Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jXG-98ajbjvTWUjs8C8Fk9hAJ0o.roa
File: jXG-98ajbjvTWUjs8C8Fk9hAJ0o.roa (raw, json)
Hash identifier: dXyl21pRmeovEDXT/NV7dk5uzAhBorOUx9MsyOYWo9w=
Subject key identifier: 8D:71:BE:F7:C6:A3:6E:3B:D3:59:48:EC:F0:2F:05:93:D8:40:27:4A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1567
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jXG-98ajbjvTWUjs8C8Fk9hAJ0o.roa
Signing time: Sun 07 Feb 2021 12:04:27 +0000
ROA not before: Sun 07 Feb 2021 12:04:27 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.193.112.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5479 (0x1567)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:04:27 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8D71BEF7C6A36E3BD35948ECF02F0593D840274A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:60:f5:7a:09:87:ad:ce:86:70:13:f3:90:e5:
44:f4:d0:60:a1:16:cb:aa:02:16:0b:65:e8:56:a5:
4f:43:9e:e7:4c:6c:7f:93:c0:71:28:cd:31:ec:c9:
4e:e0:48:b3:28:14:e7:75:20:4a:ee:14:a6:39:a9:
3f:59:dd:28:bf:56:da:4f:19:83:a9:81:04:22:74:
b8:87:53:3b:a9:df:49:a7:af:d3:14:75:bd:35:1e:
98:45:c2:86:5e:5a:be:71:21:3d:dd:d3:35:96:0b:
69:c3:59:68:20:43:37:fd:78:8a:a0:74:1d:50:25:
c2:5b:40:58:1f:64:60:ed:e2:ce:3f:14:31:65:52:
7e:a3:1e:59:c2:fd:df:04:ff:6b:57:3b:28:d9:18:
ce:0c:62:53:b8:5e:af:48:a9:db:07:9c:75:d4:e7:
59:c3:e2:7a:e0:4b:f3:e4:22:30:e0:d3:c6:4a:a5:
06:2e:65:bf:0b:25:e0:ce:26:80:ea:d7:20:c2:2c:
2a:c7:26:0e:de:4b:6b:b9:da:fc:91:b9:3c:53:ac:
55:5c:5a:8d:9a:d4:1f:df:79:4a:91:86:c9:ce:7b:
ae:81:59:65:21:d7:b4:36:3e:47:dc:97:98:da:0b:
b3:1a:d4:81:68:1a:30:3e:a8:93:c8:9d:46:92:6d:
82:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:71:BE:F7:C6:A3:6E:3B:D3:59:48:EC:F0:2F:05:93:D8:40:27:4A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jXG-98ajbjvTWUjs8C8Fk9hAJ0o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.112.0/21
Signature Algorithm: sha256WithRSAEncryption
55:b4:bf:48:2f:22:b9:e7:83:fc:ec:7d:e1:27:2a:7d:58:79:
18:04:28:32:d9:17:61:c5:6e:f7:4c:b6:bb:dc:af:cc:85:2b:
0e:d6:97:f8:9b:3c:ee:48:c1:7d:e6:8e:40:fd:fe:45:c3:3e:
c6:e1:4e:c2:32:1f:c5:1f:8b:79:27:a3:4c:56:d0:a5:51:1f:
4b:ed:5e:bd:5d:94:29:b0:15:2f:c3:11:30:34:67:6f:ff:c7:
db:2c:93:a9:ca:63:a8:a6:f9:b0:84:05:f8:2e:fc:ad:69:bc:
26:e9:2f:cc:bc:8f:7d:4f:72:2e:5c:be:09:d8:99:30:4a:62:
26:d0:55:e0:87:22:80:64:19:06:a2:92:fc:07:b4:a0:15:7f:
76:c0:41:63:94:94:0d:77:3c:85:72:06:97:b1:69:7e:d9:3a:
50:68:b0:38:4f:7a:73:f3:1e:c9:36:6f:77:af:1b:01:bf:b7:
ea:49:48:47:0f:64:09:40:f3:9f:2e:8c:f3:05:7d:47:7a:6a:
53:c1:63:d2:67:ba:02:ce:19:30:55:a9:68:18:5d:7c:09:08:
a7:40:af:f8:f6:69:f5:e5:a0:1b:7e:18:28:d0:2f:7b:ee:00:
18:fe:4e:ee:98:9b:3d:39:30:b8:1d:ca:ae:15:25:d7:f6:02:
37:69:95:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:14:03 2025 by rpki-client