Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mVJmuLdJieXpZibRmaKYHUlXbec.roa
File: mVJmuLdJieXpZibRmaKYHUlXbec.roa (raw, json)
Hash identifier: E7aeG2VPvlnTiBC6eaeyH3WdE2zIWgYCLAp68tPFD4w=
Subject key identifier: 99:52:66:B8:B7:49:89:E5:E9:66:26:D1:99:A2:98:1D:49:57:6D:E7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 20A8
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mVJmuLdJieXpZibRmaKYHUlXbec.roa
Signing time: Fri 25 Nov 2022 04:38:58 +0000
ROA not before: Fri 25 Nov 2022 04:38:58 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.44.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8360 (0x20a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:58 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=995266B8B74989E5E96626D199A2981D49576DE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:35:d2:ed:21:5a:b0:44:71:02:90:27:1c:43:
5f:48:26:a0:9d:4d:2f:44:4c:13:11:96:3c:50:21:
11:12:38:ce:5e:b0:01:50:a5:c7:44:fc:04:ba:95:
4f:33:2e:17:3c:88:89:72:22:d7:e9:9b:21:d1:22:
c9:e0:79:28:57:5f:ab:d8:bc:a8:50:7e:b2:05:7c:
d6:59:65:b2:fe:e6:b8:ad:cb:37:d8:2d:0b:47:3e:
00:65:d3:5a:9f:80:66:2d:ef:08:84:46:6c:d4:88:
52:8a:46:e6:2f:25:0d:56:c0:e9:1d:a4:d7:ce:32:
a7:81:d2:1d:67:ec:05:65:ef:7e:8e:30:8d:a6:b0:
ba:c9:c4:9a:ea:99:80:a0:83:cf:ec:91:98:9e:b9:
14:bd:f9:f7:d3:41:06:cd:c7:6b:7d:c8:20:eb:a4:
0e:3e:03:a6:43:6b:ca:84:fc:58:09:a3:6e:b9:6c:
01:0b:c6:5e:30:a3:67:36:16:ee:da:2c:0a:3c:7d:
f7:1c:08:9b:0b:16:48:ff:92:e7:a0:ac:45:d7:52:
cb:27:cf:7d:93:fa:66:50:b1:db:59:ef:78:a3:c4:
d8:db:27:ff:90:1a:1b:90:7e:e3:9a:3a:62:90:ee:
41:26:b9:cb:45:fc:54:d1:db:05:dd:a4:ae:15:21:
95:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:52:66:B8:B7:49:89:E5:E9:66:26:D1:99:A2:98:1D:49:57:6D:E7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mVJmuLdJieXpZibRmaKYHUlXbec.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.44.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:83:00:b5:f1:49:2f:9d:86:98:89:37:a4:07:ca:98:47:25:
00:fa:a8:65:68:6e:90:a0:dd:10:40:58:1b:f1:fb:2c:01:d2:
bb:85:63:41:28:79:2d:1d:67:6c:d8:83:69:39:5a:ce:30:6d:
74:be:e4:ba:d7:5d:84:bf:03:52:26:57:5f:cf:be:52:e2:37:
b2:45:fb:c1:44:fa:5e:98:6d:12:9c:d2:05:1b:ab:c0:65:44:
37:ea:2e:08:0b:ed:59:30:8e:ff:b9:b2:b0:cb:e9:ff:2c:db:
2c:41:fd:c8:90:13:0e:d1:32:1a:f3:c5:12:87:f7:77:5f:42:
7a:6d:d6:a0:50:9b:e6:42:08:43:ca:f3:7d:08:30:3d:ac:4f:
01:bc:13:31:57:81:e4:59:fb:77:96:94:c0:05:9e:ba:6f:d1:
28:76:8a:94:91:a5:fa:cd:0b:1a:14:b7:ee:da:f2:ab:f2:14:
b0:55:55:0d:69:bd:72:ab:36:71:e9:cc:46:0f:92:b4:b6:bc:
98:82:e7:c0:91:46:43:e4:35:b6:78:db:cd:73:44:53:9e:0d:
d3:c9:ff:b6:f2:eb:14:e8:bb:42:2f:20:1f:60:b9:5e:d9:64:
e2:ee:cf:63:b3:81:36:01:de:41:7f:6f:48:d8:c2:f1:56:ca:
7a:f0:8f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:27:38 2025 by rpki-client