Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vljSdaE8Sby8ASJvcN7m3DDDI3k.roa
File: vljSdaE8Sby8ASJvcN7m3DDDI3k.roa (raw, json)
Hash identifier: 3TenmYcjXTc/HCLVTmfYiX72SaLXnUIu7k3gzopAGS4=
Subject key identifier: BE:58:D2:75:A1:3C:49:BC:BC:01:22:6F:70:DE:E6:DC:30:C3:23:79
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1A96
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vljSdaE8Sby8ASJvcN7m3DDDI3k.roa
Signing time: Wed 29 Sep 2021 02:45:31 +0000
ROA not before: Wed 29 Sep 2021 02:45:31 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.192.112.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6806 (0x1a96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:45:31 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=BE58D275A13C49BCBC01226F70DEE6DC30C32379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:95:b5:ff:5e:ba:52:a2:96:da:4e:3f:4c:b8:
10:85:28:ca:db:9a:4c:2a:fa:6c:8f:69:69:60:86:
38:ad:7a:dd:7f:30:3c:ec:3e:a0:79:dc:14:f8:69:
aa:0f:5b:fa:7d:ed:48:8f:04:a2:f8:b3:96:1d:9f:
9d:d7:af:e4:97:26:fc:bd:62:a6:2d:43:e9:81:e1:
45:15:0d:00:2a:24:6c:3d:92:6a:3b:4b:9e:a7:ee:
a6:5a:35:1d:fb:da:a6:d7:a5:e4:c9:c4:08:eb:ed:
9d:ff:bc:76:65:51:39:22:b9:d2:06:41:23:c8:9b:
26:bb:65:22:3d:6a:c6:6e:46:78:0e:01:11:a3:f0:
5c:c8:f5:72:f6:fd:c0:cf:ee:dc:57:65:8f:cb:97:
7c:61:4b:9b:5e:e6:24:f4:20:c7:d6:f1:5d:15:c7:
26:03:b6:69:d6:f0:15:58:17:d7:72:51:86:73:dc:
67:b7:c7:a8:bc:45:4b:bc:c8:20:21:a1:5d:aa:ca:
1b:3f:d8:11:cf:2f:ea:56:41:0d:07:ea:88:73:04:
5c:bf:ef:18:9a:ac:f8:ba:37:96:c7:ae:85:1c:26:
cd:d6:61:74:89:df:68:55:da:f2:82:42:5c:ec:e2:
4a:0c:73:4a:1e:9b:41:31:35:79:72:8e:c8:6a:e5:
17:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:58:D2:75:A1:3C:49:BC:BC:01:22:6F:70:DE:E6:DC:30:C3:23:79
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vljSdaE8Sby8ASJvcN7m3DDDI3k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.112.0/20
Signature Algorithm: sha256WithRSAEncryption
09:fc:4c:6f:d7:b9:70:22:be:57:aa:b9:04:53:e4:18:2d:cf:
97:76:23:dc:61:4d:e3:97:c4:8a:84:2d:66:24:e3:81:a4:3b:
1f:ab:a8:2b:5c:98:cf:a2:1b:ba:60:2a:b3:6b:61:99:de:cd:
3e:36:d9:0b:b0:cf:14:87:0f:ca:4a:18:6f:b7:2a:02:0a:ba:
25:32:5c:2b:d1:57:05:d7:1e:bb:7a:1a:c5:e9:a1:46:14:c7:
fc:fc:b3:0e:51:ba:52:0c:3a:17:fc:82:e7:81:71:cc:34:54:
54:13:a1:de:d0:b9:e3:70:e5:2d:fc:03:47:fc:a6:06:df:8a:
66:82:56:b1:c6:d0:8d:79:92:1b:d9:4c:f1:d2:63:66:f9:30:
df:f4:13:0a:4a:22:0c:34:7b:55:8e:18:b6:b6:82:ff:8a:41:
27:94:86:33:cf:a3:82:48:0f:5a:64:4f:de:95:15:e5:ff:fe:
3d:ad:37:6c:bf:4c:bd:72:0c:76:db:a6:90:ee:bb:1a:73:47:
a2:82:e2:55:23:98:f2:d6:4e:61:e5:80:af:f2:1d:31:59:07:
1e:31:c8:c3:05:e7:39:0a:d7:54:5a:cb:f2:8b:9f:77:ab:fe:
3e:06:53:51:fe:a8:a6:44:03:e0:38:92:11:f1:a4:e8:9d:b5:
90:7b:78:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:38:35 2025 by rpki-client