Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DciM-73062IHfIE1aA79z0WcCqI.roa
File: DciM-73062IHfIE1aA79z0WcCqI.roa (raw, json)
Hash identifier: j04sNdGRwaZQdMKnxGa9KhqyB5UzpZjtKach7y3xCVM=
Subject key identifier: 0D:C8:8C:FB:BD:F4:EB:62:07:7C:81:35:68:0E:FD:CF:45:9C:0A:A2
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1AFD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DciM-73062IHfIE1aA79z0WcCqI.roa
Signing time: Wed 29 Sep 2021 02:45:59 +0000
ROA not before: Wed 29 Sep 2021 02:45:59 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.192.148.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6909 (0x1afd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:45:59 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=0DC88CFBBDF4EB62077C8135680EFDCF459C0AA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:05:b3:37:fd:23:eb:da:b3:3c:99:14:23:64:
b7:d1:e8:30:90:2b:39:5a:83:5f:60:c7:45:ba:1d:
26:0f:1c:ef:61:49:bf:55:6b:70:65:6d:82:f9:0a:
da:c1:75:f8:f4:2d:96:3b:5e:a8:39:ed:5d:bc:c3:
a2:0f:07:27:35:3c:4e:e3:2f:4b:14:f9:de:9d:53:
e3:ca:d2:72:69:8f:f6:2f:87:be:c2:72:9d:54:14:
8c:44:bb:42:af:0c:36:b7:3c:cb:20:e1:ab:55:26:
29:3d:95:6c:02:10:b2:da:2b:26:cd:4c:2a:03:e8:
33:1a:de:2b:90:71:ac:6f:15:91:7d:6e:5d:37:b5:
7d:51:10:30:ec:be:fc:10:c3:ff:26:c3:b2:af:ff:
06:03:fb:01:80:cb:ad:4c:65:0e:a0:04:55:99:11:
b1:a1:7e:f7:ed:ef:a9:17:86:82:51:4d:9b:6f:95:
50:c0:ec:03:2e:19:67:9c:0b:48:86:02:e3:49:72:
e2:44:c2:f0:a2:8c:9e:8d:0b:33:24:c9:de:7e:68:
2f:ee:f6:69:4a:cb:14:75:d2:e3:6d:68:56:51:66:
59:37:37:10:20:4f:ab:9d:8a:09:06:e6:1b:65:a9:
31:d1:23:47:57:83:47:52:59:9a:05:ec:56:0b:fc:
56:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C8:8C:FB:BD:F4:EB:62:07:7C:81:35:68:0E:FD:CF:45:9C:0A:A2
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DciM-73062IHfIE1aA79z0WcCqI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.148.0/22
Signature Algorithm: sha256WithRSAEncryption
34:d2:c7:e9:01:c3:b0:20:d8:58:4c:3e:9f:87:85:3c:d7:82:
38:a5:c1:ae:67:48:d9:2f:a3:5d:2f:64:a6:7b:42:bf:ce:98:
4a:e0:57:96:20:34:bc:83:7f:fb:03:3f:6f:20:23:95:6c:91:
a3:b3:66:a5:06:11:79:4e:e4:7d:34:4a:52:48:c7:32:c0:b8:
f3:8a:e4:12:60:e2:8c:ae:58:6f:59:56:4b:1b:ed:59:41:0c:
96:da:d7:4e:61:a5:fc:83:a5:38:4e:70:34:ac:db:25:78:20:
1c:2c:f3:2e:95:51:3f:38:2e:97:b9:dd:5c:71:fa:f1:92:96:
5d:04:21:7c:49:88:f5:81:12:06:3c:65:de:1f:4e:7a:0f:c4:
64:8e:73:dc:2d:85:b4:7e:8b:d1:3f:e8:21:b8:31:43:17:25:
f0:1c:d9:c8:2b:35:22:42:18:4c:dc:a1:c2:b4:fd:df:93:19:
39:fd:1e:a2:22:9c:95:09:84:35:7b:81:61:28:c6:ce:20:f3:
0a:69:f9:28:40:8e:b7:0c:b7:47:d3:bf:46:1f:69:cc:84:ec:
54:ee:b9:2a:4b:d3:79:dd:66:2f:02:7b:f9:d8:d4:06:fa:e8:
b8:f6:25:5b:5c:70:41:75:24:29:1a:a7:ad:c7:57:c8:6f:a7:
24:31:21:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-fra.rpki-client.org