Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JJqGfj1lkIL1O9bhuZVz0h022Us.roa
File: JJqGfj1lkIL1O9bhuZVz0h022Us.roa (raw, json)
Hash identifier: oF1lVG9QHuA0/uLwIbmXjvRDJnevLjYunmK9TizAmSI=
Subject key identifier: 24:9A:86:7E:3D:65:90:82:F5:3B:D6:E1:B9:95:73:D2:1D:36:D9:4B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JJqGfj1lkIL1O9bhuZVz0h022Us.roa
Signing time: Thu 15 Sep 2022 02:53:38 +0000
ROA not before: Thu 15 Sep 2022 02:53:38 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.156.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:38 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=249A867E3D659082F53BD6E1B99573D21D36D94B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:df:4a:7f:9c:68:6f:b7:f9:3d:78:c2:73:47:
4d:28:35:a2:30:25:00:a8:10:52:b1:ea:fc:cd:29:
b0:09:3c:9d:69:5c:6a:d2:b7:74:7b:00:60:c9:c5:
bf:ca:c3:95:a6:70:5f:e3:d4:5d:f9:1f:52:87:01:
60:92:05:97:9f:ef:19:05:30:14:dc:00:70:9a:cf:
3d:9d:3a:55:e5:74:03:93:5d:f2:d4:8f:92:4a:c7:
e9:8e:f6:be:93:7b:e4:74:6e:1e:36:be:5f:2f:97:
35:6d:96:eb:83:fe:c5:91:be:d4:48:7e:0a:11:73:
c7:0b:93:f5:2f:81:18:4d:42:a9:9f:0f:ce:8f:d3:
4d:56:d5:de:54:b4:64:37:be:c0:4e:b3:9b:fd:f9:
8d:be:3b:2b:85:1a:71:55:61:f0:19:4f:c4:16:af:
72:06:39:ff:9d:53:a1:9f:fe:64:17:ba:18:fd:5d:
ee:c2:16:35:72:f6:33:df:d8:e1:bb:59:74:35:02:
60:7d:d6:e0:f3:c6:29:e9:4c:89:e0:db:8d:23:a2:
47:76:60:ce:8d:7d:d4:3c:39:c6:26:7e:00:e0:44:
1f:16:fe:c7:03:53:e5:60:3c:c2:46:95:40:8a:dd:
2b:94:8d:f2:00:dd:e8:c8:16:9d:af:a1:4c:65:f9:
7b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:9A:86:7E:3D:65:90:82:F5:3B:D6:E1:B9:95:73:D2:1D:36:D9:4B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JJqGfj1lkIL1O9bhuZVz0h022Us.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.156.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:a7:e6:17:b9:e0:d4:52:fd:a6:e0:c6:23:46:1d:d9:54:bf:
1a:84:0d:d3:d2:e7:52:82:f7:ef:78:7d:a7:12:4a:0c:50:47:
17:53:5f:78:01:e6:c5:4b:2d:cd:bc:20:12:5b:1b:66:57:4e:
b3:05:0c:32:5b:bf:71:0b:f5:e1:66:a0:fa:1b:d2:67:e0:3d:
70:f4:d9:04:e7:ea:e1:59:68:a4:e3:a9:e7:30:1a:12:72:4a:
8b:11:8e:2c:46:ee:01:ce:10:23:e1:a8:19:1d:9d:16:0f:5d:
02:a0:cc:7d:3b:49:3b:e7:f0:0a:9b:b8:ef:45:ac:f5:66:59:
98:fb:68:83:c2:a0:bb:86:bb:31:97:de:77:5a:3d:ae:78:57:
4c:3d:eb:18:c3:7b:d4:65:78:1e:81:02:a8:7b:49:68:14:59:
27:89:6a:ab:bd:90:9c:2a:0c:8b:b8:8e:df:04:9e:d0:44:1e:
7c:6a:07:96:f3:b4:2d:c4:06:f9:9e:ec:1c:ae:a5:4e:d6:fe:
3d:4d:51:02:e5:da:3b:bb:75:df:2e:31:20:8f:cc:ea:e3:88:
94:af:4f:a6:2f:a0:60:c7:d2:e5:0e:ae:95:e0:80:0e:d4:06:
53:08:7a:8b:a0:4a:cd:94:f1:a9:08:3e:ab:30:ee:ab:ed:20:
87:cc:34:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:50 2024 by rpki-client on console-fra.rpki-client.org