Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/y3Goll8ShLJ2j2zU6GH1zEYktGo.roa
File: y3Goll8ShLJ2j2zU6GH1zEYktGo.roa (raw, json)
Hash identifier: 0UKpA7PHUb8u+tIshH740iFcbBz0c8tAtlfzb0H0LvA=
Subject key identifier: CB:71:A8:96:5F:12:84:B2:76:8F:6C:D4:E8:61:F5:CC:46:24:B4:6A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 16E1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/y3Goll8ShLJ2j2zU6GH1zEYktGo.roa
Signing time: Sun 07 Feb 2021 12:15:02 +0000
ROA not before: Sun 07 Feb 2021 12:15:02 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 118.232.0.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5857 (0x16e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:15:02 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=CB71A8965F1284B2768F6CD4E861F5CC4624B46A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:94:52:55:db:bd:91:de:6e:b3:78:26:f3:df:
9b:ba:16:ed:e4:9d:1c:6d:d7:72:26:36:a4:e1:64:
4f:54:e6:f1:0d:53:98:6d:da:93:39:76:92:61:d9:
3a:d1:9c:3b:83:3b:41:77:09:d3:28:f2:d0:25:31:
ec:9d:aa:f3:54:48:e1:2a:f4:db:c3:18:be:79:fe:
ea:ca:1f:c4:64:b5:d3:23:04:ae:84:bf:07:dd:6e:
3d:ef:1a:60:97:14:cd:d3:87:51:ec:22:ee:7f:e6:
53:a9:5c:73:d9:94:2e:a8:f8:ca:29:d8:34:4f:69:
66:da:27:88:3a:c3:e4:e0:d3:89:7e:b2:98:fd:7b:
7a:07:bf:d3:7a:d3:1e:df:25:58:bb:5f:31:be:38:
da:16:64:9b:69:47:36:73:94:79:82:77:51:a7:c9:
d9:56:f1:df:cc:39:7c:c6:73:e1:a8:bd:66:9e:12:
1b:90:c8:e5:9b:71:f0:73:11:c4:5f:21:17:71:5f:
1a:52:3a:0d:05:ca:0d:b6:93:8f:66:ce:09:94:58:
8b:a2:ad:9f:ef:bd:ab:9f:a4:4a:fd:5c:1a:f5:68:
50:7c:4b:96:c9:61:f2:18:73:7e:3a:e2:33:a0:d4:
39:b7:e6:64:b1:d0:0a:73:57:64:83:28:08:c6:00:
20:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:71:A8:96:5F:12:84:B2:76:8F:6C:D4:E8:61:F5:CC:46:24:B4:6A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/y3Goll8ShLJ2j2zU6GH1zEYktGo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.0.0/21
Signature Algorithm: sha256WithRSAEncryption
6e:b5:d9:72:ca:5a:de:fd:79:7d:9a:5e:60:4a:21:35:87:9a:
b1:ab:c1:33:e0:6d:37:d6:9c:53:6a:f9:21:38:63:1c:46:c9:
55:ec:78:db:0b:1c:05:df:e9:15:36:28:c5:26:4b:cc:0c:08:
a4:72:d8:c7:e1:6e:15:46:97:ab:e0:d6:cc:af:0a:1e:c0:52:
5f:51:45:7f:00:2f:a7:2f:f0:87:7f:29:9a:9d:38:9b:ba:16:
75:61:9a:4e:51:eb:ef:b0:ac:88:1b:0f:3e:28:ae:f4:2f:db:
44:ae:17:00:85:fd:d9:fa:a4:4a:82:cc:e5:57:e9:d4:1e:6e:
28:14:e1:18:3b:82:a4:35:d0:63:31:2e:bf:f9:35:b5:be:16:
af:9b:08:19:6e:e3:22:74:95:1f:c8:c6:e8:67:f1:9e:8b:72:
c4:28:c0:c0:ab:6c:17:13:e2:66:f3:c6:6e:ef:84:3e:98:96:
e4:0b:36:ae:18:ff:61:db:db:1b:a1:90:1a:00:73:80:ad:57:
ea:b1:54:15:62:6b:e8:5a:74:6e:0b:84:51:8b:69:0e:a8:24:
b8:b6:2f:35:9a:e4:14:c8:e0:83:d8:cb:c6:d9:89:39:0c:2f:
8b:d9:c0:8b:9c:ee:a5:74:02:50:3b:16:13:7f:bd:a5:6d:85:
a1:d2:3a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:13 2025 by rpki-client