Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/s-WgQKYXhgmmBLa9fjzbNAY4NEg.roa
File: s-WgQKYXhgmmBLa9fjzbNAY4NEg.roa (raw, json)
Hash identifier: YbUABAQxyuJ6eltAnmUMbk9SgOe49sJjHVAkio790Pg=
Subject key identifier: B3:E5:A0:40:A6:17:86:09:A6:04:B6:BD:7E:3C:DB:34:06:38:34:48
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A61
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/s-WgQKYXhgmmBLa9fjzbNAY4NEg.roa
Signing time: Fri 01 Sep 2023 10:07:50 +0000
ROA not before: Fri 01 Sep 2023 10:07:50 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.195.160.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10849 (0x2a61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:50 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B3E5A040A6178609A604B6BD7E3CDB3406383448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c8:83:a3:03:30:a1:53:22:ec:fa:7c:e1:7b:
e0:16:a6:10:71:ba:e8:70:57:f0:52:04:a2:fc:2e:
e3:60:f3:28:73:ce:24:e7:56:ce:96:9e:03:a3:8c:
fa:32:e4:60:c1:3c:f9:77:64:1a:2f:0d:bf:21:ef:
cc:37:06:62:b1:c2:48:7e:ac:c1:30:01:1d:cb:87:
71:d8:ad:2e:b3:05:fc:de:05:29:20:a7:31:c6:74:
42:f2:fa:4b:a1:05:fa:58:3b:26:a7:0f:2b:37:d1:
75:cc:cf:9a:1c:73:a6:5e:07:fc:45:70:ec:78:74:
75:16:fa:c7:1b:c0:5c:3d:db:a7:7b:46:97:83:28:
bd:26:3f:ca:c3:f2:fb:9c:52:81:af:da:58:4c:e9:
a1:1a:89:4c:ae:aa:a5:a5:69:3f:24:e8:52:b7:ee:
55:de:84:ae:d4:23:60:14:2a:35:32:81:a7:3e:c6:
1c:bb:52:43:90:be:99:5f:81:09:55:f6:45:33:7d:
d1:b4:33:34:84:b7:15:df:f8:0c:43:fd:da:a5:d0:
71:7b:4a:ac:7f:51:2c:7b:37:21:35:c1:45:fd:6f:
b7:90:94:da:aa:d0:01:0f:f7:29:91:1b:78:7f:b4:
92:cf:7d:c5:88:1b:ed:04:f7:de:86:82:67:f0:96:
d7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E5:A0:40:A6:17:86:09:A6:04:B6:BD:7E:3C:DB:34:06:38:34:48
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/s-WgQKYXhgmmBLa9fjzbNAY4NEg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.160.0/20
Signature Algorithm: sha256WithRSAEncryption
9f:d4:ff:af:65:5b:8c:0a:9f:dc:51:b1:7f:cd:15:47:16:cd:
71:74:35:8f:f8:39:23:9f:50:5b:bc:8e:93:9b:25:04:71:cc:
4b:fa:8b:43:69:7f:b3:84:0c:ba:fc:bf:a2:1e:20:47:c0:85:
86:32:ec:55:bb:b7:20:01:c0:7f:3d:2b:07:f3:22:73:b1:69:
5f:a0:49:16:52:50:0f:df:c0:10:79:2d:c7:2a:a6:6d:44:e5:
2a:ee:ba:53:71:45:ff:05:8a:17:5d:44:fd:06:56:31:1a:b0:
20:60:22:4e:a5:75:3d:fa:7f:76:cc:6c:02:67:6b:eb:19:04:
67:28:63:4d:4a:80:ea:45:5d:4a:5d:00:99:0a:b8:65:b1:73:
a2:24:27:1d:fa:1d:64:67:5e:93:61:cf:b4:81:ce:35:d6:c8:
e9:c8:0c:49:af:f6:85:08:5b:18:8f:f9:6b:b0:31:7e:b2:08:
07:f3:38:e5:ec:fd:c5:70:c9:a2:07:32:e9:d4:28:8d:07:41:
9f:9c:d2:f5:22:b3:fa:09:37:52:af:df:7d:45:c6:74:11:54:
05:92:03:d4:98:21:53:11:0c:09:0a:a1:a2:3d:3a:c1:f0:dd:
10:ad:93:bd:f6:ab:0f:55:20:d1:74:65:0d:19:4d:34:05:bf:
2b:f8:b2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:44:19 2025 by rpki-client