Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/elQx44zyDkJvwklQtjsSCB5Ba2A.roa
File: elQx44zyDkJvwklQtjsSCB5Ba2A.roa (raw, json)
Hash identifier: ZSHz6/9iiSM93XyDuB5iQJgyCpoDPZRGTzkJ/tOq2mQ=
Subject key identifier: 7A:54:31:E3:8C:F2:0E:42:6F:C2:49:50:B6:3B:12:08:1E:41:6B:60
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1601
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/elQx44zyDkJvwklQtjsSCB5Ba2A.roa
Signing time: Sun 07 Feb 2021 12:07:45 +0000
ROA not before: Sun 07 Feb 2021 12:07:45 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.192.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5633 (0x1601)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:07:45 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7A5431E38CF20E426FC24950B63B12081E416B60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:44:35:98:f3:fa:85:0f:f5:d5:ca:c7:f2:61:
40:e3:a9:26:29:3b:78:7a:9a:cc:18:cc:41:a6:ad:
24:eb:0f:be:dc:3d:f8:2b:36:10:19:ce:a4:6d:9f:
3c:26:38:96:a9:4b:1f:21:78:d1:80:80:a9:cc:f8:
d6:bb:17:27:a7:e4:11:3b:2e:d3:12:ba:26:0b:7c:
5a:14:f1:cf:e4:30:f7:b5:ed:ef:c8:5d:ac:0b:7d:
c3:22:28:e4:8e:4d:db:aa:68:c4:7a:94:47:28:03:
d2:dc:b0:7c:e0:ba:87:e6:84:ea:99:96:1d:a3:8f:
33:e3:fb:ab:32:74:2f:a8:93:e3:df:94:8c:8b:4e:
10:83:ab:24:b9:ba:df:73:c4:e0:38:12:63:4e:5e:
80:cf:63:3c:0a:31:86:c5:d5:80:d6:ba:29:6e:b0:
23:d7:93:73:b7:5b:ae:5e:1b:0b:87:18:89:e3:44:
40:4a:97:75:0b:10:04:af:49:6a:03:47:50:e8:c2:
46:aa:60:7a:82:f1:26:1b:11:7d:9d:d2:62:29:2b:
cd:e2:23:82:02:d3:87:fe:d7:dd:5e:36:2c:1d:d5:
ed:53:58:30:73:47:33:4c:d0:d3:a2:43:06:33:a3:
4b:19:3e:4f:3e:37:1b:62:fa:94:a0:e0:17:62:1e:
75:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:54:31:E3:8C:F2:0E:42:6F:C2:49:50:B6:3B:12:08:1E:41:6B:60
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/elQx44zyDkJvwklQtjsSCB5Ba2A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.192.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:38:5a:bb:b9:ef:5f:59:f7:9b:26:27:27:c4:e4:2b:d5:de:
8d:7e:a2:9e:26:72:57:4a:3e:a4:a3:a7:a3:c7:94:f5:6a:0e:
b1:76:3f:81:f3:89:46:e0:94:68:08:d7:55:ab:46:6b:8e:6c:
9a:67:ff:99:fa:94:c1:b6:e3:aa:cd:df:75:89:50:55:61:b9:
76:6c:d0:6a:ed:2a:4d:4a:03:b8:b5:e8:6c:68:52:2c:b1:d5:
ff:b9:4f:d0:e6:cb:97:ad:95:04:c5:25:86:f2:39:1c:85:f9:
0c:4c:7b:0a:43:1c:78:86:8c:29:10:36:07:3d:14:56:c9:86:
d4:1d:82:de:7c:ec:ab:c7:bb:ae:3c:14:d2:8e:4b:30:20:ab:
41:e3:8f:08:22:7e:62:6e:d7:43:6b:3f:cc:38:31:88:e0:4f:
87:1d:80:b0:88:5e:c7:41:e3:1d:1f:6d:8e:df:4f:4c:45:ad:
c9:02:cd:85:f6:1a:f5:ae:39:49:3c:e5:dc:9c:c4:6a:db:cb:
85:12:c7:73:27:58:30:d0:47:67:7c:a1:b0:88:f1:fb:d4:50:
b1:fe:11:f4:1d:9c:67:5e:69:d0:37:42:7d:25:98:b7:b9:35:
f8:b4:e6:c0:a7:24:d3:16:8f:87:b5:0b:7e:ae:37:37:15:74:
76:0f:47:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:34:00 2025 by rpki-client