Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KbprW3-Ry2Lh6llr9DY6_rC26Ww.roa
File: KbprW3-Ry2Lh6llr9DY6_rC26Ww.roa (raw, json)
Hash identifier: IQ6+UAgQbrbIsJd8Wpo785yRwJxODa9wsSLxqh/Fjbk=
Subject key identifier: 29:BA:6B:5B:7F:91:CB:62:E1:EA:59:6B:F4:36:3A:FE:B0:B6:E9:6C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1AFA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KbprW3-Ry2Lh6llr9DY6_rC26Ww.roa
Signing time: Wed 29 Sep 2021 02:45:59 +0000
ROA not before: Wed 29 Sep 2021 02:45:59 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.192.144.128/26 maxlen: 26
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6906 (0x1afa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:45:59 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=29BA6B5B7F91CB62E1EA596BF4363AFEB0B6E96C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3c:fc:36:cc:bb:db:19:02:cd:52:36:db:fb:
b7:fe:3d:c1:f0:c5:ad:d5:04:d2:2a:f2:fd:79:ba:
34:fd:00:3c:f2:30:28:02:6b:4e:d9:78:3e:75:a1:
7c:c3:c4:f1:82:22:8d:62:e7:e8:a1:3e:f2:40:49:
87:53:78:eb:43:83:14:b6:a1:72:66:4a:48:23:cb:
a9:49:65:c5:7b:cb:a6:93:d7:2e:d4:ec:aa:22:8e:
50:62:b1:a3:d7:fd:79:fa:eb:64:65:64:29:5a:58:
61:c2:ae:27:47:33:14:fc:d0:8e:55:17:d0:25:44:
47:cf:6c:be:2f:f6:dc:9e:ba:38:05:db:33:31:44:
b1:7a:ca:56:7b:2f:30:75:d8:06:89:9d:28:e4:1a:
49:75:64:e5:36:a7:7a:14:83:0a:70:e5:46:e1:5e:
40:c3:06:ce:77:3d:f6:cb:3b:79:18:0e:aa:c0:6e:
40:04:5d:7d:0b:25:19:6b:2d:cc:4a:0d:39:23:a8:
e9:ac:d0:d9:fd:46:c4:53:89:68:c1:8a:b1:94:bd:
e0:81:1e:00:af:5e:2e:06:0f:e2:c4:19:6f:9d:e4:
92:4f:66:1c:bf:bc:c9:dd:7c:cb:72:cd:8f:95:9a:
9d:0c:2b:5b:8f:45:97:e6:a8:43:a9:85:e8:8e:bd:
ed:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BA:6B:5B:7F:91:CB:62:E1:EA:59:6B:F4:36:3A:FE:B0:B6:E9:6C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KbprW3-Ry2Lh6llr9DY6_rC26Ww.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.144.128/26
Signature Algorithm: sha256WithRSAEncryption
39:c3:ca:29:61:88:6d:11:aa:db:19:d5:37:02:be:3e:9d:3b:
c7:17:42:f1:36:ae:06:20:28:65:c1:00:58:df:da:84:bc:67:
d1:60:27:17:d4:4c:f9:e2:45:7c:6d:23:2c:fa:f8:08:83:89:
7b:5d:1a:ed:fb:75:5e:38:a1:25:8d:85:de:70:83:e0:d9:5f:
98:ae:ab:c9:d6:2b:68:ff:4b:8d:f9:f9:e8:e9:44:1a:94:d4:
9e:81:63:b7:9d:6f:3b:44:d2:62:97:a5:36:94:04:5f:6c:18:
d0:57:db:7c:ac:d0:18:59:75:a0:26:60:65:46:b9:5b:3b:90:
22:7e:91:dd:a0:f0:26:d0:e8:b5:26:dc:b1:7c:bc:0f:66:0a:
8a:13:f4:a5:33:88:9a:f5:47:70:93:07:a1:41:e4:ed:a9:03:
23:58:f9:1f:69:66:8f:71:fd:ce:d0:ad:e1:d1:14:bb:1e:8d:
8a:7a:64:02:cc:ab:50:7f:9f:b3:14:5a:63:26:41:c0:b6:85:
2a:97:d4:53:48:19:41:9d:ee:36:47:44:e8:dc:04:56:c8:53:
a3:60:d1:c2:cb:33:79:ef:3a:c9:4d:04:50:6a:86:df:3e:2d:
99:bf:ba:e5:6a:35:7a:24:7f:34:27:b8:c9:e8:40:2f:ce:49:
6e:6a:f3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:28 2024 by rpki-client on console-ams.rpki-client.org