Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lHrzDWCayv6jGSQxm-6Vsoq7ijs.roa
File: lHrzDWCayv6jGSQxm-6Vsoq7ijs.roa (raw, json)
Hash identifier: niT1e67H1keW6BaX3l5Fpoe9YezM89JUEzAEWCCI6/w=
Subject key identifier: 94:7A:F3:0D:60:9A:CA:FE:A3:19:24:31:9B:EE:95:B2:8A:BB:8A:3B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1727
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lHrzDWCayv6jGSQxm-6Vsoq7ijs.roa
Signing time: Sun 07 Feb 2021 12:17:03 +0000
ROA not before: Sun 07 Feb 2021 12:17:03 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.20.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5927 (0x1727)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:17:03 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=947AF30D609ACAFEA31924319BEE95B28ABB8A3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7c:70:cf:dc:b6:e7:81:9c:0a:9c:38:d7:cb:
1e:96:56:2b:88:21:bb:62:7a:79:3a:c3:67:d0:ab:
aa:bf:3f:1a:64:4e:96:9f:a5:0f:00:e1:ba:6b:c4:
1d:98:cd:7f:f5:6c:28:11:4c:ec:94:93:c9:e9:cc:
11:04:12:d7:96:9f:72:28:22:59:6f:51:f4:09:02:
35:de:8a:49:3e:5b:61:3d:0d:65:3f:e4:80:a8:d0:
9a:19:ce:67:5c:8d:6c:d4:1c:2e:cc:3a:65:31:43:
1c:0b:2d:61:35:71:cd:6b:ec:f9:24:08:c9:4d:cb:
a0:2c:7c:97:51:64:09:90:bb:c2:10:0b:02:1d:7b:
0d:65:c5:ff:be:fb:2b:35:8d:93:6f:00:1f:75:6d:
c3:fe:21:58:46:fa:85:f5:cb:e8:17:81:62:7b:c8:
b8:f3:37:26:95:90:69:1b:de:b6:15:c6:2d:d8:04:
63:0f:28:b1:bf:8a:95:37:f9:a1:ad:ad:77:04:2a:
d1:b1:f2:7d:9f:57:22:bf:d2:da:47:9c:56:c6:c8:
45:88:cf:7f:ba:f4:0c:93:bc:41:18:bf:3a:d8:70:
e3:c9:a7:9d:ae:9b:4b:55:8c:fe:69:85:84:06:d7:
a6:5b:d7:13:20:f9:e6:1e:35:a8:fc:f1:de:20:e0:
6d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:7A:F3:0D:60:9A:CA:FE:A3:19:24:31:9B:EE:95:B2:8A:BB:8A:3B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lHrzDWCayv6jGSQxm-6Vsoq7ijs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.20.0/22
Signature Algorithm: sha256WithRSAEncryption
39:a0:01:47:e2:0f:40:ff:ee:c1:5d:8a:03:77:e3:41:e6:c4:
33:c1:52:9a:bd:a1:74:f6:d4:43:ff:14:62:bb:bd:05:14:cc:
0d:40:86:29:49:14:33:3c:f9:a5:10:15:e7:6f:a4:96:7c:ea:
e1:45:e9:61:8f:21:cf:65:2d:93:dc:66:57:7b:f3:94:74:7f:
99:c0:91:4d:29:a2:37:da:99:b8:1d:67:b5:1d:23:c7:5f:5b:
81:85:8b:6e:31:a0:41:14:a7:60:35:bc:ad:e4:fd:36:4f:87:
a2:d1:6d:56:99:dd:1c:4e:d5:e1:89:6d:9c:68:31:bf:00:04:
fa:72:40:9e:9d:ad:e2:4c:a7:8f:e0:0f:d6:da:ea:2d:38:23:
4b:63:bd:8e:4d:fb:e4:61:18:d7:68:3f:1c:43:8e:c6:97:2c:
96:5f:6a:c9:3c:d4:58:fb:37:73:cb:f7:92:42:12:86:8f:66:
a9:79:b5:cd:88:6c:f0:1a:1e:0e:d1:f2:8e:b8:90:46:57:36:
c8:97:e7:f1:92:0d:92:56:ba:13:8d:72:97:2d:91:bd:c2:ea:
c8:6e:b0:ea:41:9c:b3:26:12:e1:b3:3b:20:20:00:66:e3:52:
e5:54:7f:6a:f2:73:cf:dd:db:0e:e3:9e:e3:70:db:84:31:b8:
1d:8d:62:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:13:33 2025 by rpki-client