Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/r3FSsZxFradNdyylSAJpmsdm-PE.roa
File: r3FSsZxFradNdyylSAJpmsdm-PE.roa (raw, json)
Hash identifier: P5OGay7QZfgZCAz1XqhWNKuXIBALupxV11McgU2DZ40=
Subject key identifier: AF:71:52:B1:9C:45:AD:A7:4D:77:2C:A5:48:02:69:9A:C7:66:F8:F1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2965
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/r3FSsZxFradNdyylSAJpmsdm-PE.roa
Signing time: Fri 01 Sep 2023 10:06:28 +0000
ROA not before: Fri 01 Sep 2023 10:06:28 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.193.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10597 (0x2965)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:28 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=AF7152B19C45ADA74D772CA54802699AC766F8F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:59:50:36:33:92:cf:de:78:bd:4a:de:7a:a9:
aa:74:64:15:4a:b8:9f:0b:e5:5f:55:82:52:f0:9f:
10:e2:da:f4:c9:2a:c2:cc:a9:71:5f:4a:da:1e:78:
bb:ff:99:09:c9:2e:6b:ab:e9:b9:35:1c:f5:6d:14:
70:46:33:61:29:a5:04:d4:a0:dc:45:01:81:d5:06:
6f:e7:54:95:28:43:26:6d:84:90:5c:ea:79:c0:f5:
6d:ab:2e:c1:35:19:17:85:f5:f8:17:00:b7:65:24:
88:79:bb:10:ab:88:f8:b6:c6:e2:d8:3c:9a:11:4e:
97:ec:e5:e0:57:83:df:5f:09:55:32:af:35:09:8a:
2b:14:cb:83:c7:0d:6d:19:06:4b:d5:97:67:21:9a:
dc:4b:1c:b6:dd:b7:5d:8c:e4:92:46:84:a2:06:aa:
d5:65:63:31:04:6d:6d:f5:8d:30:0d:2e:17:28:89:
ba:52:91:e5:9d:73:ed:83:01:f7:b1:32:ca:bc:fe:
31:e8:0a:9f:5f:78:cf:6d:f1:76:35:94:a1:76:90:
a9:83:7d:57:92:8c:b6:17:72:05:70:d1:16:c8:a9:
50:bf:d2:e7:0b:33:9c:3d:c4:88:db:22:43:f0:66:
40:b7:86:e3:e0:41:74:c4:e1:8d:3a:dc:76:bb:76:
d2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:71:52:B1:9C:45:AD:A7:4D:77:2C:A5:48:02:69:9A:C7:66:F8:F1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/r3FSsZxFradNdyylSAJpmsdm-PE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.108.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:b7:33:90:ad:6a:3f:f2:36:14:ec:26:2c:c0:9b:53:96:e8:
5a:53:09:3d:6a:09:c2:93:f2:bb:a9:26:3a:58:20:a9:39:25:
6b:0b:00:47:39:69:58:ab:7f:3a:33:e8:7b:bd:a8:19:f5:a2:
91:14:0f:e0:a1:5e:39:51:ab:09:d9:da:74:c1:a3:a5:be:2c:
28:cd:a3:9f:da:89:84:49:b6:e4:0b:a2:d2:dc:d1:53:0a:6a:
3b:29:9f:85:74:fe:99:51:70:b7:7e:6d:72:08:61:cb:29:e9:
a7:40:92:c1:31:48:23:e3:c9:af:20:4c:75:f1:e3:2f:1f:94:
c8:fc:08:72:6c:20:ab:35:da:d2:a6:90:e1:26:84:fa:dd:d5:
17:6e:4e:8e:35:7c:4f:32:4e:f2:67:07:da:04:29:25:e5:82:
7f:0c:03:88:15:87:d7:3d:11:4a:ac:78:f0:cb:9c:36:19:49:
b2:b5:e1:43:f1:39:aa:aa:9a:83:3d:33:8b:04:55:06:f7:b1:
f1:ec:75:67:09:5b:ec:7e:60:99:a8:4b:21:07:7f:1b:50:ad:
76:ef:af:86:78:67:a8:56:a3:c2:2c:61:68:2b:c9:ac:29:b6:
e5:fa:06:56:9e:78:7e:d6:7f:ab:28:97:70:51:50:f1:ce:a6:
f4:b0:49:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:32:35 2025 by rpki-client