:63:96:8f:53:20:01:4e:55:
06:42:be:ab:01:d7:c5:c1:33:7d:82:09:46:0d:7a:2a:4e:ee:
08:9c:51:e3:ab:98:6d:aa:9a:1d:a4:99:d3:b2:7a:7a:a6:51:
4a:e6:20:f6:3f:1d:93:31:71:ee:ca:92:21:82:3a:bc:62:37:
8f:1d:41:67:ba:4b:c4:fe:dc:d9:20:57:67:91:8e:a4:55:e4:
da:40:74:d7:a7:3a:5c:f8:42:29:bc:91:0e:67:ac:30:41:e9:
81:f0:72:d3:e9:6a:b8:b7:d6:03:78:13:03:ab:7a:0a:fd:e7:
a7:49:1b:b1:c5:62:ae:b2:c8:ff:a0:f1:0a:65:00:13:27:54:
52:7f:cc:12:29:02:94:50:97:95:81:ba:c0:e8:f2:75:df:68:
68:f3:df:8c:55:5f:4d:63:ee:67:af:8b:52:dd:d4:ff:7d:84:
74:a3:2d:41:1f:ad:0f:e1:cf:4e:ee:36:11:22:91:6b:ba:26:
99:5c:d2:ff:65:19:7d:b0:87:c2:2d:be:7c:ca:48:71:41:5a:
db:51:5e:83:3b:ad:04:ec:e7:99:da:f4:f1:ad:d5:6a:f3:38:
f8:87:45:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:21:10 2025 by rpki-client