Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rdzMzP5pR0MmlOZeu4bZ5l9tNE0.roa
File: rdzMzP5pR0MmlOZeu4bZ5l9tNE0.roa (raw, json)
Hash identifier: M5KiUsrKUk+ncsSXnjuM5/Rhh0C0zNpMAWCSWzrdjgs=
Subject key identifier: AD:DC:CC:CC:FE:69:47:43:26:94:E6:5E:BB:86:D9:E6:5F:6D:34:4D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 13D3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rdzMzP5pR0MmlOZeu4bZ5l9tNE0.roa
Signing time: Sun 07 Feb 2021 11:56:22 +0000
ROA not before: Sun 07 Feb 2021 11:56:22 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.233.84.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5075 (0x13d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:56:22 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=ADDCCCCCFE6947432694E65EBB86D9E65F6D344D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:80:38:aa:61:5a:e8:5d:66:8d:a8:d5:e0:76:
1d:5a:fd:67:2d:3d:f4:a7:48:10:60:c4:ae:b8:92:
53:d1:b1:45:a0:86:23:bd:11:f7:a6:3e:f3:a6:88:
3f:3c:b3:28:65:7b:3b:21:cd:af:fe:a9:18:8f:6d:
18:3f:30:5a:f4:c1:30:62:e4:6b:bb:d8:b9:3c:7a:
05:08:82:d1:16:03:73:93:02:3f:bd:76:a8:0b:7f:
20:86:8f:26:b5:0e:0c:04:75:e1:76:c6:17:86:84:
07:4a:a6:08:f5:26:4c:23:9a:45:05:5e:7f:d4:f6:
cc:e6:55:3f:fe:97:05:66:9f:26:d0:c3:ed:34:95:
2b:30:f3:11:be:2d:40:1c:f2:11:7f:07:8a:5b:ef:
03:d4:b7:d4:9a:07:9a:ef:6f:92:50:96:75:90:00:
6d:70:6d:55:e4:34:48:b4:54:3f:bd:d2:8a:53:7f:
6b:0e:77:85:c9:cc:89:79:67:56:d6:7f:d7:81:85:
f8:c2:89:8e:4c:14:2e:57:bb:f9:81:a8:06:81:6f:
39:e0:fc:6f:06:34:af:af:38:cd:3c:79:a8:d0:cd:
dc:2c:6d:77:51:79:7c:15:b7:f6:36:99:dd:9c:09:
3e:b4:cc:7e:d6:b3:02:47:32:e9:19:f9:ac:d6:61:
4a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DC:CC:CC:FE:69:47:43:26:94:E6:5E:BB:86:D9:E6:5F:6D:34:4D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rdzMzP5pR0MmlOZeu4bZ5l9tNE0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.84.0/22
Signature Algorithm: sha256WithRSAEncryption
13:11:28:55:53:69:cb:84:3a:48:a1:11:69:31:5a:f0:25:5a:
6f:d4:54:98:93:05:4f:f9:fd:2f:9d:c1:a7:b3:e4:89:fb:12:
da:1c:20:70:df:44:3f:7a:8e:dc:48:f6:07:d0:c4:50:af:aa:
8f:75:4a:fc:83:d0:db:db:6a:e3:0c:5a:98:bf:bb:08:6f:74:
d8:6f:03:41:dc:83:26:83:5c:95:5f:64:e9:6d:cb:45:24:1d:
e9:dd:1e:9e:74:50:63:7b:3a:8c:bf:a9:7a:a1:4d:11:ed:77:
ce:19:f2:28:0f:eb:97:62:a0:07:01:97:bb:41:42:c9:61:64:
71:13:9e:47:d5:81:db:ad:43:9f:aa:03:87:c5:7a:57:4f:ad:
bb:c4:93:86:cc:ab:77:d9:8e:c4:a9:16:92:c0:27:76:24:05:
4b:17:ba:90:e0:d0:7d:d5:22:fa:20:03:50:09:25:0d:ef:b8:
8e:a5:e5:2e:0a:89:80:5c:ef:a0:df:e0:79:05:b1:47:5e:f0:
cd:05:5f:69:87:40:a1:e9:35:5f:90:c8:fc:f9:28:69:7b:fa:
bd:25:88:c9:62:58:61:47:58:95:31:eb:c2:62:1d:cb:d1:1a:
83:f9:e3:55:d3:a8:8a:40:fb:b6:ac:54:d0:8d:2a:33:96:07:
44:0c:2d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:03:11 2025 by rpki-client