Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/n-l_AdR5PAfAFbkCRCYo8Frq6do.roa
File: n-l_AdR5PAfAFbkCRCYo8Frq6do.roa (raw, json)
Hash identifier: VAgN59rqdLxZ9geZkfDYrshVtG0+r2jYx0mA+mbgWck=
Subject key identifier: 9F:E9:7F:01:D4:79:3C:07:C0:15:B9:02:44:26:28:F0:5A:EA:E9:DA
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 14D5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/n-l_AdR5PAfAFbkCRCYo8Frq6do.roa
Signing time: Sun 07 Feb 2021 12:00:15 +0000
ROA not before: Sun 07 Feb 2021 12:00:15 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.172.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5333 (0x14d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:00:15 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9FE97F01D4793C07C015B902442628F05AEAE9DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:17:e7:df:c1:1e:96:c0:a1:af:6d:63:c2:41:
b2:48:81:0a:ab:36:ca:4b:63:80:f1:0c:b7:69:a4:
7f:d6:0a:c7:e9:22:d3:20:8b:a4:f1:cb:32:bc:81:
08:62:a7:2e:88:b3:2e:0f:4a:0d:dc:a1:0a:1b:7f:
2c:1c:29:33:97:e4:97:0c:30:66:56:2a:8e:98:92:
64:dc:24:31:12:cc:88:78:eb:45:b3:63:26:6f:43:
8c:d8:81:97:98:7a:19:3c:bc:a4:69:82:11:19:5c:
89:bc:ee:be:45:23:9b:cf:0e:b7:7d:26:ed:29:e2:
4b:e2:3c:1a:85:90:20:3d:06:d2:9c:ec:4a:fe:45:
6b:83:71:ea:7e:bf:91:1c:be:12:84:8e:28:23:8c:
06:ed:82:a5:ca:1d:1c:a6:37:9a:f3:40:6c:52:12:
d1:bd:85:cf:45:a6:3e:15:21:7f:74:80:01:f7:50:
f7:78:a3:62:6e:c0:17:35:48:69:fb:e9:d4:6a:ff:
67:d5:5a:3e:25:c5:cd:2e:82:5f:92:ac:9d:f3:6f:
79:1b:0e:42:02:e8:e4:24:90:c4:24:6e:f3:3e:98:
0a:21:92:8c:a7:46:94:24:95:6e:93:39:87:5f:93:
ec:dc:f1:64:61:89:fc:72:21:6c:c1:c5:b7:8f:83:
71:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E9:7F:01:D4:79:3C:07:C0:15:B9:02:44:26:28:F0:5A:EA:E9:DA
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/n-l_AdR5PAfAFbkCRCYo8Frq6do.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.172.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:4b:e9:0f:00:20:31:ea:22:29:a6:27:5b:35:b3:0c:80:cc:
92:9b:bc:1f:dd:85:5a:c3:40:c0:fa:6b:37:13:c3:52:cd:99:
e9:5b:2e:20:16:ec:90:b7:dd:f7:d9:8b:de:ea:4c:8a:54:2b:
80:6b:9a:8a:0a:16:18:ee:4b:85:55:50:bf:71:09:03:fe:0e:
01:43:48:ab:71:f3:54:9b:42:39:3c:ac:ae:b7:99:dd:12:03:
74:24:d2:e6:29:1e:fc:b3:d9:e7:8e:27:da:a9:63:2b:c6:42:
45:9d:ac:c9:35:49:0f:2e:60:a6:a7:2b:48:28:05:d9:92:49:
08:7a:84:44:48:e9:c3:c4:4a:27:c7:bd:81:bc:69:62:12:4c:
f9:69:28:77:83:92:9e:ad:73:a1:c8:68:03:51:dd:3f:82:88:
f4:d3:fe:9d:8b:51:63:d3:00:2e:96:4c:fd:46:79:6d:f9:e8:
05:f8:ab:2e:cb:c0:9e:80:42:51:54:e9:bc:54:59:97:4c:ac:
d5:22:3c:14:97:e1:30:8a:44:32:94:9c:f1:ce:82:45:ce:ad:
43:38:2b:c0:89:41:8b:3e:1b:ef:9f:92:28:13:f1:8e:d2:45:
5d:86:01:a7:02:1a:88:e1:27:29:c0:0d:9c:f4:b1:5c:6a:4b:
78:a9:c6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:35:40 2025 by rpki-client