Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L84ejVZLUaVHhC_bd3J8YE0wNiY.roa
File: L84ejVZLUaVHhC_bd3J8YE0wNiY.roa (raw, json)
Hash identifier: io/nugDtN6NiMztQLrdqVkx24kAtF/8okF9+HIxIAdk=
Subject key identifier: 2F:CE:1E:8D:56:4B:51:A5:47:84:2F:DB:77:72:7C:60:4D:30:36:26
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1725
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L84ejVZLUaVHhC_bd3J8YE0wNiY.roa
Signing time: Sun 07 Feb 2021 12:16:59 +0000
ROA not before: Sun 07 Feb 2021 12:16:59 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.16.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5925 (0x1725)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:16:59 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=2FCE1E8D564B51A547842FDB77727C604D303626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6a:d8:02:72:69:6c:f9:4b:d7:3d:af:45:a3:
3f:a3:84:23:d8:43:4f:dd:01:91:6c:b7:4b:95:14:
b9:a9:4f:60:e1:dd:8c:fc:19:3b:e4:46:dd:e8:00:
8f:a0:ed:f6:92:e4:59:09:28:1c:ba:c8:d4:57:70:
48:ab:60:bc:b7:82:1f:bc:65:91:f4:20:c6:3d:9c:
7b:e4:15:b1:8c:9b:8f:6d:3a:db:51:a6:6c:dd:f3:
27:44:8e:6b:43:cf:83:e3:5a:e0:86:e7:51:17:49:
f2:b5:27:60:ca:0c:02:29:00:6a:c5:c7:74:a3:28:
0d:c7:65:77:01:af:90:31:0e:b3:43:11:a3:b4:db:
df:b4:b3:40:3d:1d:55:b4:37:48:43:86:09:78:0a:
29:20:23:e3:27:48:88:1a:9e:12:2b:89:d6:29:94:
b4:fe:9d:b7:7c:53:d8:0b:52:6b:fd:df:30:4d:18:
84:c1:ac:d3:2f:d9:e2:52:ce:5a:02:39:e0:b0:82:
aa:c9:9c:7b:c3:75:fb:aa:b9:a3:39:e7:41:61:ba:
8a:e4:05:33:ec:cc:99:33:76:c4:49:d4:38:85:41:
79:2f:0d:06:62:83:c0:1c:a9:e0:82:99:71:a7:0e:
c0:7a:38:13:fc:42:14:73:e1:14:8a:75:9b:9a:35:
e0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CE:1E:8D:56:4B:51:A5:47:84:2F:DB:77:72:7C:60:4D:30:36:26
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L84ejVZLUaVHhC_bd3J8YE0wNiY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.16.0/22
Signature Algorithm: sha256WithRSAEncryption
12:15:8e:45:2e:6e:98:db:9f:5b:55:8c:dd:b5:48:3c:fb:71:
5c:19:b9:79:fc:c8:3f:25:bf:17:67:6e:ae:67:da:e0:e1:a4:
22:31:4d:09:f2:6b:4b:57:2a:a6:56:fd:ca:0b:72:a5:4e:52:
df:71:57:93:eb:c3:ca:d7:ff:fc:0a:ba:1b:28:f5:ff:96:40:
21:30:3d:33:c9:77:4c:14:01:ba:ff:d8:22:26:e7:bb:cd:5a:
b2:2b:4d:44:e3:eb:fb:ac:5b:54:6d:4a:d9:9e:b4:eb:9d:7d:
e3:38:3f:93:15:46:f6:c7:4d:a1:76:45:8b:ac:ae:26:8b:d0:
c9:bd:34:88:42:7d:08:e6:89:b8:d7:1d:23:34:36:b2:b5:29:
4e:2a:0e:4b:1e:17:d6:3a:c5:1e:c9:33:92:ad:28:1e:54:f5:
9c:d6:ff:86:ab:00:7d:05:a0:eb:1f:51:fb:e4:c1:e0:dc:b0:
e1:21:0a:d0:41:88:ad:14:45:f6:a1:30:ff:65:ad:ba:58:3a:
6b:2f:45:c0:3c:7b:2b:89:14:e5:81:46:ce:20:2a:6d:34:f8:
bf:9b:a3:4a:a4:cd:08:8c:1b:5f:4c:0f:6a:e7:7d:4a:04:c1:
f2:c9:4c:22:4b:10:1f:5a:da:65:40:00:18:f2:9e:0e:cb:77:
bc:60:05:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:26 2023 by rpki-client on console-fra.rpki-client.org