Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4rbMU8gwwBF8ihacGgPGkdcEOg0.roa
File: 4rbMU8gwwBF8ihacGgPGkdcEOg0.roa (raw, json)
Hash identifier: 3LrOTZrb/OCd4oCMnI61zgx/UgcLbROYLSGOO6Sz5Rc=
Subject key identifier: E2:B6:CC:53:C8:30:C0:11:7C:8A:16:9C:1A:03:C6:91:D7:04:3A:0D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 213C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4rbMU8gwwBF8ihacGgPGkdcEOg0.roa
Signing time: Fri 25 Nov 2022 04:39:41 +0000
ROA not before: Fri 25 Nov 2022 04:39:41 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.20.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8508 (0x213c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:41 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E2B6CC53C830C0117C8A169C1A03C691D7043A0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8a:27:59:39:a1:c7:52:8e:bc:ba:8e:0c:e7:
0b:73:fd:f1:9f:e2:42:96:a4:bf:63:ae:2f:18:69:
0c:1c:bd:9e:ae:de:c8:25:3b:fc:7c:77:14:9d:a4:
0f:42:fd:e4:2b:93:49:82:32:a5:20:82:29:7e:6a:
4a:96:63:9a:46:ec:69:f0:a2:73:ce:00:b3:c9:3a:
d6:61:42:ea:50:47:7f:4d:f2:9e:be:d4:b2:ea:c5:
7d:7a:42:76:ca:29:c2:d8:c8:a0:10:ed:9c:f3:5f:
64:59:01:41:9e:ee:6b:fc:0e:b8:87:94:90:79:ee:
03:c5:69:bb:b2:4b:e7:ef:07:6b:a1:d4:1b:8c:c0:
27:b6:da:c9:75:7b:8a:b1:9e:df:39:ae:67:6e:6d:
6a:ee:97:f2:3f:ed:3b:6c:53:f7:af:e7:3d:46:da:
20:f9:4e:91:bf:76:7f:19:04:63:fc:ef:76:96:5a:
85:6f:93:4e:b6:2d:e4:92:87:08:55:50:c9:4f:9c:
3b:20:e3:01:e3:6b:dd:58:e6:4b:31:b9:90:f9:01:
c8:10:24:ed:b3:13:ea:c3:33:c9:fe:56:59:fc:5f:
ae:a7:50:8b:2c:1a:98:37:7c:f3:73:bf:0e:bb:b2:
3d:f7:2f:fd:29:ff:cd:3d:5e:e4:e7:18:55:09:95:
4f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B6:CC:53:C8:30:C0:11:7C:8A:16:9C:1A:03:C6:91:D7:04:3A:0D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4rbMU8gwwBF8ihacGgPGkdcEOg0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.20.0/22
Signature Algorithm: sha256WithRSAEncryption
72:bb:5a:f5:99:ed:3c:b1:d4:a9:5e:cc:db:14:12:a2:4d:3d:
4c:3e:5f:40:b3:c5:ed:45:4e:f1:51:36:45:b4:77:d0:6a:01:
41:42:44:09:e1:dd:22:75:21:c3:87:be:d2:bb:00:c5:87:ba:
55:99:6b:a5:af:37:ae:6e:17:2e:9d:60:99:08:f0:51:c8:bf:
ac:cc:4c:28:34:95:ea:54:d3:13:33:85:e4:fc:44:98:a7:bd:
b8:da:88:94:be:43:cd:f4:93:6f:1a:71:7e:ab:f4:7d:5e:90:
17:d4:24:d9:92:01:16:82:c6:87:1d:b0:7c:c2:6a:d3:d8:d2:
e8:86:05:17:9d:59:f9:b3:a9:bb:f7:de:cb:09:a9:84:68:b6:
17:30:fc:3f:d9:64:07:60:d5:44:41:0d:72:d2:e4:f1:0b:ef:
78:28:1a:72:d5:66:61:f7:9d:7c:b0:bd:64:f4:6c:ff:d9:27:
fe:6c:90:17:05:fa:b6:88:c9:79:32:94:b5:0a:eb:01:45:7b:
a6:29:7b:89:0e:70:82:04:5d:21:63:b3:12:5e:84:21:f5:79:
d3:42:f1:d5:2a:b3:95:8e:1b:a5:a9:30:e1:81:9c:fb:8e:d8:
48:f5:a2:4d:84:02:09:7f:ed:f4:19:0a:10:6d:71:36:bc:43:
e9:21:fe:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:23 2024 by rpki-client on console-ams.rpki-client.org