Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DAO4L7oW66KAKTiMhiamnc8nSas.roa
File: DAO4L7oW66KAKTiMhiamnc8nSas.roa (raw, json)
Hash identifier: Cu1jtYrPAva3JzDrI8c623dQeEmb+Md4KzPKdUdVM+g=
Subject key identifier: 0C:03:B8:2F:BA:16:EB:A2:80:29:38:8C:86:26:A6:9D:CF:27:49:AB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 22DA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DAO4L7oW66KAKTiMhiamnc8nSas.roa
Signing time: Fri 25 Nov 2022 04:41:44 +0000
ROA not before: Fri 25 Nov 2022 04:41:44 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.148.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8922 (0x22da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:44 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0C03B82FBA16EBA28029388C8626A69DCF2749AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d6:92:0f:24:88:55:51:49:b9:22:bc:d6:ef:
6e:15:d0:70:7c:89:d6:e9:2c:de:fe:f8:e3:c9:37:
47:a7:23:08:ac:75:9b:36:a2:97:b4:77:4d:68:08:
58:e2:76:33:11:6d:2a:fe:12:bb:ae:a8:2f:78:db:
2d:d7:a6:5b:d6:d0:7d:d8:8c:d9:8c:84:6c:5d:90:
3c:2d:eb:62:c0:e1:91:ea:25:ac:9f:4b:0c:7a:e5:
26:49:2f:46:08:33:52:cc:63:70:4a:70:81:23:52:
b9:82:9b:a7:71:59:eb:29:d9:c8:5b:e5:22:74:dc:
31:82:e6:0d:d7:78:b7:76:e2:99:a3:3b:70:95:2a:
05:8d:cf:fa:b0:35:ef:0d:0f:df:9d:95:ad:7c:34:
6f:e5:0e:3d:d2:cc:55:61:ad:5b:79:43:c9:e7:39:
c6:1a:cf:19:16:fb:6b:a4:32:bf:62:4f:52:16:ba:
53:ad:57:08:8d:a4:04:97:61:ad:fd:13:da:19:13:
d4:ec:c1:f5:29:50:6a:a9:0f:64:56:d5:00:04:9a:
dc:2a:6c:2c:c7:f7:f2:a8:88:4a:c8:6e:07:da:b2:
a9:f5:17:c0:74:a6:52:ad:67:89:2d:79:c8:a3:80:
6a:69:f3:e7:63:1d:49:c9:28:06:ef:04:5a:23:da:
2f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:03:B8:2F:BA:16:EB:A2:80:29:38:8C:86:26:A6:9D:CF:27:49:AB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DAO4L7oW66KAKTiMhiamnc8nSas.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.148.0/22
Signature Algorithm: sha256WithRSAEncryption
12:e2:e7:2f:cf:80:28:07:b7:b7:71:de:00:9e:53:e0:bd:9b:
88:c7:75:ab:a7:ea:47:9b:eb:eb:1d:4e:ae:b0:49:22:49:75:
fb:b8:e8:8f:0f:b4:cd:58:0b:be:12:27:b1:80:10:99:f5:c9:
de:21:cf:d4:d2:94:66:be:c9:ee:7c:ba:1d:b6:3a:f4:35:d6:
25:72:46:87:84:94:52:1c:63:fe:37:bd:d3:39:ee:8b:27:a3:
3b:81:f2:af:08:30:40:40:9a:28:13:a5:58:71:72:85:dc:a0:
03:d3:1e:80:68:77:46:90:5c:f9:c1:1e:fb:aa:97:d0:1b:0d:
37:c1:33:b8:54:da:5e:81:3e:10:3f:97:d5:40:94:10:70:66:
17:e2:2e:83:cc:65:49:4c:50:db:1d:2c:a6:96:e8:3a:53:9d:
63:2b:df:78:3c:25:e8:f8:24:a3:e7:07:87:03:a8:47:0c:eb:
8a:c9:09:dd:49:8c:51:c9:99:7d:fd:dd:57:f9:45:1e:b0:f7:
aa:a3:97:31:86:57:84:e8:10:7c:da:b9:9d:f7:8f:90:33:4b:
a1:fc:fd:10:4e:b6:7a:81:a2:b7:47:47:87:dc:e5:60:12:a1:
10:17:4b:36:91:ab:6b:60:d5:ae:52:fe:df:81:ad:37:f3:bb:
48:4c:40:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-fra.rpki-client.org