Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nkFIMiimvaIKvYse2ja6DjZ4nYM.roa
File: nkFIMiimvaIKvYse2ja6DjZ4nYM.roa (raw, json)
Hash identifier: P+RJ5Ub0/snn1ch4L1oMmTUJ69Sndqnk292NeHvpAZY=
Subject key identifier: 9E:41:48:32:28:A6:BD:A2:0A:BD:8B:1E:DA:36:BA:0E:36:78:9D:83
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2AE6
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nkFIMiimvaIKvYse2ja6DjZ4nYM.roa
Signing time: Fri 01 Sep 2023 10:08:25 +0000
ROA not before: Fri 01 Sep 2023 10:08:25 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.192.192.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10982 (0x2ae6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:08:25 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=9E41483228A6BDA20ABD8B1EDA36BA0E36789D83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:2f:60:b4:27:a4:5c:30:10:6a:21:22:d5:42:
43:c3:04:45:ac:ce:d1:83:e5:37:ec:57:7c:02:7a:
8d:44:8f:a0:86:9f:e5:24:a2:29:22:b1:4c:52:ec:
62:fd:d8:c9:f8:33:59:17:a8:f3:fb:a5:0b:9d:c6:
f3:c3:e2:43:70:0c:77:53:f1:bd:29:5c:95:f4:3a:
88:02:7b:f3:2d:c1:46:0b:00:f3:21:b5:a7:13:a1:
ca:34:86:06:09:6f:2e:c8:86:8d:ab:cd:46:82:39:
01:25:b4:14:bf:f2:2b:d1:3b:c7:49:b9:be:ca:a7:
fe:78:83:82:5f:86:12:a1:ea:84:d3:83:1f:78:a6:
93:c9:8e:99:e0:86:5d:a3:fe:88:51:19:ab:8f:44:
3d:27:d2:ba:79:85:1b:fd:0b:17:33:27:b4:e9:c5:
69:fe:7e:02:3d:ff:0a:93:3b:fd:b6:7b:a5:83:49:
cc:d9:ae:06:b5:69:cf:42:99:c6:ee:34:f7:6d:e1:
3b:c4:46:aa:1c:d8:e8:18:33:b0:9e:d2:3e:c2:27:
0b:9f:d3:70:e4:73:f6:73:4d:f3:60:1a:a2:8a:bb:
f2:8b:60:5e:c4:3b:91:14:ae:3b:f8:86:02:65:1a:
a5:ee:ee:16:93:c3:50:06:7c:b0:0a:e7:f9:6e:c7:
7e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:41:48:32:28:A6:BD:A2:0A:BD:8B:1E:DA:36:BA:0E:36:78:9D:83
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nkFIMiimvaIKvYse2ja6DjZ4nYM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.192.0/21
Signature Algorithm: sha256WithRSAEncryption
28:5f:6f:41:35:88:a9:a7:b7:8e:05:04:31:bc:aa:3c:28:14:
ee:32:c8:42:6b:bf:be:e4:15:8b:5a:7c:9f:69:01:fb:61:f1:
8a:9d:7d:4a:a1:2f:0e:65:01:1e:fb:93:73:89:04:ae:51:6c:
fd:90:02:99:5c:35:3d:6f:4e:e5:c7:ef:34:d7:76:c2:a1:9d:
df:38:d7:07:39:b7:ec:39:39:05:b1:36:08:6b:24:31:9b:87:
de:69:4d:24:7e:eb:d9:bc:e2:6f:77:2c:c3:09:46:cb:ff:48:
01:90:79:a5:1e:3c:5c:fb:a6:78:07:53:8f:1c:7b:dc:a9:41:
7a:23:89:b7:03:df:3c:f9:23:d2:ef:3a:98:39:d5:fb:67:23:
8f:4e:47:a4:5c:51:b7:77:fe:27:a2:e3:11:46:40:d6:19:d5:
db:d5:79:f5:a5:b5:aa:af:af:1d:2f:df:be:9f:1e:36:41:93:
b8:81:c0:28:54:9d:ac:fa:20:51:6e:eb:b4:0c:60:17:fa:49:
bf:88:a0:aa:06:3f:0c:34:32:ba:5d:dd:2c:33:d0:77:c6:f5:
fa:7a:4b:c6:2f:93:7c:09:e7:b1:00:a4:01:ef:a4:43:78:b4:
ce:c2:11:03:51:de:50:73:b1:a2:63:63:53:4d:c0:d7:02:60:
57:b2:89:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:36:56 2025 by rpki-client