Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CuPd9mlFnCOMT5BYtb0JuMsDGKs.roa
File: CuPd9mlFnCOMT5BYtb0JuMsDGKs.roa (raw, json)
Hash identifier: 2ZlHK6KJFsOQckXNw+GwGPAZndUqTmXE7az23+3l6JQ=
Subject key identifier: 0A:E3:DD:F6:69:45:9C:23:8C:4F:90:58:B5:BD:09:B8:CB:03:18:AB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 21BA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CuPd9mlFnCOMT5BYtb0JuMsDGKs.roa
Signing time: Fri 25 Nov 2022 04:40:20 +0000
ROA not before: Fri 25 Nov 2022 04:40:20 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8634 (0x21ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:20 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0AE3DDF669459C238C4F9058B5BD09B8CB0318AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bc:28:da:e2:ba:c0:66:3c:83:e0:27:66:d3:
99:64:90:56:8f:41:6f:15:ed:d1:b7:14:c7:df:f8:
d1:ed:2d:0c:fe:2e:e1:d7:c4:16:41:41:bd:1d:7d:
8d:3f:dc:6d:45:b4:11:0b:c3:9f:64:16:42:36:a1:
09:9c:5b:f7:35:cc:3d:57:03:f0:d0:fb:4a:dd:ab:
42:e8:b7:cb:28:a3:18:54:32:57:21:9d:1a:3b:9a:
a9:26:56:ff:e6:90:00:e5:53:4e:4b:48:ff:cb:24:
f7:cc:8d:a0:d5:c3:35:85:e2:e5:8a:35:15:9c:06:
67:15:29:91:17:6f:e1:2c:16:95:a6:9d:1a:13:e4:
d8:aa:75:1d:ff:0d:d2:1c:c6:4b:51:25:b0:7f:8f:
7d:22:44:63:8b:3f:67:3f:4b:ae:5c:57:b4:eb:d7:
14:42:af:d1:4c:f3:f0:40:8d:c9:3c:94:98:2c:fe:
11:0c:4d:cd:98:ff:17:49:d4:02:07:a0:48:e2:4b:
83:7f:fa:eb:d4:f6:d1:1c:de:77:0f:42:18:19:cc:
bd:78:0b:90:50:49:03:c8:d9:84:44:33:fd:8e:63:
8a:29:bf:d1:30:07:09:35:0c:f5:b4:ee:20:78:ba:
2d:8f:6a:3f:77:f3:1b:50:78:31:f4:bd:e2:12:d6:
b4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E3:DD:F6:69:45:9C:23:8C:4F:90:58:B5:BD:09:B8:CB:03:18:AB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CuPd9mlFnCOMT5BYtb0JuMsDGKs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.183.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:a4:35:80:61:82:d2:2d:02:00:26:e9:ec:fd:95:ca:46:c9:
8f:71:dd:f1:0a:c8:4f:bf:81:2a:fa:da:be:8e:cb:1c:bd:40:
8b:5c:23:d6:f3:c4:f7:b6:3f:14:79:aa:5d:e0:23:ca:b3:65:
cb:72:c7:36:ad:ae:16:6c:d7:1c:25:fb:cc:75:54:c4:32:30:
a8:82:2f:43:f2:2f:28:fd:b4:16:63:de:c5:04:b0:b1:63:21:
17:c8:ec:48:04:60:40:12:4d:04:0f:da:7f:bb:56:af:50:3f:
3e:df:17:9a:3c:c8:1a:fb:c3:bf:d1:91:21:d3:5f:d2:d8:b7:
7c:98:f1:28:16:06:d7:66:21:24:62:76:8d:37:a7:3e:20:73:
30:bf:08:4a:ed:d4:83:0b:b9:dc:8d:92:f6:16:7b:18:f3:ab:
76:92:92:88:f2:98:93:50:51:0b:fb:8c:f2:5e:a4:4a:b2:88:
22:fd:38:f5:28:9f:62:2b:a0:ae:3c:56:a4:34:db:fb:3b:83:
49:3f:ac:21:9d:97:0a:ff:66:9f:3d:40:b8:53:b6:4d:84:44:
27:73:9a:57:94:46:e9:80:7b:31:5d:2a:53:60:97:ee:c3:41:
95:04:1f:c5:10:4e:e1:73:ce:12:1f:a2:16:de:87:8c:0b:0b:
fc:7d:29:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:26 2024 by rpki-client on console-ams.rpki-client.org