Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JSor7wSlo-gg3tCDMoeWu6bFZgA.roa
File: JSor7wSlo-gg3tCDMoeWu6bFZgA.roa (raw, json)
Hash identifier: 7iSQ/EyfKNrQh4CpZVJ3rpfXHYzEhxHhkOJyKcQzMys=
Subject key identifier: 25:2A:2B:EF:04:A5:A3:E8:20:DE:D0:83:32:87:96:BB:A6:C5:66:00
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1D41
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JSor7wSlo-gg3tCDMoeWu6bFZgA.roa
Signing time: Wed 29 Sep 2021 02:48:48 +0000
ROA not before: Wed 29 Sep 2021 02:48:48 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 123.195.0.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7489 (0x1d41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:48 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=252A2BEF04A5A3E820DED083328796BBA6C56600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:eb:ac:87:cd:93:67:17:5e:bd:20:5e:85:89:
9d:89:3d:97:aa:3e:12:a7:2a:84:59:34:1f:ec:c6:
3d:ec:11:38:ff:6c:26:69:4a:0b:01:39:a4:6d:98:
4e:ed:cc:27:58:c7:85:14:63:7d:ff:f3:c5:35:53:
2d:1f:fe:14:da:19:a3:c0:51:5c:c3:6a:04:57:7b:
70:64:57:80:c1:85:e4:ac:46:02:7e:0d:cd:76:43:
e6:26:3b:26:de:e9:60:70:25:fc:bc:f4:39:d0:ef:
8b:6f:c8:90:4d:15:01:de:d3:71:3e:cf:d0:fd:55:
90:05:37:99:38:0d:e4:71:60:57:2f:e8:e4:c0:bf:
e3:6c:ef:3d:4d:75:e1:50:c1:01:71:cb:1f:19:1f:
2d:a1:55:4d:0e:bb:9d:da:e4:cc:9d:97:19:cd:c0:
99:58:25:40:b3:c1:cb:22:d8:85:1c:3a:57:07:17:
64:4e:d1:e3:a2:cb:42:0b:e1:df:e3:10:7b:05:6f:
cf:2c:8f:8f:45:fc:86:28:23:3d:7b:d0:42:b6:06:
23:47:a5:a5:f6:1f:c0:97:96:3f:b9:ef:06:4b:0d:
88:6a:aa:d4:e1:f6:2f:f9:85:7e:1c:e0:2d:24:67:
1a:64:07:bd:32:66:70:2c:78:7e:84:63:80:49:a2:
03:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2A:2B:EF:04:A5:A3:E8:20:DE:D0:83:32:87:96:BB:A6:C5:66:00
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JSor7wSlo-gg3tCDMoeWu6bFZgA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.0.0/19
Signature Algorithm: sha256WithRSAEncryption
6b:c5:ca:5d:91:19:2f:33:3e:df:07:12:4e:c5:00:d9:74:db:
f5:11:7c:ac:f5:12:fb:8c:7b:7b:bc:7d:1d:0a:a0:c4:10:f4:
59:38:09:0d:e4:fa:c8:f8:80:56:f4:93:34:0d:ca:a9:a2:f9:
29:28:96:a0:43:e4:97:aa:8c:64:ed:b3:ed:c9:2c:3f:d1:e9:
ee:7e:43:0b:27:23:53:68:b4:ba:e2:63:61:0e:99:20:15:93:
3a:29:0b:5a:96:07:65:9f:5c:e1:ba:ca:ba:ff:e1:1f:0e:2f:
07:4e:39:3b:cc:b0:fc:f5:88:24:a4:30:ca:58:d3:ef:81:74:
94:8d:e2:9c:6c:47:fe:94:f6:00:1f:ba:da:51:d1:46:4c:fc:
5a:d3:e5:a1:7d:22:02:96:0e:6f:ec:1e:86:e6:78:00:bf:77:
d9:ec:4b:bc:02:92:22:b2:12:ef:96:64:1e:d1:fb:46:c3:e2:
02:ff:02:4f:58:5b:f4:1b:3f:fb:1e:0a:c6:65:6b:c4:7b:de:
be:86:d7:48:b6:8c:0f:e7:79:55:43:18:c9:1a:cd:5f:b3:1f:
55:99:cf:b3:bb:29:21:c7:e8:8d:a4:ef:4a:39:d6:61:4e:1d:
b8:9b:52:c4:0c:80:c7:08:1c:37:40:a0:f0:0a:55:2b:fa:09:
2d:80:73:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:50 2024 by rpki-client on console-fra.rpki-client.org