Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lxx8ZJhdinM6AKFaTQblS2WUCXI.roa
File: lxx8ZJhdinM6AKFaTQblS2WUCXI.roa (raw, json)
Hash identifier: BJnsrYPb7K9PGPGFqA6Ztkp6x4XJ5u5YzAqHVcywzXY=
Subject key identifier: 97:1C:7C:64:98:5D:8A:73:3A:00:A1:5A:4D:06:E5:4B:65:94:09:72
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1CC3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lxx8ZJhdinM6AKFaTQblS2WUCXI.roa
Signing time: Wed 29 Sep 2021 02:48:10 +0000
ROA not before: Wed 29 Sep 2021 02:48:10 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 118.232.224.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7363 (0x1cc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:10 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=971C7C64985D8A733A00A15A4D06E54B65940972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:55:88:da:43:5f:db:cb:de:ea:6c:41:94:7c:
31:c5:9b:d9:b5:86:2c:4e:04:c1:fe:98:c0:e2:32:
e7:f0:fa:ba:9f:89:ce:75:ff:86:86:ea:99:05:4f:
07:4b:05:ff:d9:b9:f8:d4:19:b3:79:a2:1e:88:f6:
98:50:14:e8:f6:a8:fe:76:cf:88:39:6c:e4:9d:9f:
7c:08:0c:8b:a7:e8:89:c3:78:3c:08:6a:f6:0f:cd:
6b:0f:ad:18:13:44:24:55:c6:b4:65:94:85:ce:dd:
7d:78:9c:0f:d5:9d:51:53:e7:79:44:47:79:68:4c:
6a:dc:7a:05:60:5c:0f:5e:78:a1:a8:b1:1c:87:e0:
cb:c4:8c:6f:b6:c6:3b:73:f8:90:b0:1d:84:c7:ce:
b1:c0:8a:be:d3:56:a0:2f:08:a2:8d:1c:1b:fc:c2:
37:2c:6f:3c:48:84:f6:cd:42:4c:15:82:7b:22:eb:
0d:7e:a4:dd:03:b9:aa:ff:63:fc:3d:b2:c3:5a:fc:
4b:c5:6b:0f:8d:25:13:9d:0c:3a:8c:bd:38:31:ba:
ae:ae:06:1d:c1:03:e0:f6:9d:73:c4:35:bb:30:ae:
3b:b7:79:7f:c1:3a:92:e2:91:cf:00:ff:6f:33:d7:
8b:e3:a0:13:bd:e5:25:a5:3f:d2:d4:07:83:42:8e:
2f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1C:7C:64:98:5D:8A:73:3A:00:A1:5A:4D:06:E5:4B:65:94:09:72
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lxx8ZJhdinM6AKFaTQblS2WUCXI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.224.0/21
Signature Algorithm: sha256WithRSAEncryption
4b:b5:1f:6f:06:1c:f5:fd:2f:aa:7b:a8:4c:01:fd:62:6c:58:
97:8f:c1:77:93:09:ab:c8:b4:ca:18:59:75:2f:14:e1:ab:a1:
d9:1d:02:8f:bf:bd:e0:86:2e:28:c7:53:52:00:2a:ab:61:a5:
a0:f2:38:61:68:a9:d6:64:10:7a:bd:4f:e9:05:82:92:b4:59:
0b:e6:b9:67:7b:12:76:fd:f8:e9:f5:75:a3:f9:44:b1:eb:1f:
3d:fa:62:67:57:a4:81:4f:dc:af:fe:7b:e7:67:40:9a:77:c8:
50:ff:09:b8:d0:11:79:48:f1:dd:ac:e7:2b:1f:0f:d1:92:26:
32:1d:42:33:81:25:8b:2e:fc:eb:13:99:a7:70:6b:46:eb:07:
b3:d6:54:85:93:60:7c:ba:fd:4c:b9:29:87:f0:03:f6:39:22:
4c:da:0c:3b:db:d5:17:4d:33:22:ec:f0:34:57:d6:7c:a1:a7:
24:b6:d4:6d:d6:f9:dc:c8:cd:79:16:bb:2f:a0:a6:ec:92:f4:
3c:33:11:de:21:f8:ee:21:98:e0:c1:8f:b5:d8:31:bb:1c:be:
0b:68:d8:d5:56:03:f8:b3:f9:67:87:df:14:97:db:f0:e4:3c:
08:1d:c5:b6:fd:89:87:61:d2:1e:17:1c:d2:28:92:40:53:32:
d7:bb:4c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:23:34 2025 by rpki-client