Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yPszRJOMJFUPiN1z88eTqaCmzrI.roa
File: yPszRJOMJFUPiN1z88eTqaCmzrI.roa (raw, json)
Hash identifier: ONdcFKpinvLfLYjWAZQff7a/dF0nO5rQgaKZo6Ua6ek=
Subject key identifier: C8:FB:33:44:93:8C:24:55:0F:88:DD:73:F3:C7:93:A9:A0:A6:CE:B2
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1BD9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yPszRJOMJFUPiN1z88eTqaCmzrI.roa
Signing time: Wed 29 Sep 2021 02:47:04 +0000
ROA not before: Wed 29 Sep 2021 02:47:04 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.195.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7129 (0x1bd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:04 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=C8FB3344938C24550F88DD73F3C793A9A0A6CEB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:de:46:77:dc:d2:c4:d5:d2:80:1c:27:74:2b:
59:ea:1f:b4:fa:a7:81:f9:4b:fa:cc:d2:b4:78:9a:
9e:2f:38:1a:97:12:56:25:29:1e:b8:10:2f:7c:53:
12:2f:ef:c6:9a:0d:75:52:91:c6:22:81:b4:c6:44:
97:44:ea:c9:86:7c:bf:27:bc:7c:9e:b9:f5:52:6d:
51:0a:c4:f3:38:0f:0f:40:f3:57:10:1f:37:97:59:
ee:ff:1e:82:37:35:5c:10:d6:db:0f:9b:5f:61:39:
49:f9:95:45:27:b5:0b:b0:a0:2e:1a:01:7d:71:66:
ea:00:5a:c4:68:92:aa:aa:cf:9a:be:53:9f:d3:c4:
b7:39:7b:b0:f7:aa:1f:eb:ec:03:8d:05:1f:27:6d:
44:b2:bb:af:30:94:a5:75:ca:bc:43:2a:c4:dc:48:
63:62:e4:ba:f0:82:12:15:af:36:42:c1:de:91:7f:
9f:85:e3:af:02:47:42:60:7f:8d:33:74:48:5a:b0:
8c:ea:db:3a:04:59:0e:f4:d2:a6:1d:8c:31:36:53:
1c:00:50:29:29:9f:e8:3d:5c:fc:cf:4b:08:dc:14:
00:2b:04:ab:6c:fa:d1:0c:81:7d:c9:d0:ac:ea:e6:
ef:06:8b:9e:41:3a:36:0a:08:a4:1a:12:a8:31:45:
97:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FB:33:44:93:8C:24:55:0F:88:DD:73:F3:C7:93:A9:A0:A6:CE:B2
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yPszRJOMJFUPiN1z88eTqaCmzrI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.149.0/24
Signature Algorithm: sha256WithRSAEncryption
98:62:2e:cb:88:65:38:be:18:b9:2d:27:9e:3f:06:8a:eb:fc:
c9:b2:6d:c1:95:54:21:95:27:cb:c9:a0:19:5d:ef:7e:6a:11:
96:b8:ca:4b:d3:52:21:4f:eb:a8:d0:4f:97:e1:ed:0a:ea:4d:
dd:52:d6:7d:d1:a7:0a:53:dc:f7:70:6b:5e:8e:dc:65:72:72:
10:51:b4:69:6a:17:b2:72:de:15:ca:0b:96:1e:06:51:f8:2f:
de:2c:bf:da:ff:87:6f:e0:99:a3:39:15:a0:40:22:08:8e:1d:
aa:e3:ca:3b:6b:8f:81:c8:2a:82:20:a6:41:71:d4:9b:e8:b9:
29:b8:ba:38:60:67:3f:c6:84:b9:b6:93:3f:96:50:be:4f:03:
81:60:17:ea:b0:4f:d0:0b:31:db:75:fe:5e:81:de:4b:4a:96:
3b:18:9a:58:e7:2a:f3:d8:85:33:06:56:74:45:91:17:1d:1c:
03:55:40:c5:20:93:1d:45:af:89:c7:a3:6b:53:aa:4a:4b:26:
b7:d9:74:ab:82:60:bb:92:3d:c6:8c:21:81:77:94:10:59:ef:
5e:a6:ce:bb:38:a9:ff:bf:fc:29:3f:e0:fb:49:0d:84:4b:bd:
55:bb:62:04:e9:b7:75:5f:f4:7d:72:d7:de:e9:c3:0d:c5:a9:
38:22:9d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:35:14 2025 by rpki-client