Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BERpJHmyeh2g1RDiHbRiBS4Ql2U.roa
File: BERpJHmyeh2g1RDiHbRiBS4Ql2U.roa (raw, json)
Hash identifier: leZ434t0PJPppNqhfbJfgmo7AkZj6u6u3052FUzzJf8=
Subject key identifier: 04:44:69:24:79:B2:7A:1D:A0:D5:10:E2:1D:B4:62:05:2E:10:97:65
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 236D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BERpJHmyeh2g1RDiHbRiBS4Ql2U.roa
Signing time: Thu 08 Dec 2022 02:27:48 +0000
ROA not before: Thu 08 Dec 2022 02:27:48 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.56.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9069 (0x236d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Dec 8 02:27:48 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0444692479B27A1DA0D510E21DB462052E109765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:62:f9:77:77:48:05:63:87:50:69:66:03:df:
11:21:95:94:ab:d7:da:6c:06:99:8b:40:57:2f:a1:
13:d6:34:9e:2c:a2:9a:dd:52:2d:75:83:49:6d:4c:
6e:d3:57:f2:f6:1d:37:41:01:7d:91:fa:5a:41:91:
5f:ec:58:a4:b2:7f:05:47:11:7b:5c:d3:82:ae:97:
fd:74:e5:e6:99:dd:13:55:3e:09:c1:24:de:3e:42:
80:08:d7:a6:b1:76:e2:bc:d3:56:bb:e6:5c:49:38:
3c:69:ae:8a:02:9d:7a:e4:17:be:0f:be:ae:bd:de:
8c:4d:20:f1:cc:34:82:6b:c5:f2:cc:60:0c:c1:37:
59:d6:d1:2d:0d:e6:c2:bc:fc:5b:b5:df:c7:33:1f:
9b:0c:23:01:2b:9b:53:f8:d9:c6:50:07:e4:bb:3c:
93:d8:59:e7:dc:0b:8c:47:7b:b5:cd:f1:9c:7c:ee:
a5:f9:c5:a9:56:34:57:08:b3:56:a1:8d:ef:af:a2:
99:f7:d1:a8:d1:12:39:89:b6:0d:3d:9f:14:6e:0c:
ef:2f:f5:c6:2a:90:1a:dd:46:7d:61:33:09:2c:ac:
10:2c:53:0e:7b:39:21:39:19:b9:1e:36:7d:b1:df:
bd:d9:73:5a:be:0b:bc:ee:39:89:92:b7:7c:2d:a8:
ff:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:44:69:24:79:B2:7A:1D:A0:D5:10:E2:1D:B4:62:05:2E:10:97:65
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BERpJHmyeh2g1RDiHbRiBS4Ql2U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.56.0/21
Signature Algorithm: sha256WithRSAEncryption
33:79:d5:b9:57:81:82:28:0c:77:8c:df:95:a9:f2:ea:43:c1:
7a:06:f8:15:0a:8b:86:88:5f:02:6a:a4:46:db:b3:17:25:8f:
b6:84:ea:56:fe:5b:b3:6f:22:b2:53:c2:b2:5c:ce:15:d6:ab:
f7:a2:d5:fa:55:8e:71:87:4f:a4:23:70:8f:30:fe:c7:47:8b:
17:f0:69:a8:db:46:2f:bf:14:16:75:9d:e3:24:0c:83:14:5e:
fe:5d:8c:30:9f:11:a7:0a:d8:07:6b:a7:21:c4:49:e5:40:19:
ad:6c:ce:9f:a6:63:4b:f8:3e:23:ab:4a:f0:d9:96:d7:f4:51:
fb:1a:f9:05:1e:cd:90:d6:ec:a5:7d:44:ff:9d:a7:88:2e:81:
1f:83:aa:e7:5f:68:05:bb:b1:b0:6f:11:15:d0:a6:6d:5d:70:
31:e8:3b:0f:13:6f:f2:41:91:50:c6:8e:60:7b:b0:64:27:59:
9b:ed:8f:a6:e7:e9:0a:8b:89:9b:36:16:34:11:0a:b4:e7:3b:
67:34:23:0f:49:d2:9b:40:3a:8c:1d:36:09:1f:d0:30:29:2d:
37:0a:51:b2:d2:cd:7e:8d:27:83:83:29:ab:30:81:2c:08:43:
97:0b:bf:40:02:5d:dc:a4:3c:07:33:8d:aa:85:bf:c1:70:28:
2c:82:ec:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:25 2024 by rpki-client on console-ams.rpki-client.org