Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wkdsQC10XK_NKEUi01PZRC1b_x4.roa
File: wkdsQC10XK_NKEUi01PZRC1b_x4.roa (raw, json)
Hash identifier: /MueIYBr3iIID1si4qftnw6D41ju5js0UThI5hWUvLQ=
Subject key identifier: C2:47:6C:40:2D:74:5C:AF:CD:28:45:22:D3:53:D9:44:2D:5B:FF:1E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wkdsQC10XK_NKEUi01PZRC1b_x4.roa
Signing time: Thu 15 Sep 2022 02:52:22 +0000
ROA not before: Thu 15 Sep 2022 02:52:22 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.112.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:22 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C2476C402D745CAFCD284522D353D9442D5BFF1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3a:10:f8:ed:7d:40:95:a8:94:81:97:ff:7b:
f5:41:dd:79:3c:d9:78:0d:5f:d7:40:4c:f3:fc:b5:
f6:1e:17:8f:b2:96:43:0f:d2:1c:36:ea:3b:b9:d4:
ae:28:5d:16:d9:5c:22:b4:76:3c:c6:df:9d:af:92:
dc:1f:05:fc:f7:18:7e:e4:f2:48:d5:3e:c4:f8:0e:
48:04:7c:e2:b5:fe:41:f6:ca:ae:29:60:60:eb:6d:
14:09:d5:13:a5:9c:4b:83:57:a7:b5:38:f6:d8:59:
29:f1:2f:27:21:0b:d9:e3:8d:8b:c5:c4:06:a0:f2:
88:18:8d:0a:13:dd:a3:fd:cd:a5:a0:37:f0:55:da:
44:3a:0d:a4:7d:0b:50:74:8b:eb:dd:f9:5e:b5:1d:
c7:a6:9a:eb:c0:40:6b:93:ca:22:e6:f6:09:1f:73:
37:a3:72:95:05:54:d1:eb:33:80:0f:fe:48:41:8f:
ca:33:b7:35:82:82:59:64:91:d5:47:44:2b:09:a6:
6e:e6:7d:31:d3:5c:96:4a:7f:48:88:94:23:ed:bc:
e4:4a:52:9d:d0:97:a9:67:df:f2:65:8b:66:3e:eb:
62:c2:85:31:70:3e:20:30:b0:84:97:dd:72:df:81:
80:63:e0:ee:16:1b:37:99:78:86:58:98:2c:53:b0:
dd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:47:6C:40:2D:74:5C:AF:CD:28:45:22:D3:53:D9:44:2D:5B:FF:1E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wkdsQC10XK_NKEUi01PZRC1b_x4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.112.0/21
Signature Algorithm: sha256WithRSAEncryption
8a:c2:eb:66:f9:64:e4:5d:47:6a:5d:eb:25:8a:e8:8b:59:76:
bd:88:87:92:e1:e3:ec:a7:94:c2:8f:0f:0f:e4:db:a3:17:d8:
5b:5c:b4:87:f7:f7:9a:bd:48:88:ca:84:dc:83:fb:98:b0:88:
81:d8:ac:61:c8:84:8a:ce:89:89:30:e6:4c:8d:d8:79:6a:c7:
2b:86:9c:e2:7d:66:e6:4a:b5:9d:89:9c:e0:f8:16:5a:fc:ea:
97:29:2d:1d:eb:93:ed:90:04:f5:c6:e8:19:eb:22:01:95:a9:
f3:7f:05:61:78:7c:39:2e:05:16:f8:d2:79:7c:75:42:47:a2:
82:7e:8a:71:8a:59:16:b1:b3:0c:e8:7f:15:9d:90:8d:bc:eb:
92:bc:96:16:5c:5b:3e:3d:73:67:c4:2e:70:c2:8b:6b:43:59:
ab:08:0b:be:06:1f:ee:47:a0:93:ed:01:ff:ca:8a:b2:b7:65:
ec:d2:0b:cf:b2:b8:23:96:a2:18:91:4f:6c:6c:77:b0:07:57:
c3:e3:9f:0c:fa:90:e1:6b:7e:d9:d5:a0:f7:4e:90:50:2d:d8:
30:b5:ff:b4:8e:d6:9a:45:c2:3d:33:52:8f:9e:fc:df:30:18:
ea:15:e0:b2:92:03:45:63:31:39:c4:ab:39:2a:2e:d0:b6:82:
92:4e:55:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:33:56 2025 by rpki-client