Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uz0GSjOenbdhs-E38p1zdLabPRc.roa
File: uz0GSjOenbdhs-E38p1zdLabPRc.roa (raw, json)
Hash identifier: VGehu62ZLaZBbgI/LKiQ9uxEioI+OjiT2YYNce3DJDs=
Subject key identifier: BB:3D:06:4A:33:9E:9D:B7:61:B3:E1:37:F2:9D:73:74:B6:9B:3D:17
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 18B7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uz0GSjOenbdhs-E38p1zdLabPRc.roa
Signing time: Sun 07 Feb 2021 12:52:59 +0000
ROA not before: Sun 07 Feb 2021 12:52:59 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 118.233.128.0/17 maxlen: 17
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6327 (0x18b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:52:59 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=BB3D064A339E9DB761B3E137F29D7374B69B3D17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:45:ed:b5:c1:4e:d1:b9:72:53:66:db:75:62:
f5:a2:91:12:71:c8:65:a9:36:96:f2:49:4d:15:b8:
dc:ac:8b:26:0f:5f:57:2e:49:49:4f:c1:cc:c7:da:
cc:25:d5:7c:c5:c0:33:cc:af:d6:6b:ba:cf:cc:cf:
a4:0e:83:a0:64:e6:4b:70:39:c9:d7:1e:d0:16:f5:
87:5b:5e:e4:46:a1:93:3f:0b:cc:8f:f7:22:5c:28:
42:85:fe:6a:bb:a7:10:c8:03:31:e7:4e:9c:2e:96:
0f:e6:98:eb:36:b6:17:f0:b5:15:64:71:d3:cf:16:
75:91:24:34:77:36:69:dd:30:e0:04:5e:be:fb:9b:
4e:2d:88:08:c1:c8:c7:00:ef:4b:60:0f:85:7f:e8:
c2:d1:95:96:de:4d:fe:8b:fd:36:03:39:1b:60:b4:
e4:03:23:f8:a3:b5:47:fd:29:5a:4a:4b:6f:05:11:
d0:2a:38:24:c8:1e:b7:f1:62:f6:d9:7f:dc:7b:30:
07:9f:9e:9b:42:1c:cf:51:23:0a:d2:70:cb:d4:11:
e0:2b:0c:9e:83:ba:a5:d4:60:11:e4:f4:9c:06:12:
77:fb:e7:51:ea:b4:59:d2:fc:98:a2:0c:3e:f6:f3:
9c:75:f7:81:75:64:8b:bb:7a:b9:ca:0d:d7:67:16:
33:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:3D:06:4A:33:9E:9D:B7:61:B3:E1:37:F2:9D:73:74:B6:9B:3D:17
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uz0GSjOenbdhs-E38p1zdLabPRc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.128.0/17
Signature Algorithm: sha256WithRSAEncryption
90:9b:72:8a:ba:a8:1a:c5:b1:25:e2:b3:1b:f1:f3:99:49:84:
c7:37:25:9a:75:52:64:56:97:1d:9f:f0:87:1d:08:7c:bd:c9:
65:a8:19:15:cc:3c:42:6c:3b:12:2a:b7:de:06:a0:12:0b:c0:
e5:14:81:95:31:58:02:3b:58:86:45:91:d4:16:d8:f6:6c:53:
80:b8:b5:af:92:74:3f:60:33:e7:64:64:29:81:40:3a:62:8b:
8a:60:a9:5f:a7:3a:bc:cf:4b:b1:ad:a1:0e:9d:88:b8:72:69:
35:1d:6d:1b:bd:da:95:18:2e:9a:86:7d:49:c0:d8:e9:0c:bc:
63:71:98:56:0e:8f:07:5d:37:d4:20:54:8d:16:d4:65:ce:9a:
a2:f6:5f:d0:84:67:ac:ce:30:a2:6f:bf:50:34:b5:10:a6:0e:
6a:5b:91:e5:31:65:34:31:5e:3e:27:0a:8b:de:7f:a1:cc:7d:
9d:fd:af:0a:9c:c4:2a:f2:2f:85:c3:36:90:80:3c:a7:e2:5f:
6f:34:db:44:4f:bc:67:32:ff:e1:ce:24:73:36:f8:e8:43:7d:
87:f0:a0:0b:bd:3e:a6:ae:cd:7e:f6:36:bd:3a:67:0a:a8:ea:
29:4b:aa:4b:a9:7f:e4:b0:96:8a:ab:5c:08:af:7b:ad:f1:e5:
20:01:c3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:24:48 2025 by rpki-client