Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KCrChpQq2ieRPMq8xFoFetRlIV4.roa
File: KCrChpQq2ieRPMq8xFoFetRlIV4.roa (raw, json)
Hash identifier: 5lyMxce2/BHErDF9XE9J6wJ6ycpvijnSNEBcItv/rEY=
Subject key identifier: 28:2A:C2:86:94:2A:DA:27:91:3C:CA:BC:C4:5A:05:7A:D4:65:21:5E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1AE3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KCrChpQq2ieRPMq8xFoFetRlIV4.roa
Signing time: Wed 29 Sep 2021 02:45:52 +0000
ROA not before: Wed 29 Sep 2021 02:45:52 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.194.180.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6883 (0x1ae3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:45:52 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=282AC286942ADA27913CCABCC45A057AD465215E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:95:01:16:21:96:a4:cb:8c:00:bf:6b:68:93:
a7:8d:68:07:4e:07:6e:d2:da:6d:f0:8a:96:ee:da:
ed:cd:88:ca:4b:5c:98:38:1e:92:dd:b8:4a:04:cf:
ba:e7:61:71:80:67:f8:b9:6e:3e:91:a6:8e:64:a5:
37:78:db:aa:0a:57:5d:8b:2c:2a:72:b7:d9:30:58:
41:53:69:4e:ff:f2:50:2a:db:19:90:b3:b4:3d:97:
d8:d3:08:c3:04:fe:6c:3a:6f:80:0d:c8:89:73:1d:
39:2c:55:17:22:c5:b8:e8:31:7e:15:77:f0:7d:e4:
97:9b:53:4c:83:2a:ef:4c:f8:5b:5a:13:2b:64:aa:
5f:08:c2:fc:dd:bc:bf:83:d1:c9:ba:43:f1:0c:5d:
42:ce:03:34:65:76:7a:a3:7d:d7:65:84:c0:0a:6d:
19:6c:1c:f7:4b:8b:24:5f:e3:01:0f:d2:2e:38:50:
50:5f:b7:ca:91:4a:bf:11:aa:dc:4f:c6:08:04:70:
95:f3:eb:f0:59:4b:59:b8:f5:ea:27:ad:cc:1b:b4:
36:07:c7:65:82:a9:cf:a0:4f:93:9c:cc:ad:f1:7b:
42:f8:90:a7:64:b3:66:9f:c6:f6:73:65:ee:56:d1:
4f:3e:61:fc:91:bc:36:b7:05:c9:7b:f9:dc:7b:dd:
6f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2A:C2:86:94:2A:DA:27:91:3C:CA:BC:C4:5A:05:7A:D4:65:21:5E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KCrChpQq2ieRPMq8xFoFetRlIV4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.180.0/22
Signature Algorithm: sha256WithRSAEncryption
10:1f:76:a9:0e:86:78:07:25:1e:9b:d4:a6:76:33:9e:55:a9:
ce:e1:f7:cc:91:22:cb:4a:10:9a:ff:6e:27:f1:c7:5b:b8:cd:
5a:4e:af:ec:fc:fa:28:42:1e:e9:79:6b:69:4b:ba:a4:26:95:
36:6e:92:3d:f3:34:16:3f:1d:c4:39:96:98:d0:88:6e:8a:dd:
80:49:9c:01:50:1b:66:e1:fc:c2:44:4c:32:86:18:ab:e5:35:
8d:61:ad:22:cc:55:66:60:13:61:8e:f8:32:28:8e:5c:d2:b9:
59:fc:45:e9:2b:1f:57:75:74:73:9e:6c:b2:a1:7b:e3:f4:b8:
3f:ca:1f:f7:b5:30:31:ed:98:02:3f:0f:be:1a:af:07:02:5e:
33:f8:d5:72:bc:34:9c:c1:67:a0:81:91:5e:9f:ea:60:a6:ea:
ae:00:ab:c7:4b:9b:b0:c5:80:d7:4c:c1:6a:c4:19:9f:a2:7e:
40:34:1f:59:39:cd:7f:e9:71:4c:0b:e3:ad:03:c4:98:53:6f:
7d:91:14:21:a2:52:c3:e8:e4:bf:3a:83:f5:72:ef:2b:09:86:
f1:a9:d7:be:0b:e1:08:c5:c1:f5:db:78:62:6c:16:87:e8:be:
ff:e9:59:bd:ec:2f:99:3d:aa:c0:01:57:56:46:2c:40:c6:e4:
2d:2c:08:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:28 2024 by rpki-client on console-ams.rpki-client.org