Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7WVrdEI32BVChTnUKNcLXT9rZs8.roa
File: 7WVrdEI32BVChTnUKNcLXT9rZs8.roa (raw, json)
Hash identifier: wSslOoLSWQWK9+5vR3UUZIT4cMu1jjtcC1j97ABPLkM=
Subject key identifier: ED:65:6B:74:42:37:D8:15:42:85:39:D4:28:D7:0B:5D:3F:6B:66:CF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1A70
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7WVrdEI32BVChTnUKNcLXT9rZs8.roa
Signing time: Wed 29 Sep 2021 02:45:21 +0000
ROA not before: Wed 29 Sep 2021 02:45:21 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.195.204.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6768 (0x1a70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:45:21 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=ED656B744237D815428539D428D70B5D3F6B66CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8f:63:99:2b:ec:f8:9d:16:a4:71:81:da:e1:
51:82:3b:90:4a:f0:11:1d:96:69:b6:65:b7:56:a0:
0d:4e:45:17:dc:0d:37:de:c9:47:40:19:2a:35:da:
2b:30:6c:0d:c5:fc:7d:44:46:07:f0:6a:ec:20:3d:
51:4e:32:3d:8b:7f:d7:d4:4c:c7:53:59:ec:54:f2:
57:cd:e7:18:2c:b4:4b:1b:cc:d8:10:00:e1:e6:ff:
80:ae:68:c0:56:ba:e2:a5:ba:d7:ec:15:ed:9f:ca:
22:06:8f:d8:72:ec:8d:91:b5:dd:a8:50:da:6e:8d:
86:01:8a:30:a7:65:1c:de:60:d2:67:5d:0d:bf:49:
7c:33:56:8c:23:52:81:72:42:3e:03:a0:8b:e2:08:
65:62:de:22:87:c0:37:b7:3b:f2:6b:2a:af:de:b2:
67:24:03:b9:6a:95:40:22:6a:5e:28:7a:d1:d9:55:
c0:28:d0:05:b7:b3:c6:ee:c8:b7:71:2f:08:4a:fe:
bf:a6:5b:14:4e:39:9b:01:ad:4c:17:e3:54:f2:21:
cb:1a:f4:26:99:16:00:ba:2e:0b:dd:ca:59:53:8d:
b7:d9:82:04:24:9d:f1:05:1c:21:b3:fe:b4:17:ea:
66:f5:94:9e:42:fd:61:0f:21:30:ff:de:4b:1f:77:
b7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:65:6B:74:42:37:D8:15:42:85:39:D4:28:D7:0B:5D:3F:6B:66:CF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7WVrdEI32BVChTnUKNcLXT9rZs8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.204.0/22
Signature Algorithm: sha256WithRSAEncryption
27:e9:94:a7:de:c6:16:3d:6e:fb:3d:74:09:a6:25:76:b0:78:
b1:0b:67:13:2e:c4:53:a2:9d:e2:87:1d:2e:48:53:b6:44:1a:
af:de:57:f2:84:ed:a1:e1:27:8a:4f:91:3a:1e:e3:af:00:5b:
7b:04:44:33:27:76:76:e6:f6:c1:9c:f0:09:76:9c:19:e2:1d:
11:33:d7:1c:89:7a:9b:eb:e6:4d:73:23:41:b4:09:8e:f2:1f:
69:8f:bf:ee:2e:a4:1d:9c:27:1b:3c:95:9c:67:77:3f:0d:df:
b2:ed:1a:2d:fe:03:2d:44:a7:4b:d2:1e:32:56:3f:7d:f6:20:
70:3d:31:02:7c:fb:84:d9:ec:41:ec:61:a4:c0:e9:a2:b1:a6:
02:20:f6:1a:0d:03:fa:4b:f9:e7:54:68:7a:45:66:95:f0:77:
33:8c:64:e6:a0:b8:d4:79:59:5a:be:28:c0:00:42:f2:0b:d4:
e3:0f:c2:7b:e9:6b:b7:f9:b2:a4:05:91:94:72:7d:c3:d2:77:
7b:8d:33:06:7e:06:5e:bd:20:3f:c3:d0:b6:71:96:0f:df:6b:
83:4c:4d:ee:b6:f3:02:d3:1e:69:d1:1f:b4:b3:e8:83:0b:a8:
08:86:6e:55:c0:43:a4:38:e2:ea:a1:2e:12:73:85:11:55:3a:
1a:22:c2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:48 2024 by rpki-client on console-fra.rpki-client.org