Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AZlWCCPZoPtSFK9TLNStElcKixY.roa
File: AZlWCCPZoPtSFK9TLNStElcKixY.roa (raw, json)
Hash identifier: PqVC6WtffPXd4EBBdesMx2PiX57G97CJy0Hj/DK/dQ8=
Subject key identifier: 01:99:56:08:23:D9:A0:FB:52:14:AF:53:2C:D4:AD:12:57:0A:8B:16
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2082
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AZlWCCPZoPtSFK9TLNStElcKixY.roa
Signing time: Fri 25 Nov 2022 04:38:48 +0000
ROA not before: Fri 25 Nov 2022 04:38:48 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.32.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8322 (0x2082)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:48 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0199560823D9A0FB5214AF532CD4AD12570A8B16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:38:1e:f9:02:7b:90:dc:7c:34:ce:1a:26:ed:
42:36:7a:81:b1:1d:23:0c:f2:62:27:1a:91:f2:9f:
fa:04:af:f4:25:05:13:f1:79:6e:d5:4e:c0:32:ca:
83:4d:97:b0:16:94:6d:68:13:b7:af:70:f5:65:2a:
33:8b:08:40:2c:04:26:2b:3a:eb:b8:8d:bf:d5:1e:
24:13:4e:40:b4:8b:b7:4c:74:80:ca:15:00:79:e1:
a5:9a:28:fd:bd:7c:7a:2c:f8:12:00:3c:2c:29:fa:
d9:c4:b9:ad:43:bf:63:21:dd:6d:e1:f6:8e:7a:31:
4c:9c:ea:0f:d7:2b:2b:15:57:f2:bb:f2:6f:82:93:
ad:7d:e4:e9:25:ef:e0:8a:ae:df:b0:02:0d:f0:05:
b8:42:4e:f2:23:5b:ac:16:8f:2a:98:b7:ce:c9:fa:
bb:18:71:a3:e8:e7:33:28:d3:05:89:de:bb:15:1e:
e6:9e:04:fe:78:f1:34:96:f6:e4:1f:4a:42:b9:88:
1d:c7:96:03:ff:b0:c6:e1:11:77:79:bd:88:07:33:
3e:1d:02:28:a8:b8:f2:d1:a6:1c:96:f9:9a:b4:90:
e9:9d:f3:32:5f:ea:51:e3:06:74:3b:9a:da:7a:3a:
8b:50:7a:11:70:73:20:00:95:d1:8e:13:28:d6:cf:
89:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:99:56:08:23:D9:A0:FB:52:14:AF:53:2C:D4:AD:12:57:0A:8B:16
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AZlWCCPZoPtSFK9TLNStElcKixY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.32.0/21
Signature Algorithm: sha256WithRSAEncryption
9e:d0:a8:92:65:71:01:1b:84:74:d6:03:dc:58:19:21:89:a7:
1f:c1:1c:d2:4d:e0:cf:ec:99:18:fe:40:c3:41:1d:7e:91:c0:
7c:a5:e9:50:dc:e0:f9:64:84:ba:a2:21:a8:64:57:71:a0:da:
8b:cb:43:cb:3d:00:a8:36:bc:0d:47:86:03:e3:be:7c:9f:2c:
51:4c:73:11:a8:26:b4:e6:68:3d:20:5f:18:12:89:98:cc:39:
76:f9:60:95:85:52:d7:1c:d0:48:74:8b:83:fb:ee:24:e3:87:
86:a7:50:19:ac:f8:f3:5c:8a:ab:ee:07:3c:a1:9d:90:ff:b8:
50:d6:4a:7e:43:32:11:8c:22:42:ac:1c:bf:46:14:73:bc:a1:
58:1e:a4:c4:5c:f7:5a:91:0c:4d:32:eb:85:1c:2d:cb:9f:fe:
f4:e6:24:bf:17:b3:88:28:fe:85:19:7b:e2:9f:31:65:ed:77:
32:7a:2c:7e:37:0a:8e:ea:65:f8:5d:b4:59:41:11:95:48:cd:
59:4f:ed:0c:69:c6:6f:9e:6e:7a:c5:1e:e8:21:ad:0c:b2:24:
8e:c2:86:6d:e3:a9:52:5d:96:0e:40:ea:fb:43:d5:28:c6:f8:
04:4c:35:7d:58:47:bc:af:b0:16:2a:9e:f7:f5:6d:4f:64:02:
13:6d:aa:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:48 2024 by rpki-client on console-fra.rpki-client.org