Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pJBvI7wUpdlXkYrU9Oh_7tScZ-s.roa
File: pJBvI7wUpdlXkYrU9Oh_7tScZ-s.roa (raw, json)
Hash identifier: pUpcnecCL5iY97qCujStK34KFdoS081jQblOsZ+ApeE=
Subject key identifier: A4:90:6F:23:BC:14:A5:D9:57:91:8A:D4:F4:E8:7F:EE:D4:9C:67:EB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 21F5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pJBvI7wUpdlXkYrU9Oh_7tScZ-s.roa
Signing time: Fri 25 Nov 2022 04:40:36 +0000
ROA not before: Fri 25 Nov 2022 04:40:36 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.176.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8693 (0x21f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:36 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A4906F23BC14A5D957918AD4F4E87FEED49C67EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ff:d8:42:e8:73:8c:d6:7c:ae:e4:e6:20:9c:
74:ce:df:9f:3e:05:4a:ef:2d:c0:77:15:f1:ea:7d:
93:d5:b0:aa:2e:8f:21:e5:c6:03:82:0e:17:c8:b3:
89:50:e5:ac:0f:66:4e:79:ba:7a:8b:9e:c3:d2:73:
c6:ba:1b:e7:66:f2:11:cc:41:de:dc:01:df:7c:ad:
b6:ec:22:8b:10:f3:b4:07:83:bb:fd:70:f9:2d:87:
5e:d0:c8:54:df:98:8e:61:17:1d:9d:fd:df:1f:cf:
2b:91:c9:1e:42:d6:06:c6:3b:6a:f9:31:33:5c:04:
38:7e:38:a5:21:dd:47:d1:70:6e:1f:47:49:8d:f3:
39:c4:62:68:74:b1:18:b4:80:d5:c0:aa:62:1b:d2:
3c:29:0d:28:f8:c5:87:d7:14:14:a9:e2:1a:a0:bf:
73:dd:5e:a5:99:65:43:73:44:3a:fe:93:05:af:f0:
82:7e:e6:c2:29:e4:db:77:dc:be:12:0d:33:88:bc:
70:95:68:d0:30:a9:24:18:42:2d:97:78:e0:bf:54:
61:81:b5:e8:9d:8c:9e:e0:77:b1:e9:89:4f:8a:ea:
f0:05:85:52:c9:b4:cf:7d:3e:57:e7:c9:7b:1e:6c:
e1:74:ba:17:39:a0:7e:82:31:20:b9:f4:62:d7:c4:
25:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:90:6F:23:BC:14:A5:D9:57:91:8A:D4:F4:E8:7F:EE:D4:9C:67:EB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pJBvI7wUpdlXkYrU9Oh_7tScZ-s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.176.0/21
Signature Algorithm: sha256WithRSAEncryption
b1:38:d1:4c:22:7b:a1:65:66:04:48:7f:ab:34:3e:d8:5b:f4:
38:5b:91:63:4f:93:02:43:6d:f7:87:93:ba:77:65:cc:f5:0c:
e4:83:fa:51:fb:38:d6:6a:6a:ba:11:15:04:5e:37:eb:bf:3b:
ba:d0:bd:37:af:d0:37:0b:cc:53:bb:7e:b4:1b:c8:dd:00:25:
e1:84:d5:88:2a:da:47:7c:68:93:0e:b3:12:0c:d4:03:17:ec:
f1:03:39:ba:bf:8a:19:c4:5e:b9:c4:b4:40:10:6e:50:ac:76:
05:06:4c:75:37:11:36:d7:04:3f:3c:e5:b5:df:bc:de:8e:3b:
e1:c2:0b:fa:b3:f0:bb:52:0b:2d:b7:dc:5e:f8:83:41:41:df:
ae:eb:4e:dc:f6:93:b5:0b:a1:36:c4:be:6d:52:fe:4a:bb:7e:
1c:4c:f4:c6:60:36:4c:75:69:9f:95:42:24:ea:c4:86:2c:8f:
b2:d4:8b:25:8b:aa:be:9e:36:7e:fd:ee:35:f8:82:8b:0d:4d:
75:cb:2d:23:2b:df:ba:bd:c6:c2:ee:2e:92:2b:08:a9:0e:2c:
bf:59:ec:ad:06:f3:2e:bd:c4:f5:fe:96:25:84:78:bb:33:5e:
eb:01:12:c1:db:0e:49:47:80:33:bc:2f:bc:ef:8d:5c:7f:f4:
79:01:81:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:34:00 2025 by rpki-client