Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AbrJkxshobmtHlm_9o-uoFmBNl0.roa
File: AbrJkxshobmtHlm_9o-uoFmBNl0.roa (raw, json)
Hash identifier: jJyd8PmhwCpQ59a0debgFrG+JqQM5AAbp4PiBZUTp7c=
Subject key identifier: 01:BA:C9:93:1B:21:A1:B9:AD:1E:59:BF:F6:8F:AE:A0:59:81:36:5D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2103
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AbrJkxshobmtHlm_9o-uoFmBNl0.roa
Signing time: Fri 25 Nov 2022 04:39:25 +0000
ROA not before: Fri 25 Nov 2022 04:39:25 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.144.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8451 (0x2103)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:25 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=01BAC9931B21A1B9AD1E59BFF68FAEA05981365D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0f:44:3f:18:3e:fa:0a:92:a2:6e:3c:fc:50:
52:d7:95:94:bd:7d:81:d1:dc:df:30:50:ea:3d:e2:
ae:15:c3:67:54:d2:d4:e4:0c:5e:56:e5:e2:bb:c8:
36:6d:93:d8:d2:38:29:ed:87:bd:f5:3c:db:69:fd:
e6:d0:24:07:b5:d3:f0:c5:2b:c5:17:e6:5e:d3:a9:
c9:2e:c0:83:01:92:8d:96:18:58:6d:6c:df:ef:42:
26:24:f7:24:2d:6f:f4:23:c9:06:e5:49:16:d0:dc:
86:5a:bc:eb:e4:9b:c9:26:06:76:66:c4:a0:00:a7:
f5:2c:4f:da:18:c6:fb:25:c8:97:f5:5c:ce:bf:a8:
66:5f:68:36:7d:8c:12:f5:1d:a4:6e:90:18:d0:50:
25:7c:40:38:38:e9:40:cf:9b:77:84:32:2a:81:f4:
2d:c5:4c:7a:4f:e1:e7:e8:7b:72:ed:5f:2e:a3:5d:
5c:b5:92:9d:45:0c:1b:fc:e6:73:ae:b5:69:d4:54:
14:fc:33:f0:41:0e:f5:6e:69:e3:e5:5a:a2:ab:82:
9e:e4:28:32:fe:71:ff:d5:84:97:48:7b:09:70:34:
e8:bd:34:10:2b:e0:b2:c9:d8:22:47:aa:7e:61:12:
8d:b2:42:90:e1:04:5b:63:7c:c9:10:26:05:9a:f8:
dd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BA:C9:93:1B:21:A1:B9:AD:1E:59:BF:F6:8F:AE:A0:59:81:36:5D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AbrJkxshobmtHlm_9o-uoFmBNl0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.144.0/22
Signature Algorithm: sha256WithRSAEncryption
22:65:b6:e1:ff:51:75:65:05:be:20:7b:e1:34:c4:38:32:83:
6f:73:f4:b5:da:89:84:e1:12:1d:b1:47:2b:43:c4:d4:f1:07:
c4:7f:d8:27:e0:32:af:f1:67:57:4a:87:1e:a9:bd:78:b6:69:
e3:b0:f6:59:fc:c7:46:3b:45:be:08:3b:9e:f3:7d:36:fd:0f:
e9:4a:2e:da:b3:d2:2d:5c:4c:d1:01:77:22:24:5d:9f:e2:c0:
4e:8b:1f:8b:bc:3f:a3:a6:12:3b:ef:a9:e7:9c:2f:83:95:34:
52:39:b1:12:4a:86:80:fa:dd:b1:ae:c8:4e:da:c9:8c:36:cb:
15:51:b0:f6:6d:0b:f9:b9:a1:01:fa:43:b4:3a:c7:b5:53:70:
39:18:aa:2c:de:5a:85:1c:32:0c:9c:b5:bb:47:bf:04:a3:b8:
ce:f0:50:f2:06:8e:9c:a6:cb:70:9e:84:52:ca:72:77:4a:69:
8c:73:6a:d1:b6:98:35:80:84:f7:54:21:55:8b:9b:a6:ad:a6:
a0:e3:e0:e8:c7:f1:a9:9b:2a:f9:8e:26:37:6c:c9:40:12:5f:
0b:34:07:48:84:eb:ab:a9:b1:b5:bf:0b:1d:97:8a:88:63:87:
cd:ad:20:84:72:48:03:5b:17:4f:c9:7e:bf:25:db:67:6d:29:
67:74:16:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:25 2024 by rpki-client on console-ams.rpki-client.org