Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sLT_kmjRNrfxIgsTn2IiRYwTSn8.roa
File: sLT_kmjRNrfxIgsTn2IiRYwTSn8.roa (raw, json)
Hash identifier: b9sKvSWqEBlUyRjsm7PoJibfBvHB3EgmnmDYA530jvc=
Subject key identifier: B0:B4:FF:92:68:D1:36:B7:F1:22:0B:13:9F:62:22:45:8C:13:4A:7F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 28B9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sLT_kmjRNrfxIgsTn2IiRYwTSn8.roa
Signing time: Fri 01 Sep 2023 10:05:42 +0000
ROA not before: Fri 01 Sep 2023 10:05:42 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.193.192.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10425 (0x28b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:42 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B0B4FF9268D136B7F1220B139F6222458C134A7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5d:4c:06:18:d7:45:8b:e3:fa:75:df:be:bb:
ef:f1:3d:68:d1:8e:0e:cb:7f:a6:4c:06:21:c9:2a:
c3:30:7b:b2:38:6d:1d:e1:20:ef:4b:8a:70:74:56:
77:96:3b:6e:92:bb:fc:00:f1:bd:31:16:0d:3e:69:
9b:eb:5f:48:f2:c9:72:25:ea:97:0d:28:09:3b:c5:
68:a5:6e:f1:71:fc:c2:a4:8d:51:59:a6:c9:32:78:
7e:60:5d:90:ca:a5:f5:02:be:06:01:15:6c:6b:3b:
45:67:a4:f1:10:ed:b4:75:fa:c9:90:d0:3c:53:2b:
b4:c5:71:77:f4:9b:15:fa:9a:eb:7b:97:ca:cb:48:
23:db:02:55:29:b7:66:cc:d0:a5:3c:86:b9:41:8a:
44:6f:92:ab:73:62:44:bb:01:7d:d2:7a:d1:85:3e:
66:c4:13:dc:3d:c0:97:53:72:47:df:9a:b9:d0:c7:
1b:55:70:bf:f2:17:c1:e2:36:4f:a0:b0:de:41:3d:
9f:1f:55:a3:ac:42:eb:9f:28:b8:f2:61:1a:54:e8:
4a:04:74:bd:d4:1f:b5:33:17:b4:90:55:ed:aa:75:
85:94:aa:78:93:0a:e4:a0:fc:e2:8d:78:6a:8a:6d:
50:a7:1e:86:ac:f6:51:96:fe:78:62:91:37:52:0f:
a5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B4:FF:92:68:D1:36:B7:F1:22:0B:13:9F:62:22:45:8C:13:4A:7F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sLT_kmjRNrfxIgsTn2IiRYwTSn8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.192.0/20
Signature Algorithm: sha256WithRSAEncryption
32:82:ed:ff:30:37:63:a8:fc:dc:81:94:fa:e5:53:d9:9a:a8:
95:8e:33:27:a7:28:18:bc:2a:a3:05:65:c1:f0:21:75:8c:5c:
b1:9f:c4:e9:6a:1f:ac:ec:2d:9b:a2:cd:7c:d1:db:39:03:02:
48:57:c6:0d:c2:60:1a:86:6c:8c:87:17:a2:8e:19:71:89:b1:
42:44:77:d7:e9:77:89:a6:d9:bc:f9:e0:9c:76:00:aa:8f:63:
db:7b:3f:a4:ad:e4:40:12:8d:36:e6:95:bf:09:5c:ab:8f:92:
2b:b5:75:ba:10:24:2a:c8:9a:9f:54:49:0a:0a:9b:14:24:b0:
ed:6a:11:bb:c0:47:39:9c:d0:50:b9:43:47:db:31:8f:af:87:
e1:a5:20:9a:23:77:d0:22:87:9c:17:60:d3:6a:f7:b8:89:21:
28:e3:08:73:39:20:58:c4:27:92:d0:f4:60:a6:53:82:15:0f:
8a:13:cb:83:19:de:3e:25:f3:2f:dc:de:fd:26:45:df:2f:21:
0b:50:38:f2:0f:ee:44:64:83:26:21:0c:1f:7c:a8:c5:29:d6:
24:47:5e:8b:cf:d3:79:cd:9f:dd:c8:12:20:e7:1a:93:5d:4d:
6c:9b:bc:33:19:6c:f3:6f:db:8f:53:6a:fe:37:49:71:54:da:
06:4f:68:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:18:38 2025 by rpki-client