Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jN2hp-Rlf-qapQ158434lF1N4GU.roa
File: jN2hp-Rlf-qapQ158434lF1N4GU.roa (raw, json)
Hash identifier: O3vBLFX+U+owEY6xR+fFW4WBIVGu0zfJ/36ex+9P5wM=
Subject key identifier: 8C:DD:A1:A7:E4:65:7F:EA:9A:A5:0D:79:F3:8D:F8:94:5D:4D:E0:65
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2B1A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jN2hp-Rlf-qapQ158434lF1N4GU.roa
Signing time: Fri 01 Sep 2023 10:09:51 +0000
ROA not before: Fri 01 Sep 2023 10:09:51 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.194.48.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11034 (0x2b1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:09:51 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=8CDDA1A7E4657FEA9AA50D79F38DF8945D4DE065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e2:5b:d7:d8:f8:07:fd:91:8d:e7:ff:41:5f:
55:09:25:2b:f4:5b:26:ea:b0:14:81:7a:6d:39:1d:
97:48:32:3c:5d:10:c5:3d:15:3c:06:ce:26:5d:b5:
4a:69:80:a2:75:c6:23:43:65:c6:a7:fa:b5:9b:bc:
fe:a6:c2:53:4b:82:1b:5e:26:df:31:b2:16:5a:8e:
4e:af:d1:f3:2a:87:da:33:58:de:32:ea:22:f8:c3:
9b:2a:23:cb:49:c3:86:98:7d:ab:70:db:a5:fb:26:
e1:7b:4b:9b:28:79:c9:69:84:e6:7f:e9:57:80:6a:
21:8a:9c:2d:e5:42:83:74:9b:85:2d:c3:c1:41:3b:
cf:ef:0b:62:2f:d6:4b:68:98:84:d7:f5:b8:5e:c3:
0d:cd:f1:cf:15:24:96:b8:fe:6b:ec:e2:58:7f:3f:
b7:da:3f:e9:2d:c2:10:98:20:a9:60:d6:81:a7:f3:
ac:d6:d0:80:ec:26:ff:e0:9f:1f:e1:af:c0:80:ba:
1a:ea:f9:78:5a:cc:51:fe:42:42:ba:24:1d:78:ed:
1c:1e:4a:82:27:14:94:91:95:a0:b7:9a:b0:26:d2:
79:c1:e9:41:67:25:8b:51:bd:b5:18:26:7a:2f:be:
b9:d4:88:c3:67:22:18:ae:46:a7:63:cf:f5:f6:6b:
12:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DD:A1:A7:E4:65:7F:EA:9A:A5:0D:79:F3:8D:F8:94:5D:4D:E0:65
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jN2hp-Rlf-qapQ158434lF1N4GU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.48.0/21
Signature Algorithm: sha256WithRSAEncryption
2c:87:e8:2d:fa:ad:17:78:ad:92:c1:f2:d8:b4:39:13:98:ff:
7c:60:10:85:cb:1f:f7:f3:b7:f3:f3:89:a8:10:6b:33:74:0e:
68:6c:61:2c:cb:e4:44:9d:f0:ad:04:33:b1:f1:12:71:14:49:
2f:04:71:ee:73:ba:c0:76:04:07:95:3e:a8:1e:a0:ec:2b:db:
a4:cf:a0:b8:92:a0:0e:7a:48:73:2a:50:c9:20:36:a7:c0:13:
d3:43:99:24:16:70:0a:c6:fd:6d:8d:ef:4e:23:6e:55:b3:49:
60:1f:91:0d:49:49:26:e6:43:c0:9d:b5:0b:66:6a:77:38:28:
b7:f2:72:d8:37:3b:5b:64:7a:01:f7:85:48:73:8a:55:56:a1:
7a:1c:56:4f:79:01:e0:08:db:2b:6e:b1:b6:69:c9:41:38:a7:
ad:87:01:a7:7d:1b:a2:57:1c:44:7f:72:85:cb:f0:77:b9:44:
f9:3e:29:d7:08:f5:2c:57:a7:1c:a8:29:33:71:83:05:4f:95:
c6:1e:78:b7:65:6b:b8:e5:d0:fb:12:bd:6a:79:64:2c:e1:60:
90:ee:d0:93:3c:82:13:1e:48:2e:fd:5d:dd:5d:09:f3:85:7e:
93:25:52:b4:09:bb:b0:ae:67:4d:7f:ec:78:25:1e:fc:c6:a4:
24:14:14:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:35:40 2025 by rpki-client