Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kdXevMglB0Lc8LBdLN3bEXTvRs8.roa
File: kdXevMglB0Lc8LBdLN3bEXTvRs8.roa (raw, json)
Hash identifier: O6z+D5fNTQ4/ha0vGQ3WL1155RRIxTl8mKyvMrV1YI4=
Subject key identifier: 91:D5:DE:BC:C8:25:07:42:DC:F0:B0:5D:2C:DD:DB:11:74:EF:46:CF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 16E7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kdXevMglB0Lc8LBdLN3bEXTvRs8.roa
Signing time: Sun 07 Feb 2021 12:15:13 +0000
ROA not before: Sun 07 Feb 2021 12:15:13 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.232.24.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5863 (0x16e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:15:13 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=91D5DEBCC8250742DCF0B05D2CDDDB1174EF46CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5c:47:d7:9b:c5:5f:31:21:95:96:d1:41:6d:
1f:5d:96:6d:1d:01:77:c3:7f:30:49:17:23:6f:5b:
97:ed:b0:bc:23:ba:5b:ad:d2:fa:84:d3:70:2a:66:
e6:29:58:51:2b:14:68:3c:bd:75:f1:97:39:e5:97:
91:13:61:7d:81:c8:b0:38:f4:63:75:b8:9f:e3:24:
2b:da:0e:50:99:dc:d1:89:72:8b:49:22:b4:b1:0b:
55:52:18:1a:8f:ba:04:37:b8:05:fb:8b:1a:52:74:
89:94:67:6f:79:7f:01:b5:72:64:b2:4b:87:e5:de:
be:cf:ec:13:fb:31:d1:c3:26:18:b3:a1:82:9b:83:
ba:0b:d6:92:1d:b7:54:21:36:16:2d:12:5f:e3:34:
71:7e:aa:ed:56:82:d9:9e:f4:7f:41:5c:82:52:e9:
43:9e:4b:a0:b6:d8:7e:32:a8:b6:32:27:c7:e2:5d:
2f:05:f8:66:e1:f5:d4:1d:bf:1c:d6:77:7f:2a:3d:
02:7c:cd:e8:cd:e6:04:6e:2e:f5:1d:25:20:aa:e8:
14:27:f8:3c:c2:e5:56:15:c6:24:e1:7f:7e:85:0a:
4a:06:80:2a:32:a7:58:0a:9b:4f:51:e5:d3:68:4a:
3e:96:52:6f:91:cd:e0:33:4f:d3:08:36:7d:46:20:
83:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D5:DE:BC:C8:25:07:42:DC:F0:B0:5D:2C:DD:DB:11:74:EF:46:CF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kdXevMglB0Lc8LBdLN3bEXTvRs8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.24.0/21
Signature Algorithm: sha256WithRSAEncryption
3d:f0:66:60:c8:f7:67:24:59:a2:bc:30:dd:24:b4:32:73:10:
3c:61:ac:f0:59:be:01:85:53:93:00:63:8b:92:4c:b2:6d:e1:
ea:e3:68:13:b0:e0:c9:67:ed:6d:af:75:37:2e:f0:8f:75:77:
5d:d2:d5:76:a1:f6:74:d1:f7:a7:b6:f0:57:e5:80:79:e3:30:
3e:c7:7d:7c:64:b7:3e:4f:69:aa:c9:4e:12:21:8a:af:64:cd:
ad:ba:8e:c7:08:9a:8d:ec:16:bf:76:2d:fe:75:54:a0:17:06:
e5:f5:f7:80:56:0f:a0:b1:9b:10:9b:42:e5:2c:18:2e:1a:e7:
3b:cc:4c:f2:a6:d6:10:da:d1:a4:d8:25:03:06:5e:d3:9a:5e:
da:04:de:7e:96:90:bd:c9:ad:19:e2:b2:1a:36:c1:a7:18:dd:
62:18:a8:de:a0:5a:80:2f:4d:ca:a0:91:6d:16:94:41:a5:ef:
8b:5d:03:bc:65:c6:7e:65:f5:f5:d6:6c:36:11:3f:7f:28:b1:
55:1b:eb:84:b8:63:43:b8:38:de:11:36:b6:fc:4b:01:7f:24:
b1:ea:28:d3:c3:4c:2f:03:68:0c:98:64:1c:a3:57:84:96:a0:
bf:ea:5d:33:23:b7:c4:28:ba:12:13:f5:5d:73:90:6e:47:41:
5c:de:2e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:32:46 2025 by rpki-client