Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vRigaGA0bPbjL28OWgHgB1OC82Y.roa
File: vRigaGA0bPbjL28OWgHgB1OC82Y.roa (raw, json)
Hash identifier: ndfDvjVZRwVW29ylzUwFrA/rQVwXtZ7nhUdII5tw9r0=
Subject key identifier: BD:18:A0:68:60:34:6C:F6:E3:2F:6F:0E:5A:01:E0:07:53:82:F3:66
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vRigaGA0bPbjL28OWgHgB1OC82Y.roa
Signing time: Thu 15 Sep 2022 02:54:12 +0000
ROA not before: Thu 15 Sep 2022 02:54:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:54:12 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=BD18A06860346CF6E32F6F0E5A01E0075382F366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ec:7b:bb:6b:28:2e:5d:95:cb:76:77:00:d5:
ea:f9:df:93:fb:3b:1d:23:75:f7:9e:d8:95:6e:af:
33:8d:a2:cf:5a:1f:38:ee:72:ce:f5:33:9a:10:d6:
5f:22:6d:15:38:99:95:23:aa:ac:0c:23:bd:7a:04:
74:bc:33:07:70:d4:0a:8e:e0:5a:61:d5:74:19:39:
76:b1:64:f5:3f:65:9d:5c:ad:fe:c0:16:f2:2e:46:
5b:02:db:de:41:14:56:ec:f9:54:d4:29:01:b3:bd:
5a:29:1d:55:81:33:35:a3:3e:4d:3e:89:b7:f9:68:
db:14:e2:bb:96:f1:31:97:8c:b2:dd:7e:10:47:7a:
22:f4:5f:49:4a:03:87:e2:6f:6d:4d:f3:fa:2e:38:
ce:87:c3:4a:d5:43:8a:46:35:95:d7:a8:04:8e:1a:
52:da:7b:ed:f8:25:0b:b5:7f:c0:eb:3b:13:d3:7e:
57:80:63:69:58:48:e3:d8:2e:7f:b6:82:ac:c4:60:
ae:9b:5b:8a:59:89:5f:cd:0f:50:b0:d2:c0:e1:30:
b0:95:49:17:d9:5a:db:fa:25:24:41:7f:f9:39:26:
05:6d:07:78:4d:4d:81:f8:3a:3d:d2:1a:71:ec:2a:
7d:02:ab:9d:ff:4c:fb:83:29:9f:1c:58:70:42:87:
d0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:18:A0:68:60:34:6C:F6:E3:2F:6F:0E:5A:01:E0:07:53:82:F3:66
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vRigaGA0bPbjL28OWgHgB1OC82Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.0.0/20
Signature Algorithm: sha256WithRSAEncryption
57:e9:40:40:08:07:3f:49:fb:13:6f:47:00:38:2e:fe:1c:cd:
62:3e:a7:ce:03:a6:62:ae:53:9a:ff:67:b2:e3:fd:5c:86:30:
72:2d:75:27:d2:6a:c1:79:b5:f2:6a:a1:29:8d:e9:50:0f:8e:
17:39:3f:e9:71:fd:58:49:d5:7f:57:a4:1c:d1:92:91:89:59:
ec:8c:22:a5:f3:23:ee:52:e4:42:2c:be:ab:7f:63:eb:a4:8d:
4b:a7:52:8c:d0:9c:f3:d6:81:85:b8:0b:53:5f:e3:b3:62:b3:
f9:4d:6a:4f:6f:4a:1e:f2:56:6e:cb:e1:dc:cd:aa:a3:8e:21:
77:ec:9c:66:b3:9a:73:89:3e:98:6b:c1:e4:71:2b:3e:a6:21:
59:34:b8:67:89:28:9b:9b:69:08:c1:4a:4d:4b:e4:8b:2a:95:
a7:35:86:a9:33:fd:ac:b6:12:60:3c:a7:65:d7:85:34:14:aa:
93:60:93:c1:29:41:5c:c9:15:13:98:11:02:84:67:f7:ba:1c:
1f:7c:c5:d1:97:59:40:4c:23:81:e0:87:42:ae:62:65:7c:e7:
a0:5c:26:74:eb:4c:04:ef:aa:14:8c:f3:a2:c0:73:c3:7b:40:
e7:90:fa:4e:29:55:c2:74:0d:b2:e1:bf:d3:b8:dd:8b:2d:c3:
44:f2:38:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:25:59 2025 by rpki-client