Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i9v1zf9LDEHGS6ARZlRQOxEEN7k.roa
File: i9v1zf9LDEHGS6ARZlRQOxEEN7k.roa (raw, json)
Hash identifier: hetllYOqpWhtLlhaqUhFpSKM9ieQcWKBB1YfrYPOKmQ=
Subject key identifier: 8B:DB:F5:CD:FF:4B:0C:41:C6:4B:A0:11:66:54:50:3B:11:04:37:B9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2862
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i9v1zf9LDEHGS6ARZlRQOxEEN7k.roa
Signing time: Fri 01 Sep 2023 10:05:17 +0000
ROA not before: Fri 01 Sep 2023 10:05:17 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.192.220.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10338 (0x2862)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:17 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=8BDBF5CDFF4B0C41C64BA0116654503B110437B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c0:dc:f4:5f:ba:91:b3:af:e5:02:fd:14:9b:
83:3d:78:84:81:0a:48:dc:c3:a1:2b:62:14:4f:77:
0d:13:04:d2:72:b8:f9:16:3c:4c:4a:66:ec:5a:df:
1a:86:b4:c0:fe:86:3a:de:c4:e7:8d:fb:86:ad:68:
05:33:6a:bc:df:c5:4c:a2:47:5b:ad:f3:3c:36:0c:
3f:05:a2:85:ee:c1:d8:29:7e:ce:52:e4:e5:f3:51:
f9:38:e0:14:f8:27:66:d2:2f:2e:ed:5c:ac:fd:1f:
18:70:9d:9f:19:09:5e:79:16:32:3a:c4:bb:06:2e:
70:f8:a3:74:d2:5a:db:fb:87:10:0c:5f:86:d6:7f:
dc:7f:88:59:b2:66:3e:f1:bb:44:66:96:c6:81:92:
24:d4:73:87:2d:12:f6:50:a0:8a:ad:ee:79:60:93:
18:f4:b4:7e:33:6d:a5:88:4e:3c:7f:b8:26:97:0a:
2b:f5:dd:5b:2e:af:87:49:2e:23:0c:df:12:03:e7:
a0:c0:31:64:fb:58:c1:9e:4f:4c:4a:dc:45:6e:95:
88:59:e4:c2:a6:13:2a:ab:7c:d3:ca:4f:05:74:17:
8c:0a:6f:25:53:cd:33:23:64:ee:6e:b2:8b:8a:a0:
e3:df:94:9f:de:f4:56:03:d1:f9:38:39:a4:57:0c:
e4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:DB:F5:CD:FF:4B:0C:41:C6:4B:A0:11:66:54:50:3B:11:04:37:B9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i9v1zf9LDEHGS6ARZlRQOxEEN7k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.220.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:de:9f:89:39:04:dd:a3:c8:29:00:c8:d4:42:fe:81:22:99:
31:c7:88:e4:bd:13:6e:4b:fc:c3:44:71:b8:83:2c:a1:ae:e1:
34:cc:e0:0a:c6:26:5f:95:c1:c1:cc:c7:e9:53:f1:0d:85:95:
a4:e6:03:08:fa:ba:1a:60:d0:a2:18:07:a0:0c:7f:34:ff:5f:
69:5c:fe:12:fd:ff:86:ee:c9:aa:33:57:80:0f:19:99:9a:00:
3e:8c:84:80:bd:31:b3:ac:d7:9a:3c:41:36:ca:8d:12:28:24:
52:20:0b:a3:57:16:33:21:7c:20:17:05:02:07:e9:ef:13:e3:
c2:ad:a9:45:cf:30:5a:9e:cb:8d:0f:32:c8:3d:3b:da:c6:67:
25:3b:a2:00:fd:f4:15:f0:ef:8c:17:be:1b:50:62:3d:e0:0c:
6d:f4:5d:29:3e:ec:9c:f7:7f:11:b6:37:c5:bd:b7:f3:78:c4:
03:32:00:b5:e7:29:f8:61:90:2d:2d:dd:c4:c5:f2:e5:9e:30:
5f:2a:58:68:57:4b:8d:ac:e1:e0:d3:9c:e6:f3:b0:3d:9d:4a:
94:2f:14:c5:eb:b7:68:c1:d4:fa:f6:a6:7e:71:de:e5:99:8a:
e9:41:d8:64:cd:04:3d:a8:16:5f:f9:74:e2:d4:23:ca:cd:f6:
8a:08:f9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:15:09 2025 by rpki-client