Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/itvvbl6mgHdsamlPzIJ7nStpDiw.roa
File: itvvbl6mgHdsamlPzIJ7nStpDiw.roa (raw, json)
Hash identifier: 72g8OHjxJSjFWFuk5tBUoCM5cLPip7XY7qohvMV3hkE=
Subject key identifier: 8A:DB:EF:6E:5E:A6:80:77:6C:6A:69:4F:CC:82:7B:9D:2B:69:0E:2C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 27BF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/itvvbl6mgHdsamlPzIJ7nStpDiw.roa
Signing time: Fri 01 Sep 2023 10:04:29 +0000
ROA not before: Fri 01 Sep 2023 10:04:29 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.195.4.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10175 (0x27bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:04:29 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=8ADBEF6E5EA680776C6A694FCC827B9D2B690E2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1e:af:84:e0:f6:11:d4:c0:00:2a:7a:65:de:
a7:d8:60:67:0f:b0:6c:10:f0:27:e3:f1:fd:15:02:
4c:f1:5a:da:a6:1b:ad:66:99:48:aa:d7:82:69:a7:
20:28:52:b6:c4:b2:7b:ee:d5:cd:2e:e9:9c:55:91:
b1:0f:d4:ba:1b:79:96:9f:14:a7:7d:29:26:30:7c:
b8:e7:df:a8:71:7b:dd:7e:08:77:06:98:62:70:b9:
c6:a7:e3:a3:8e:2d:f3:8e:ec:90:ce:b8:8f:41:bf:
24:c4:a5:b6:78:f9:99:e6:d6:e3:bc:91:07:01:bd:
bf:69:97:3d:ce:b0:04:c5:bc:dd:cd:a2:e5:bc:5b:
05:70:f9:48:cd:78:49:aa:cd:8d:a4:64:cb:1b:5f:
5c:bd:1f:fc:bd:ef:ca:80:fa:2c:24:e0:ef:b2:f4:
04:47:25:34:eb:73:32:64:41:6c:83:bc:07:04:ca:
14:fd:cc:35:89:d3:5f:86:1c:cd:dc:75:8e:c2:c8:
23:98:16:37:d1:4b:67:e2:c1:65:78:9f:62:67:78:
a4:4d:77:61:ed:5c:8e:75:51:ab:f5:2c:28:03:d8:
93:8d:9d:84:0e:bf:40:eb:1e:b4:38:a0:f5:3f:59:
2a:25:3f:dc:75:a3:06:2b:c4:1c:4f:ac:bb:8e:ec:
26:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DB:EF:6E:5E:A6:80:77:6C:6A:69:4F:CC:82:7B:9D:2B:69:0E:2C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/itvvbl6mgHdsamlPzIJ7nStpDiw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.4.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:93:e2:9c:07:ef:e0:f2:99:5f:46:57:92:f7:82:af:84:9c:
12:9a:b0:1a:b6:8c:3b:35:da:7b:b6:ce:0a:79:68:ad:7f:21:
a7:aa:67:a7:a1:6d:d4:ec:e7:a2:55:3c:7a:74:b6:94:42:98:
f7:46:bc:99:c3:03:b1:15:a6:0a:58:a3:75:37:21:0a:76:51:
84:fd:25:9d:d4:9d:72:02:46:d3:e2:83:f1:ea:02:c0:f7:8b:
a2:ad:8b:2b:1a:20:20:28:da:64:8e:d2:c9:99:44:05:b7:92:
2e:27:4c:d6:4e:77:3f:aa:5e:26:a3:d4:f9:82:29:da:50:8c:
33:fd:45:27:ff:d8:45:1e:2c:7c:a8:c2:55:02:5c:0d:ae:62:
33:2c:68:e8:92:1d:bb:6b:19:43:a2:5c:26:4f:64:e7:ef:7c:
65:ac:83:37:11:91:0e:da:a5:01:45:1c:97:3b:8a:32:7e:90:
2d:20:75:f0:a4:b0:5f:e1:7a:a7:b5:a1:25:d8:dc:e7:52:85:
ff:90:49:e3:34:c0:c3:34:57:92:9b:39:aa:ac:b2:8d:41:08:
c3:c1:c2:be:d4:f9:3a:28:65:5e:7f:a4:ed:e5:09:70:52:1d:
5a:78:93:58:d5:ee:89:11:cf:65:9b:c0:0d:ff:1b:5e:de:71:
7c:51:39:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:11:24 2025 by rpki-client