Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/srgWBcK1RXZqzWy9AauuA8cuKmk.roa
File: srgWBcK1RXZqzWy9AauuA8cuKmk.roa (raw, json)
Hash identifier: jltGH4Yuu5QQox3JVtEuyZimTklqs3Ja9jVdwK36JIE=
Subject key identifier: B2:B8:16:05:C2:B5:45:76:6A:CD:6C:BD:01:AB:AE:03:C7:2E:2A:69
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1F8A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/srgWBcK1RXZqzWy9AauuA8cuKmk.roa
Signing time: Thu 08 Sep 2022 09:37:53 +0000
ROA not before: Thu 08 Sep 2022 09:37:53 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.224.0/21 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8074 (0x1f8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 8 09:37:53 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B2B81605C2B545766ACD6CBD01ABAE03C72E2A69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1b:18:e5:35:43:f4:b5:d4:41:d6:88:44:9c:
2c:d2:7a:65:4c:7d:d3:a2:e0:e4:d3:08:78:54:6d:
95:e1:3f:e7:14:86:a4:09:dc:e5:45:90:15:05:7b:
f4:93:4d:b4:a6:79:7c:31:a2:a8:9c:d8:0a:12:b3:
df:e7:4c:71:78:a3:09:84:8c:bd:94:0a:5a:14:de:
72:d8:8c:fc:2e:87:68:a2:82:5e:2d:51:ff:f4:73:
e4:a7:22:70:7c:37:ae:78:a6:4c:4b:b6:8a:2d:f4:
fd:8f:da:cc:04:4f:46:06:21:0e:7e:47:db:67:86:
49:34:49:9f:9c:1d:7f:50:9b:99:d3:c5:5d:6a:af:
77:5a:1a:bf:66:ce:4a:9c:11:2d:e2:fa:f5:b5:0b:
78:c3:80:53:5e:96:9d:18:cb:a4:ce:ed:84:c4:30:
85:93:8d:d9:81:8a:05:2f:b9:ae:0d:a4:95:4e:99:
80:87:77:5b:54:27:a7:27:cd:90:14:ad:54:0c:b4:
21:24:d8:b8:2d:a9:c4:1b:60:ec:7a:d4:e8:04:e5:
66:ad:e9:29:c6:aa:f6:a9:6f:43:72:46:65:f5:3d:
6f:6e:4a:c7:bc:a2:ca:18:e8:5b:90:38:30:52:ad:
aa:7e:f1:c6:bd:46:37:be:8e:80:12:da:d2:62:74:
0a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B8:16:05:C2:B5:45:76:6A:CD:6C:BD:01:AB:AE:03:C7:2E:2A:69
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/srgWBcK1RXZqzWy9AauuA8cuKmk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.224.0/21
Signature Algorithm: sha256WithRSAEncryption
07:b3:98:24:3c:8d:ca:bc:e7:dd:a9:39:22:b0:f8:b8:3a:1d:
97:07:f8:9f:22:99:9c:42:06:22:5b:57:5f:d0:31:2f:c3:ef:
32:11:df:80:f7:45:a5:16:1b:cb:90:48:af:a2:56:14:1f:b5:
8c:7a:ad:97:6e:33:b0:d6:e0:1d:7f:85:34:08:85:a2:4a:52:
c3:8f:e9:63:30:2b:e7:03:c8:7c:fe:96:d7:b5:16:e6:03:26:
88:8b:09:7a:7c:9d:0f:7f:ff:4f:76:e5:95:44:03:62:68:f6:
43:26:f9:09:1e:b7:e6:ed:dd:cb:fa:b6:61:44:7b:90:1d:40:
a8:9b:3d:c4:a2:5e:3b:95:da:34:10:64:4a:b4:5c:f3:f2:d1:
e9:59:1a:c9:77:26:a8:ec:76:77:04:b9:02:52:3d:e5:82:b4:
38:88:98:65:df:1e:d5:2e:43:bf:7b:ef:e2:a8:b2:28:e8:63:
90:5a:9e:60:f3:26:40:f7:7d:25:12:3c:92:a0:7c:9c:93:ab:
3a:c2:f8:10:64:a0:6b:41:8a:3a:25:76:cb:47:1a:60:00:74:
26:7d:ef:d7:f5:cd:b0:0f:51:7e:8b:d4:ae:7d:b5:f4:03:b0:
de:59:71:1e:4a:ed:a2:90:b9:3e:a5:a1:43:80:aa:98:9d:6f:
8d:6e:cf:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:18 2025 by rpki-client