Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/npkzPM68g1Rz-xCWawL05rsJ1jc.roa
File: npkzPM68g1Rz-xCWawL05rsJ1jc.roa (raw, json)
Hash identifier: 2p4ih1tiOrBexC8zUr7il6bt7kIviKp+AlYor2z9jhA=
Subject key identifier: 9E:99:33:3C:CE:BC:83:54:73:FB:10:96:6B:02:F4:E6:BB:09:D6:37
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 140F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/npkzPM68g1Rz-xCWawL05rsJ1jc.roa
Signing time: Sun 07 Feb 2021 11:57:15 +0000
ROA not before: Sun 07 Feb 2021 11:57:15 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.193.104.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5135 (0x140f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:57:15 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9E99333CCEBC835473FB10966B02F4E6BB09D637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e4:96:76:88:de:ce:e4:cb:e0:41:99:32:21:
b0:5a:e3:2e:7c:93:53:0b:6e:a7:4f:36:d8:73:45:
a2:82:f3:21:b4:51:17:e4:5d:ea:a4:62:18:37:3f:
af:86:59:2e:b6:b4:8f:66:25:04:ba:73:ad:fe:ea:
cc:50:2c:a3:2d:cb:72:b3:03:d1:1f:fa:f6:e8:9d:
4b:9b:47:9d:27:ac:c4:28:2f:08:3c:9e:f9:31:b7:
13:c5:bf:b2:a8:b0:c8:92:a4:25:87:63:ad:d6:5d:
3f:aa:95:30:7c:88:02:72:72:72:b2:a4:6b:42:c8:
21:21:c2:be:0c:de:6f:77:bb:99:5d:08:68:19:0e:
9d:d8:89:12:3f:04:59:7d:ac:b9:f2:98:77:bd:ae:
2b:b9:a6:c6:93:5f:5a:c2:43:2a:11:4c:54:50:8e:
76:fb:e2:00:75:58:0c:9d:ce:f3:7e:39:15:c1:ed:
db:67:43:06:c6:56:9b:1f:69:39:36:b4:4b:de:6f:
37:7e:f5:62:db:96:d4:a7:f2:66:4d:67:43:67:f0:
66:6a:9c:ae:72:3e:a8:62:a6:1c:fe:85:1f:fd:35:
cb:03:df:5e:6a:54:cd:5a:14:e7:c1:bb:35:26:54:
87:b3:37:89:ab:8a:ee:66:72:2c:24:41:47:69:2a:
99:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:99:33:3C:CE:BC:83:54:73:FB:10:96:6B:02:F4:E6:BB:09:D6:37
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/npkzPM68g1Rz-xCWawL05rsJ1jc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.104.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:c9:96:7b:c9:e2:ec:0f:83:85:6b:19:e7:78:6d:8f:14:5b:
26:82:2b:0b:98:70:02:c0:a1:d5:72:9a:36:35:ae:d1:06:c4:
9b:a9:c6:58:1c:fa:2c:8f:03:10:00:8b:8f:ee:a2:d5:85:ce:
05:7f:2b:a3:65:63:40:55:8d:c3:e6:3c:bb:36:3b:13:d0:93:
12:45:33:2d:fc:00:79:70:05:18:ea:55:de:44:5f:00:35:9c:
e4:7e:85:c6:8b:9f:e3:ac:42:e3:68:81:70:d7:78:7e:fc:63:
ef:2c:ca:16:50:72:9a:bf:67:3d:67:ef:28:d4:26:b0:57:13:
e4:4c:78:c8:f4:5b:ae:9f:f6:59:46:85:ef:1e:25:c4:ea:bb:
53:e2:f5:fb:59:11:6c:b0:d6:9c:96:cd:eb:7c:80:19:3f:f3:
1f:7c:35:bb:4d:2a:c0:6d:38:fa:82:fe:4d:da:25:d6:c6:13:
fd:45:42:f4:db:e0:e2:e7:08:fb:12:0f:d4:d7:89:3c:77:84:
b6:86:3a:6c:c2:7f:e6:b1:ff:89:db:a9:90:d8:eb:62:75:0a:
a4:ed:b7:c1:7a:7f:28:0e:cf:6d:6d:d0:98:f6:07:2b:ca:a2:
8d:73:d2:bd:98:dd:e9:a8:e2:21:15:be:5a:5e:af:5d:49:3a:
a3:10:ac:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:11:24 2025 by rpki-client