Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pzoZhkuTPJ_TlSWqkxigg0rqHcQ.roa
File: pzoZhkuTPJ_TlSWqkxigg0rqHcQ.roa (raw, json)
Hash identifier: nShnlinW/G6BopEdSn3NPEy+s31+3WGCmd8oJCw+nfw=
Subject key identifier: A7:3A:19:86:4B:93:3C:9F:D3:95:25:AA:93:18:A0:83:4A:EA:1D:C4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pzoZhkuTPJ_TlSWqkxigg0rqHcQ.roa
Signing time: Thu 15 Sep 2022 02:45:04 +0000
ROA not before: Thu 15 Sep 2022 02:45:04 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.24.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:04 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A73A19864B933C9FD39525AA9318A0834AEA1DC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:93:e3:e5:09:9c:9c:94:c8:10:d1:a6:c6:ed:
dd:5d:e8:65:73:ee:a2:04:08:d5:98:a8:d5:0d:4a:
64:11:30:ee:13:84:48:16:9e:5f:36:f8:29:c0:87:
f9:1b:c4:2f:e1:28:50:9b:c7:74:af:d1:46:4a:fa:
90:9c:42:05:59:97:b1:08:a4:e4:95:77:c9:e0:d5:
eb:df:e1:78:7c:23:e4:69:f0:77:16:ad:50:5a:23:
dd:e6:0b:5f:b6:dc:28:50:1e:68:32:48:a0:7a:a1:
4e:fa:71:7d:ec:d5:b8:89:94:62:3c:1c:2f:99:3e:
e3:03:55:fa:30:15:ed:5f:09:ac:49:1d:f7:0b:3f:
af:99:3d:a9:18:8b:17:7b:8a:71:ce:7d:fa:db:0a:
aa:4b:42:dc:83:e5:66:b8:65:f7:dc:7a:75:d6:45:
c6:1b:d3:24:37:b0:1a:65:c2:e5:81:d1:5e:d1:d7:
c7:b3:47:02:04:c0:1f:6c:53:44:9b:07:79:f6:e8:
d0:ce:0e:f5:e1:87:5a:7a:d5:6d:42:79:84:4e:0d:
74:80:f8:db:2d:cf:8c:31:dc:bc:7d:d6:c7:8d:dd:
18:b6:05:cf:05:c9:0a:7b:88:08:05:a9:d0:2d:16:
d6:b4:2c:8c:6b:2e:e9:4d:d0:c5:c1:ac:00:47:9e:
55:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3A:19:86:4B:93:3C:9F:D3:95:25:AA:93:18:A0:83:4A:EA:1D:C4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pzoZhkuTPJ_TlSWqkxigg0rqHcQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.24.0/21
Signature Algorithm: sha256WithRSAEncryption
9b:fe:b8:6a:01:b1:78:d9:db:2e:5f:0b:5a:11:f0:91:e9:07:
fb:26:57:4d:0e:2e:a0:da:a1:ff:85:e2:da:95:2b:31:b4:4f:
0a:86:c8:0a:4f:9f:0c:f3:db:b1:60:01:36:11:a0:78:31:80:
43:92:ee:31:d1:83:67:9a:d5:0b:c9:3f:c7:8d:4c:f5:27:78:
66:d8:f1:a8:29:0a:a6:61:53:f3:ec:a3:5b:9c:c3:5f:65:53:
01:d3:2a:e3:13:fa:9a:ae:63:8d:96:ff:32:4a:d3:5c:c9:3e:
a1:b8:ab:db:bc:85:88:5f:7b:32:b3:7a:6b:44:d4:fb:5c:d0:
5a:17:45:05:d5:6c:01:ae:d9:25:df:b5:d1:23:26:11:9c:6b:
95:8a:ac:ee:e9:bc:02:b8:9c:5a:9d:a7:28:e6:5e:eb:78:93:
0a:75:f0:2b:66:36:c1:d6:5c:c9:f2:40:dd:68:1d:fc:dd:9c:
92:e6:13:8f:81:e3:66:53:da:00:94:74:64:ed:ca:af:5b:41:
d7:52:30:cf:44:cf:b0:49:5b:8c:ad:fe:7b:89:5f:80:4a:b3:
a2:54:26:d1:5a:c1:62:c7:28:4f:38:07:29:5f:90:47:51:0b:
5e:bb:19:c2:4e:7d:17:6f:6e:6f:92:ad:49:9f:30:35:bb:e8:
3f:d9:95:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:23:09 2025 by rpki-client