Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lNJ0_x75RHSWk1l4mWm9tBfjbNw.roa
File: lNJ0_x75RHSWk1l4mWm9tBfjbNw.roa (raw, json)
Hash identifier: BnXhlSszhIyB08LX/DsnJbDdou8i8o5Wsr5zCB8xNvg=
Subject key identifier: 94:D2:74:FF:1E:F9:44:74:96:93:59:78:99:69:BD:B4:17:E3:6C:DC
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lNJ0_x75RHSWk1l4mWm9tBfjbNw.roa
Signing time: Thu 15 Sep 2022 02:45:29 +0000
ROA not before: Thu 15 Sep 2022 02:45:29 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.48.0/21 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:29 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=94D274FF1EF94474969359789969BDB417E36CDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d4:98:14:0c:26:e8:30:9d:de:c1:7c:49:d0:
6e:8c:c5:0a:75:7a:76:4a:0d:23:56:5e:d0:08:52:
d1:fb:69:1a:bb:21:3b:f6:56:78:ce:3b:98:db:6b:
65:dc:d3:ff:17:07:c1:62:00:1b:7b:86:3c:4d:59:
ae:05:b3:c6:cc:d7:20:41:8f:09:1b:45:58:8a:f9:
f2:f9:47:ce:ef:03:c5:12:f7:79:0b:1e:76:f6:43:
74:45:ed:df:55:14:cd:e1:ff:ec:60:ee:45:28:87:
27:9f:77:7b:a7:1c:46:64:9d:3e:23:33:a1:f6:a1:
22:e1:7a:83:d9:6d:0f:d3:9b:81:df:f0:59:4c:ed:
a6:f8:53:7f:7b:2e:75:f2:5c:da:65:e9:47:86:e9:
1f:eb:9e:e9:ab:42:b4:3c:e7:fe:8c:2c:05:f9:9f:
2d:f6:72:4c:62:02:7a:31:16:8f:40:09:23:91:92:
7d:20:bb:19:f4:81:0b:c7:4a:06:bf:86:0a:cc:d8:
ad:29:dd:f7:91:51:e8:48:d6:72:4f:12:fa:ad:39:
31:d1:4d:61:cf:7f:2a:20:2f:7b:92:2b:3f:57:4e:
6a:7c:c8:bd:1c:28:5d:e3:e5:88:5c:8d:48:2b:8d:
f7:fc:3b:f8:ae:0e:e7:8e:47:1c:69:c1:f3:21:c6:
eb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D2:74:FF:1E:F9:44:74:96:93:59:78:99:69:BD:B4:17:E3:6C:DC
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lNJ0_x75RHSWk1l4mWm9tBfjbNw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.48.0/21
Signature Algorithm: sha256WithRSAEncryption
9c:cc:8b:ec:fa:56:6a:e2:c4:d7:fa:0b:e1:33:12:5b:46:fa:
fe:e3:6c:ef:96:30:25:31:b2:ab:d5:77:d4:34:93:89:bd:fa:
68:20:fe:83:7f:e5:58:53:f4:9a:fb:90:7e:f1:87:36:97:55:
be:0a:35:6f:04:34:f4:5f:0c:79:5d:69:3a:b7:bc:e6:46:03:
cf:24:33:54:55:76:51:f0:39:01:14:bb:0b:2a:e3:a3:a0:2d:
6f:87:59:f8:7e:78:14:0f:42:09:ae:43:a9:26:22:d3:42:be:
83:38:a4:c6:0e:9e:67:9d:cd:48:c0:2a:46:5d:bc:48:c0:74:
94:a6:a8:f9:bd:f7:34:6f:71:68:74:6e:17:e9:28:6d:5e:bf:
d5:f0:65:73:f4:65:d1:e0:8e:96:17:d0:49:6a:e7:18:05:fe:
d9:fa:d7:de:95:77:a0:a9:67:93:81:cc:4c:e3:88:3d:37:39:
bf:a0:43:3d:6f:a4:a4:f6:2f:d7:c7:b8:5a:30:c1:6a:3c:1b:
c5:d5:67:2c:e7:d6:5b:7c:ce:6a:46:66:a8:03:7a:50:f7:bf:
bf:33:80:1d:cf:90:00:6d:90:e1:90:4d:14:d2:a5:34:f3:39:
79:9f:23:70:ce:85:23:6f:c1:76:5b:af:e6:a3:16:75:4c:9a:
69:d8:1f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:18:53 2025 by rpki-client