Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2WmWbfzvktnqCwULXIeB3cwCR-8.roa
File: 2WmWbfzvktnqCwULXIeB3cwCR-8.roa (raw, json)
Hash identifier: U4eGUHqdgOm9kafTm2fXVneUrjYL0fESisjtrB8U7LQ=
Subject key identifier: D9:69:96:6D:FC:EF:92:D9:EA:0B:05:0B:5C:87:81:DD:CC:02:47:EF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1AC9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2WmWbfzvktnqCwULXIeB3cwCR-8.roa
Signing time: Wed 29 Sep 2021 02:45:45 +0000
ROA not before: Wed 29 Sep 2021 02:45:45 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.193.184.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6857 (0x1ac9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:45:45 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=D969966DFCEF92D9EA0B050B5C8781DDCC0247EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:68:a7:da:a5:1a:38:7a:c9:d9:52:43:c2:61:
93:63:07:cd:a6:60:af:86:ca:b9:32:31:3f:9c:fa:
17:34:c0:f5:80:1c:b4:20:b0:e3:23:c5:e2:72:1f:
3c:ed:c5:7f:c3:68:de:30:72:22:ec:a2:46:69:dd:
15:67:d6:bf:f1:f6:4f:f2:7c:c0:0a:46:3a:70:3f:
97:82:eb:23:69:f7:b2:c0:50:25:7a:50:0f:aa:61:
a6:9c:f6:58:e0:2c:9f:e8:73:ed:9f:bd:8f:f8:71:
97:c0:55:cc:3f:e1:c2:08:02:06:5b:97:53:ff:e3:
c1:75:b0:89:81:89:ef:b5:62:dc:db:a7:1c:9c:da:
c1:fe:20:c3:9b:a3:f2:47:f3:2b:f0:6e:d1:74:14:
4e:d2:d0:5e:6a:b9:7a:c9:01:4b:0b:45:2f:32:c6:
08:4e:50:c8:c8:6b:71:51:18:41:57:eb:c2:06:18:
6d:b7:21:cd:b7:27:e9:f3:a1:91:ee:0a:c8:ad:ab:
aa:76:99:23:70:ac:9b:43:af:6d:58:2f:e3:05:65:
87:9a:e3:c5:b2:e4:72:50:2f:06:3c:f8:54:6c:1f:
2f:06:27:db:74:8c:82:60:b0:0f:fc:41:4e:2a:28:
1d:cf:ad:dc:a4:a4:ed:d8:00:7c:d5:7b:ac:e4:d4:
a8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:69:96:6D:FC:EF:92:D9:EA:0B:05:0B:5C:87:81:DD:CC:02:47:EF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2WmWbfzvktnqCwULXIeB3cwCR-8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.184.0/21
Signature Algorithm: sha256WithRSAEncryption
af:c0:ab:a1:2a:f8:cd:93:ab:44:18:36:88:8f:e1:05:a6:ee:
72:fc:e6:aa:b0:cb:95:95:51:7c:c7:9b:2f:1b:69:0b:de:dd:
89:56:df:eb:b9:40:15:16:f1:86:55:25:db:7e:f9:4a:ad:5c:
a5:9b:b8:29:8b:92:73:2d:4f:69:62:79:55:1e:6d:f7:7e:76:
d8:82:02:85:0e:66:e5:75:09:e1:a6:7b:1d:cd:12:64:58:4e:
7d:b2:50:52:75:1c:47:5b:9f:67:09:2e:95:20:2f:ed:a0:3b:
04:d5:3c:97:fe:32:d6:ef:1d:e3:11:e4:03:55:fa:e5:a8:c1:
f5:f3:65:3e:8e:22:5d:da:a5:ec:f6:8b:36:b9:68:59:a1:49:
ec:6a:6c:26:ad:ef:16:3c:5f:12:46:e6:80:c5:7a:38:7a:19:
3a:52:31:7d:a0:63:04:2f:a0:bb:28:bb:95:cd:0a:cb:8c:9f:
d0:21:1b:d8:c9:e2:99:8e:aa:4d:ad:a5:60:90:e1:ca:df:2e:
ad:1f:5f:25:ad:92:fc:48:b8:cf:29:f2:80:40:0e:e0:b4:d2:
5c:60:47:c5:9a:3e:99:e3:35:e3:dc:8f:21:c5:58:e8:5d:31:
4f:4a:40:75:67:e6:fc:b6:3b:4f:54:9e:4d:53:62:1c:a8:49:
9d:b7:da:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:23 2024 by rpki-client on console-ams.rpki-client.org