Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AGlFww0gxXLO9BMMH9Q4l4xFoxY.roa
File: AGlFww0gxXLO9BMMH9Q4l4xFoxY.roa (raw, json)
Hash identifier: K/ohHRARq0xtZe+bR4NOCVLXkJpbIDcjJ/1M3AWh20I=
Subject key identifier: 00:69:45:C3:0D:20:C5:72:CE:F4:13:0C:1F:D4:38:97:8C:45:A3:16
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AGlFww0gxXLO9BMMH9Q4l4xFoxY.roa
Signing time: Thu 15 Sep 2022 02:46:16 +0000
ROA not before: Thu 15 Sep 2022 02:46:16 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.96.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:16 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=006945C30D20C572CEF4130C1FD438978C45A316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:34:76:8e:d5:19:d9:f6:52:aa:91:1c:77:cc:
20:97:7f:71:69:11:23:13:93:96:b2:b9:04:cc:d8:
1f:00:c3:61:c3:fb:18:e7:bd:9b:f0:f9:0d:c3:1e:
bb:49:16:c0:e9:d9:07:20:b9:85:7b:20:7e:86:dd:
2e:45:df:63:29:ba:e9:5a:ff:9a:1c:8c:d4:8c:73:
61:0b:bd:49:8e:20:db:ba:fa:68:e3:29:7e:8d:31:
89:b8:c7:55:a8:59:41:52:e7:4b:c2:34:72:a9:11:
1d:8a:92:c6:ef:fd:e1:cb:32:53:84:b4:15:99:34:
20:8e:99:44:0c:f5:ec:8b:d3:8b:02:86:6f:a8:27:
f7:73:f8:d0:ac:d9:ba:95:2e:f9:4b:58:ab:f7:6a:
77:c5:76:1a:f0:74:95:54:19:91:e8:8f:c5:02:cd:
12:80:d2:7d:b2:03:39:cd:2a:d2:b1:ff:d1:50:30:
08:14:d0:04:93:fc:47:13:6a:31:a2:9f:15:b3:8d:
de:5d:49:d7:28:f2:6b:ae:15:f2:77:8f:32:6c:6c:
ab:50:75:4d:60:aa:af:b5:31:3f:14:07:1f:ff:84:
9e:25:95:b3:d8:5f:20:eb:0d:7b:76:18:c2:c3:f7:
74:78:99:d5:f0:b7:ad:6e:1f:da:24:bb:1c:92:aa:
e6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:69:45:C3:0D:20:C5:72:CE:F4:13:0C:1F:D4:38:97:8C:45:A3:16
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AGlFww0gxXLO9BMMH9Q4l4xFoxY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.96.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:65:b2:f4:b4:c6:05:af:2a:20:fd:ea:d4:27:e9:09:67:de:
c4:15:91:53:6f:46:3b:6a:a0:b3:40:78:93:fb:e7:b4:23:d7:
bf:6c:ad:1e:8a:91:3f:4f:80:6a:41:54:ae:c0:37:e7:85:0e:
7b:7a:2c:78:5d:16:de:d2:84:90:45:82:a7:cb:3e:48:77:7a:
c0:2f:53:78:b9:af:d4:ce:c6:a8:99:18:31:dc:b4:fe:a5:a6:
25:90:35:62:92:5a:12:1a:d7:95:ce:6b:fe:ee:06:12:35:e9:
99:7f:75:51:0b:95:20:d4:18:22:77:a8:a3:78:98:4a:a6:42:
63:20:4a:9d:ea:8b:96:03:7e:4e:06:cb:f5:9d:94:42:f7:b6:
0c:83:64:a6:b5:8d:44:e4:2f:f4:1f:29:2f:8c:0a:43:cc:be:
7d:eb:39:cf:b5:a2:79:2d:21:26:5a:ba:92:b1:65:85:fd:39:
88:a8:cc:8d:ab:5e:ba:72:ff:c7:04:f9:60:51:04:e9:0b:1c:
d1:e3:c1:48:bb:99:0c:1f:6b:7c:b0:0a:53:c1:f0:96:23:4b:
f7:35:cd:0e:65:c5:b1:02:7e:14:15:76:06:e8:2e:05:42:53:
0e:54:0e:89:1c:10:33:21:f6:c5:c2:7e:e2:a1:79:5f:2b:97:
c2:b6:8b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:48 2024 by rpki-client on console-fra.rpki-client.org