Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nnmEt1K_pD1oh0FvfF6RNFexCPg.roa
File: nnmEt1K_pD1oh0FvfF6RNFexCPg.roa (raw, json)
Hash identifier: 7uTXEWfcHczM3OIpYDSAFHTBrra/dE/9s/1E/w6x1+E=
Subject key identifier: 9E:79:84:B7:52:BF:A4:3D:68:87:41:6F:7C:5E:91:34:57:B1:08:F8
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nnmEt1K_pD1oh0FvfF6RNFexCPg.roa
Signing time: Thu 15 Sep 2022 02:52:57 +0000
ROA not before: Thu 15 Sep 2022 02:52:57 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.0.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:57 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9E7984B752BFA43D6887416F7C5E913457B108F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:68:2c:13:fd:59:98:20:38:f4:a6:13:79:db:
df:50:4f:29:18:9b:aa:f4:ee:15:8c:24:af:ab:49:
21:b6:56:8d:06:8b:7d:0e:da:b5:0f:6d:e3:c3:84:
e7:1e:d7:2a:ce:d5:d1:d6:23:d7:7d:f9:10:21:96:
da:27:84:b8:cf:65:5d:9e:32:2f:93:db:13:2c:e9:
4f:12:79:84:72:3a:a1:4e:ac:16:94:d8:fe:88:cb:
e4:dc:74:9f:44:5e:44:de:64:d6:6f:b7:56:a6:d7:
f0:65:d4:37:82:a0:73:35:31:3f:c6:91:9c:8e:b7:
02:94:f5:9b:35:e9:1c:22:87:72:ad:b9:88:29:7d:
c1:67:e2:60:1d:fb:53:74:a9:b4:e2:49:37:9d:f4:
7f:b8:7a:95:39:2a:ae:3c:2c:d3:bf:09:13:ab:38:
8a:b1:eb:7b:a9:06:3c:b6:7b:79:93:90:26:b7:37:
58:7a:88:c4:64:da:8e:57:06:c9:34:4e:7d:3e:db:
0a:44:3b:a4:54:08:76:ac:92:af:b4:dd:c8:0e:a5:
e9:81:2f:92:b3:1c:50:21:03:1d:99:33:d0:d3:ac:
d1:c9:42:c0:a4:7c:99:c1:c3:2a:39:81:5c:e6:3d:
9c:e5:6d:e1:0e:b7:c7:32:a9:92:1a:11:aa:2c:07:
a2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:79:84:B7:52:BF:A4:3D:68:87:41:6F:7C:5E:91:34:57:B1:08:F8
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nnmEt1K_pD1oh0FvfF6RNFexCPg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.0.0/21
Signature Algorithm: sha256WithRSAEncryption
59:57:27:6f:e4:39:97:5f:b2:7c:50:ca:40:ae:a3:f0:9f:47:
50:5c:b6:45:e9:72:bf:6e:aa:35:e7:4a:5f:6c:3f:f0:1f:1f:
85:f9:c0:4c:33:ce:5e:08:e0:f4:50:d6:5e:a0:c1:76:59:83:
21:02:56:b3:e9:ee:dd:2b:7a:70:02:4d:15:72:64:af:a5:4f:
95:ff:7c:28:80:a9:9c:9c:b0:66:40:cf:b7:ca:67:e6:be:97:
9e:e9:36:3f:9c:e6:49:79:f5:1e:a5:eb:05:34:d8:46:f0:a2:
b8:58:e4:75:2f:d0:a4:19:7f:1d:d3:a8:41:ab:f5:1b:ab:7b:
2c:25:5f:49:f1:8c:43:97:8a:6b:b6:7a:c0:01:cc:9f:cb:ea:
0d:93:e6:bb:5c:22:65:52:e0:1d:62:2e:b8:9a:3b:17:a1:03:
09:77:72:fb:01:21:4d:51:bf:85:34:18:00:27:c9:fa:03:87:
90:bf:f0:78:1b:bf:9b:ec:58:4e:85:7d:2c:6c:63:ea:42:d9:
b4:90:a0:7a:4f:3f:3e:ba:a1:b8:4e:78:0a:8e:af:07:8a:6c:
82:f9:0c:1f:dc:32:1f:37:dc:f7:77:67:32:7a:67:24:65:e7:
9e:e9:40:da:5f:d0:b7:1d:68:65:23:5b:ad:48:7d:c0:f9:a9:
97:99:72:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:34:36 2025 by rpki-client