Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IAxYAM3At22PgNuKoq6o-Qw2Z4A.roa
File: IAxYAM3At22PgNuKoq6o-Qw2Z4A.roa (raw, json)
Hash identifier: esV+00x1t9anGVzZSThW1J0cpf2x7Pkd9xYMC8A3/eM=
Subject key identifier: 20:0C:58:00:CD:C0:B7:6D:8F:80:DB:8A:A2:AE:A8:F9:0C:36:67:80
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2325
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IAxYAM3At22PgNuKoq6o-Qw2Z4A.roa
Signing time: Fri 25 Nov 2022 04:42:06 +0000
ROA not before: Fri 25 Nov 2022 04:42:06 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.192.0/19 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8997 (0x2325)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:42:06 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=200C5800CDC0B76D8F80DB8AA2AEA8F90C366780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:6e:a7:a8:ec:d0:41:ad:93:f6:44:74:f0:c2:
0a:1e:a9:8d:23:3e:37:ce:12:e8:2f:97:80:a4:e2:
cb:e5:e1:47:85:1f:12:3b:f0:57:2b:64:7f:3d:c3:
9f:24:89:80:a3:c9:ba:e6:9a:20:83:cb:db:c6:cb:
6c:0d:0e:be:1e:9f:e1:b3:b8:f4:2f:d5:c6:61:fa:
ef:f2:1b:a8:b9:52:2f:7f:69:bd:53:30:16:fa:0a:
ee:a8:49:6a:d5:b1:5c:08:83:4e:7f:df:d8:dc:8a:
2d:5f:68:99:cc:ed:e7:4d:92:cb:82:b7:93:4a:a5:
46:dc:cb:31:ac:0a:39:a1:64:e7:a1:b1:4a:63:3d:
93:d6:af:6c:7d:e6:0c:66:de:78:3c:af:a3:5c:c1:
11:31:66:a8:f4:b1:0c:e1:21:66:ad:ec:d8:df:aa:
33:e7:b1:a2:7e:02:5d:ac:f5:f8:3f:91:e4:db:37:
24:cb:91:af:19:fc:17:ba:e1:20:ad:59:da:32:ae:
ce:ab:80:86:6f:c1:0b:87:35:69:c3:8c:42:8b:a6:
cb:82:6b:48:0a:f9:dd:6d:dd:0c:ec:01:9a:4d:61:
88:1d:03:30:fb:64:ce:89:a6:51:95:bb:29:c5:35:
ba:e3:7c:3d:e8:14:fb:6e:04:0a:cc:92:c0:4f:34:
21:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0C:58:00:CD:C0:B7:6D:8F:80:DB:8A:A2:AE:A8:F9:0C:36:67:80
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IAxYAM3At22PgNuKoq6o-Qw2Z4A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.192.0/19
Signature Algorithm: sha256WithRSAEncryption
5c:2b:d4:bb:d2:aa:9d:b2:15:35:cc:6a:e3:43:b6:d0:f9:b8:
34:d2:3a:ee:99:1a:44:8e:41:d8:58:6b:69:7b:19:02:6f:f6:
19:98:64:8d:84:9c:7c:40:d1:fb:df:80:fd:85:d6:6e:eb:1f:
1b:61:c7:d7:39:02:c9:56:e9:b2:63:4f:ea:6f:8c:59:1a:9c:
26:f6:3b:48:2a:c8:b9:7b:59:6d:3d:ac:2c:c6:7c:36:95:c3:
cb:7d:bb:ce:71:6c:11:8f:70:30:03:bb:72:b1:ba:29:5a:f4:
38:93:b0:8a:6e:85:79:8d:31:40:8c:ff:26:96:06:16:a2:50:
18:bb:23:d3:81:1a:3f:e5:5b:73:b6:34:44:30:ca:e0:9d:53:
cc:4d:de:5e:ac:69:09:05:11:72:5f:7d:77:5c:06:8a:94:3f:
f1:8c:77:a3:d6:ab:15:ab:c0:fa:c5:7a:b2:cc:fb:fe:cb:b0:
92:66:0b:2e:df:e7:e0:44:dd:84:4a:2b:7d:f9:d2:f7:50:62:
f9:2c:a2:cf:4b:2d:ac:be:b7:65:18:ac:49:f4:c3:08:94:72:
ff:18:87:b3:14:7c:8b:2d:d8:73:b4:33:62:7e:fc:bb:91:03:
07:a9:25:38:ec:93:52:ee:ec:78:41:88:7e:83:a9:af:86:6f:
1c:43:be:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:27 2024 by rpki-client on console-ams.rpki-client.org