Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8iFhAvpTza8dEPGxylATJayhl-8.roa
File: 8iFhAvpTza8dEPGxylATJayhl-8.roa (raw, json)
Hash identifier: GhtEUnmjn8DQHku9sN9vfMhxk80L9dBTfuvxIAa3nvM=
Subject key identifier: F2:21:61:02:FA:53:CD:AF:1D:10:F1:B1:CA:50:13:25:AC:A1:97:EF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1861
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8iFhAvpTza8dEPGxylATJayhl-8.roa
Signing time: Sun 07 Feb 2021 12:28:50 +0000
ROA not before: Sun 07 Feb 2021 12:28:50 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.192.252.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6241 (0x1861)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:28:50 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F2216102FA53CDAF1D10F1B1CA501325ACA197EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2b:09:77:83:e6:cf:4b:2a:e1:a2:80:8b:db:
6e:12:0e:7b:9c:f8:00:d2:88:01:83:34:a1:bc:e6:
3c:9f:fb:bf:fd:91:c3:c0:b0:12:ee:79:88:ba:bf:
64:4b:1c:87:c6:84:5b:46:4a:19:0b:86:ac:4e:f9:
97:b9:b4:e5:bf:12:fa:33:30:e0:11:ad:3a:f9:6f:
64:98:ae:44:be:00:29:c5:5d:71:15:d5:4a:97:52:
f7:6d:4e:b3:f5:d4:55:3d:b0:94:d4:f2:cd:ee:99:
b6:a6:0b:6e:21:51:5a:c8:c2:c5:98:b4:15:e7:5f:
76:0c:ef:8d:55:aa:d6:46:42:87:fc:49:05:1d:c6:
00:7d:78:ea:ba:89:be:d9:1f:1b:8b:72:aa:78:33:
ae:5f:c6:65:2c:87:46:09:bc:fc:77:76:c1:aa:d8:
48:1d:18:21:02:fa:a0:09:ba:c1:bf:8e:07:ea:76:
92:a2:aa:8f:67:28:4a:7b:ba:96:e4:16:1e:46:da:
2b:80:b7:86:31:a7:f3:80:ca:00:63:82:03:78:a0:
53:91:b8:27:ae:c6:3c:ce:a6:05:0e:a7:72:f6:37:
9c:a5:66:ba:57:1f:e0:39:5f:4f:e3:de:87:73:13:
05:0b:97:50:42:15:8b:be:b4:61:26:0a:34:e1:bd:
6b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:21:61:02:FA:53:CD:AF:1D:10:F1:B1:CA:50:13:25:AC:A1:97:EF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8iFhAvpTza8dEPGxylATJayhl-8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.252.0/22
Signature Algorithm: sha256WithRSAEncryption
05:97:e0:46:04:99:cf:94:a0:8d:87:e2:ec:16:f8:e3:ac:bb:
66:ed:1f:54:df:ee:3a:a5:ff:2f:c0:e2:f5:e8:38:44:ec:b9:
52:10:e9:8c:7f:6b:a9:ed:aa:92:29:09:f5:71:0d:14:1c:06:
ee:ba:72:71:39:a4:70:78:48:f7:47:23:6e:92:ed:c5:12:22:
0a:13:08:d9:4d:d7:47:ac:c4:c1:66:0e:28:4e:99:7c:e1:97:
c9:58:7a:e6:86:51:45:d7:4f:02:90:e5:52:a9:96:6f:9c:02:
8b:40:97:f1:10:88:2c:ac:bf:44:c6:5e:d7:a3:e8:8e:a8:55:
8e:0f:55:65:64:0c:1d:35:da:9f:8c:2d:f3:02:77:2d:9f:2e:
1a:95:6e:63:ea:41:66:82:99:ab:e3:79:dd:cc:35:5d:68:c1:
85:e0:7b:a8:fe:35:75:9f:32:39:0a:eb:cb:c4:17:b5:1e:d0:
c8:d4:a0:a6:45:cc:11:c0:70:0f:f9:f0:de:cf:7c:36:36:d9:
b9:04:99:d5:56:2b:9a:a8:c7:7e:a8:b3:3c:6c:b9:e7:2d:a0:
26:ca:f7:34:5f:9c:a3:61:eb:dc:50:8a:5e:03:49:ca:87:2d:
54:46:2b:d8:2e:8b:ea:7b:3a:ad:05:86:ca:e7:c2:20:ba:bc:
f1:72:13:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:10 2023 by rpki-client on console-ams.rpki-client.org