Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JLxnO2Dd58Rln24PkYFHDTeViEM.roa
File: JLxnO2Dd58Rln24PkYFHDTeViEM.roa (raw, json)
Hash identifier: EVK/PoCei98XH6o0vPv+/2Ou5VkpLvvU/xd0BzKWbj4=
Subject key identifier: 24:BC:67:3B:60:DD:E7:C4:65:9F:6E:0F:91:81:47:0D:37:95:88:43
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1AA7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JLxnO2Dd58Rln24PkYFHDTeViEM.roa
Signing time: Wed 29 Sep 2021 02:45:35 +0000
ROA not before: Wed 29 Sep 2021 02:45:35 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.192.64.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6823 (0x1aa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:45:35 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=24BC673B60DDE7C4659F6E0F9181470D37958843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c3:b0:dd:0c:79:93:68:ab:b4:df:8e:9f:4d:
e1:ab:c9:21:36:f5:6f:15:71:cb:43:ae:e9:38:d1:
ab:a4:ba:f4:ee:c8:9b:cf:c8:43:f7:0f:c5:91:47:
7b:46:78:46:5b:cd:31:01:46:d0:35:aa:8b:46:f5:
71:69:0d:87:92:f9:9c:6f:16:64:ae:88:36:ef:56:
79:51:35:59:d1:44:3b:ed:a8:bb:11:5e:bc:36:6e:
43:62:08:95:cc:ee:08:76:d4:21:1f:b1:76:92:25:
09:9d:4c:d1:a7:74:47:e6:a1:3a:9f:55:88:b5:21:
3d:9b:ea:e7:6b:3a:4f:be:5b:67:d6:cd:72:21:9a:
d1:fc:60:74:03:7b:36:8e:95:9d:89:cd:9f:77:ae:
4b:dd:15:02:20:c3:1d:6d:03:4e:ea:b9:51:3e:81:
64:4b:04:09:92:7c:26:48:99:4c:c9:e7:0c:b5:77:
14:76:75:1f:7d:e6:f6:03:81:66:05:2e:01:92:3c:
74:fa:65:2d:58:50:77:50:ac:03:6c:56:b6:87:6b:
10:a1:b5:d8:ef:75:81:b6:59:ac:f4:cd:a1:1a:ce:
9e:b4:fe:6a:e3:e2:64:e8:e5:c9:5a:58:3f:a0:db:
c1:d7:fc:ae:29:c8:82:47:f0:0c:ac:b4:d1:82:52:
91:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:BC:67:3B:60:DD:E7:C4:65:9F:6E:0F:91:81:47:0D:37:95:88:43
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JLxnO2Dd58Rln24PkYFHDTeViEM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.64.0/21
Signature Algorithm: sha256WithRSAEncryption
45:b1:ff:5f:8b:65:d8:b0:c2:6e:5c:94:6a:9c:e8:a5:28:c8:
ae:d5:48:5d:56:24:db:75:18:89:46:68:a8:f2:00:21:fc:7b:
e1:66:d5:68:53:a8:9e:e7:e6:c2:8d:e4:d5:47:87:c4:02:ad:
9f:19:1d:1f:98:ff:80:e1:56:ab:73:95:b9:0a:92:c6:de:c5:
2c:57:0d:fd:47:ea:43:e1:72:86:19:ba:93:d9:ee:3b:42:27:
5f:fb:b9:f3:51:d6:67:c5:96:d5:df:cc:f3:98:92:07:d9:d3:
04:1b:cb:c4:fc:53:c8:b9:73:44:40:0b:a3:a0:8d:a5:87:76:
8c:d3:19:7a:0e:c1:d9:37:c6:a1:bb:92:e6:1c:06:f6:50:dd:
59:e1:33:1d:c9:53:d6:fb:c4:dc:41:2b:c0:ad:c2:ea:2f:0b:
56:5f:2c:2a:5a:77:f2:77:23:a8:4e:41:24:b8:a3:e3:eb:08:
2c:03:79:48:e1:cc:80:96:95:61:0c:e2:e4:5f:75:8a:ff:6c:
19:ec:14:2f:af:2d:f1:8d:6d:b5:29:66:70:8a:73:b0:15:f4:
4c:c5:fb:e7:c2:30:b6:4b:d0:e8:a8:73:5f:1f:65:5c:e7:14:
94:fa:6d:7b:12:82:18:ec:46:a7:d5:eb:3e:db:38:93:41:bc:
50:d6:a4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:28 2024 by rpki-client on console-ams.rpki-client.org