Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jonnQCcF63GYxQ35CwDMNG4-yuo.roa
File: jonnQCcF63GYxQ35CwDMNG4-yuo.roa (raw, json)
Hash identifier: Pw2twkHuG1oyCUKc7g/YUY8OzOcvU8Iisb9wWY13SGo=
Subject key identifier: 8E:89:E7:40:27:05:EB:71:98:C5:0D:F9:0B:00:CC:34:6E:3E:CA:EA
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jonnQCcF63GYxQ35CwDMNG4-yuo.roa
Signing time: Thu 15 Sep 2022 02:54:03 +0000
ROA not before: Thu 15 Sep 2022 02:54:03 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:54:03 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8E89E7402705EB7198C50DF90B00CC346E3ECAEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:34:ba:9c:f6:0e:a8:7a:e9:e5:f5:38:54:08:
18:19:8d:1c:9f:3c:4d:b0:6f:61:21:3d:3b:b6:a6:
12:ae:6a:fe:9c:ac:0e:f9:cd:c2:d3:0b:a4:01:f0:
fb:b8:78:ca:9e:95:c6:84:5c:50:ac:5c:5a:c8:d8:
2f:48:9d:f0:04:5c:80:9c:59:2c:70:68:40:6d:c0:
ab:74:33:32:f5:67:87:ea:5c:8a:e6:81:3a:ce:c8:
c2:45:b4:aa:91:a5:60:2c:07:e4:ce:0a:e2:05:44:
ec:2d:80:4b:a1:f2:32:9c:ca:e8:83:4e:3c:15:28:
b4:8f:18:c2:5e:99:cc:3a:31:26:7d:0c:4f:c7:e8:
98:f5:c3:6f:80:ee:08:f8:2a:f3:44:c8:0b:ee:d5:
ab:c5:88:36:a3:93:9f:01:5c:ce:ba:46:17:ef:f4:
9c:35:c6:22:88:81:fa:31:bc:a6:ea:2e:b5:bd:11:
b5:86:7c:ff:b4:76:7e:c8:5e:a5:26:eb:dd:af:62:
93:a1:62:ff:b2:07:bc:63:00:4c:51:58:f5:3e:1b:
71:61:f3:64:f6:f4:d2:35:47:2b:b1:4c:bf:ba:3f:
1c:98:75:63:ae:a3:7f:8f:e1:ef:50:be:98:28:60:
b2:d1:6a:6b:7c:fb:ad:a3:af:32:97:5e:9c:ac:cf:
7e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:89:E7:40:27:05:EB:71:98:C5:0D:F9:0B:00:CC:34:6E:3E:CA:EA
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jonnQCcF63GYxQ35CwDMNG4-yuo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.94.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:5b:64:21:75:e8:0e:f3:15:ac:bd:aa:bd:42:19:12:ca:54:
87:e5:0c:a0:c4:e1:56:bb:3c:a3:ed:e4:af:7e:85:c7:78:7f:
09:bb:6e:3e:16:7f:6c:60:43:12:04:ea:8b:65:e0:cb:89:5c:
c9:94:6f:27:ce:77:27:01:48:03:a5:94:09:af:6f:8a:c8:b0:
9b:3a:74:6c:be:f0:0a:4f:64:a7:f6:67:e2:f5:7c:8d:7b:e2:
52:81:b0:aa:1c:3c:b3:94:8c:92:69:f0:ee:e0:28:af:2d:68:
2b:ae:ab:63:1d:4e:3b:df:7e:d7:fc:b7:22:87:98:21:03:10:
76:b4:b2:1b:d0:19:be:60:2d:de:22:13:93:33:95:12:99:cb:
21:5b:4b:9e:7a:6a:84:0e:5f:91:bb:eb:13:ad:ce:82:57:f0:
07:d5:6b:61:4f:c6:ad:b5:cd:30:d2:67:e9:14:84:75:47:45:
cf:cd:5d:8f:3a:d1:5d:c9:35:ec:76:39:0b:7d:4e:b7:aa:88:
96:e9:d4:e2:a9:a4:f5:e6:82:d0:9e:d0:95:d8:fd:d5:f5:cc:
72:02:1c:3b:23:58:a9:fc:1d:d7:4f:62:68:3d:6f:2b:0d:91:
5d:28:97:1c:36:a4:de:0d:68:db:ff:04:9d:e3:65:21:9e:3a:
2d:0f:f0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:37:30 2025 by rpki-client