Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rbdYdH2t3Ni8GTniDIPyMc-Nm2Y.roa
File: rbdYdH2t3Ni8GTniDIPyMc-Nm2Y.roa (raw, json)
Hash identifier: igXfIVrK4ac0XDg1Anqh4Qtn7destwgV7d7zqqDNwZU=
Subject key identifier: AD:B7:58:74:7D:AD:DC:D8:BC:19:39:E2:0C:83:F2:31:CF:8D:9B:66
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2AF7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rbdYdH2t3Ni8GTniDIPyMc-Nm2Y.roa
Signing time: Fri 01 Sep 2023 10:08:30 +0000
ROA not before: Fri 01 Sep 2023 10:08:30 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.195.244.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10999 (0x2af7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:08:30 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=ADB758747DADDCD8BC1939E20C83F231CF8D9B66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f5:5c:26:f7:32:3a:99:81:16:cf:19:28:e9:
b4:33:30:35:59:08:60:52:60:b3:e6:a4:22:c3:ab:
e2:2f:47:da:09:94:58:e9:87:35:a0:da:ab:33:11:
ea:50:b1:4f:ae:c2:ed:d3:ad:7e:06:08:bc:e0:03:
27:70:e8:b9:35:6a:b0:24:ee:46:7a:36:fd:27:4c:
3b:90:64:8a:90:b1:2e:0c:8f:66:a9:c8:d2:d6:a3:
36:96:f9:fc:d1:da:04:da:df:5e:65:df:a7:61:4b:
8f:df:67:7d:87:0e:83:36:82:ae:09:4b:6d:61:b1:
19:9f:f5:6f:00:31:ef:83:07:16:1d:25:7a:87:4c:
09:59:25:1a:ee:aa:c0:86:d8:50:7f:82:f2:c8:10:
41:22:3a:b6:e7:d0:fb:1e:8b:a9:f0:12:2a:22:51:
25:27:4c:56:39:1b:66:31:25:55:79:34:54:91:6d:
47:2c:b8:cf:31:94:e2:aa:de:58:1a:e9:02:58:d0:
e4:6d:11:76:b5:15:ef:2d:30:60:d1:31:19:6c:ba:
c5:cd:e6:32:80:0c:8c:8c:15:8c:6b:b5:6b:a7:29:
52:be:e4:4f:84:6e:0f:ba:65:4a:fc:1f:21:5d:ef:
d7:9f:af:b7:50:0b:cd:76:87:90:32:11:3e:d6:b5:
3e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B7:58:74:7D:AD:DC:D8:BC:19:39:E2:0C:83:F2:31:CF:8D:9B:66
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rbdYdH2t3Ni8GTniDIPyMc-Nm2Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.244.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:98:d9:ad:1c:24:d4:cf:76:b6:4b:a7:5b:be:b0:ad:02:31:
92:40:5e:05:50:29:4d:96:2c:d5:1c:3c:f3:d3:43:07:3b:7e:
e0:4e:ea:b8:a3:37:04:1e:8c:44:10:23:70:93:ea:3b:be:d1:
15:72:43:62:3f:88:14:b4:8d:14:aa:b5:ce:22:b7:1d:82:28:
11:ad:c5:05:0c:9f:81:ef:0f:7b:a9:7f:b6:3a:70:f1:66:6d:
c0:8b:cb:66:29:d9:2b:29:24:20:d7:ab:29:8e:cd:80:71:74:
a0:01:69:b3:44:a2:7c:7a:e9:63:f2:0a:57:22:36:12:9c:e8:
16:46:82:ce:e6:03:1b:6c:41:d9:d6:47:c2:76:e4:54:45:68:
33:b8:1b:8f:b3:76:ac:47:26:65:25:1e:82:aa:b1:32:5e:36:
e3:dc:2b:5f:e0:7c:af:50:90:8a:60:28:eb:2b:83:b8:4e:c7:
b4:c0:14:c4:69:27:d0:58:20:c1:2d:ed:44:e7:f4:d4:87:d5:
cf:98:f2:41:21:0c:83:7d:e6:2b:65:fa:52:6e:a8:ca:37:32:
8a:d5:87:ee:e6:3b:3c:c0:d8:6a:40:c0:2a:ce:2b:49:55:b0:
31:e3:d8:04:39:8e:4c:93:83:d8:0f:dc:9f:e5:e8:c5:c6:7d:
ab:64:5e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:33:05 2025 by rpki-client