Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BaRBK-ktIK_1VONnxZABjwWQtMg.roa
File: BaRBK-ktIK_1VONnxZABjwWQtMg.roa (raw, json)
Hash identifier: 0jb6zHWxWrPNlNsbTWwmCWil84wITf9oFWnyV7OV0YA=
Subject key identifier: 05:A4:41:2B:E9:2D:20:AF:F5:54:E3:67:C5:90:01:8F:05:90:B4:C8
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 22A2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BaRBK-ktIK_1VONnxZABjwWQtMg.roa
Signing time: Fri 25 Nov 2022 04:41:26 +0000
ROA not before: Fri 25 Nov 2022 04:41:26 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.176.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8866 (0x22a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:26 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=05A4412BE92D20AFF554E367C590018F0590B4C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:88:bb:e1:e9:89:3f:b4:eb:89:25:57:f2:b5:
80:10:ec:36:04:9e:75:93:a6:f9:4c:01:57:a1:a0:
d4:9b:38:be:8a:cf:cb:9c:ae:27:4a:03:d7:0f:0a:
e0:7c:4c:48:ba:f4:3c:41:3f:42:c5:80:61:65:bd:
ac:dd:4c:32:7a:1f:0a:63:1a:e1:06:56:b8:c3:29:
25:f0:c0:1b:43:bf:d8:10:30:b1:03:e2:f5:1e:40:
9b:c2:ac:b6:53:b9:ee:a7:63:03:d4:ac:34:07:ae:
ce:ac:54:3a:22:7b:ec:9e:c6:5f:66:22:8f:1a:b8:
49:d3:f5:ea:a5:83:18:d0:37:61:f0:14:72:49:7c:
f7:7e:7a:b2:9d:4e:a1:c5:eb:42:e4:41:60:63:ed:
64:55:b4:f2:8e:6d:5f:36:2b:51:04:74:b4:56:5e:
19:43:14:4a:d8:f6:08:c6:97:16:80:75:16:20:bd:
26:56:5e:c8:97:f9:8f:d4:eb:96:63:57:8b:1c:31:
17:27:d8:0f:6a:03:51:97:b0:68:e2:3c:59:77:71:
e9:70:44:3a:52:29:37:b3:11:04:a8:97:88:0d:f7:
1e:2e:07:4a:e4:c7:6e:7b:23:06:ef:52:b4:7a:80:
57:85:91:67:84:95:73:41:73:4f:1f:85:2c:64:ec:
ee:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A4:41:2B:E9:2D:20:AF:F5:54:E3:67:C5:90:01:8F:05:90:B4:C8
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BaRBK-ktIK_1VONnxZABjwWQtMg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.176.0/20
Signature Algorithm: sha256WithRSAEncryption
64:e2:ba:ac:63:bd:f1:7c:16:30:02:70:54:47:e2:00:be:b2:
1b:14:a2:f3:fb:8e:78:b7:4f:71:89:d7:59:d9:08:fd:7b:f2:
9c:66:1f:e2:00:63:fd:7a:c8:0b:bd:be:d3:c7:5a:a7:fd:4e:
68:0d:9d:9e:dd:3b:d9:2f:14:81:4f:ea:45:28:e2:f2:98:8d:
27:de:89:2f:c5:1e:7c:bc:56:d3:c9:f8:dd:a5:a0:1d:35:39:
96:ef:09:c9:c6:65:08:71:22:25:a6:27:63:71:e5:94:f8:b3:
32:ce:68:d8:af:c8:e5:be:f4:77:be:ab:19:d5:b9:6b:f1:78:
90:0e:48:bb:11:59:68:f5:2a:0b:30:e5:f9:b2:76:86:5e:1b:
f7:a6:ed:3d:71:f1:0b:eb:90:7a:b2:3d:6a:70:5f:0c:75:2a:
b6:44:eb:c3:a6:bf:21:13:0e:3e:98:98:44:3a:4f:97:99:b8:
28:e4:56:91:b9:25:71:ce:1d:fe:06:98:56:da:aa:dc:56:5c:
14:02:72:c8:b0:53:3f:8c:b1:ee:d5:07:b8:6d:01:94:96:ef:
3d:3f:37:13:9a:73:51:82:33:0b:d8:2f:c8:b6:a1:f7:e9:1f:
a1:8a:f5:7c:41:b1:b2:54:f2:8c:55:28:52:21:6e:8c:34:3f:
77:ca:fa:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:25 2024 by rpki-client on console-ams.rpki-client.org