Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LB5cHAk9ACQnCJHQ-8VmxOt3JaA.roa
File: LB5cHAk9ACQnCJHQ-8VmxOt3JaA.roa (raw, json)
Hash identifier: oDIv+IuuB0p3pUCpJed2y17E98MWmbk8esbF/35nz7k=
Subject key identifier: 2C:1E:5C:1C:09:3D:00:24:27:08:91:D0:FB:C5:66:C4:EB:77:25:A0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LB5cHAk9ACQnCJHQ-8VmxOt3JaA.roa
Signing time: Thu 15 Sep 2022 02:45:12 +0000
ROA not before: Thu 15 Sep 2022 02:45:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.9.64/26 maxlen: 26
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:12 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2C1E5C1C093D0024270891D0FBC566C4EB7725A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:25:4c:36:ea:d3:57:2a:61:2e:33:1b:72:c1:
be:fc:7e:64:b2:e3:1a:70:d4:7e:49:bf:ec:f7:84:
6b:3a:57:03:11:d1:33:cd:b9:e5:da:6d:25:c6:e8:
90:a6:6f:49:0b:5f:68:fc:94:77:54:02:e5:23:62:
66:d9:05:ca:99:8e:57:6e:d8:a0:75:05:14:9c:50:
e0:d4:27:14:db:f5:56:c2:42:a6:b9:9a:82:42:52:
09:0d:c9:9a:e6:bf:3f:11:84:e5:d6:bf:fb:21:6c:
35:e7:1b:ba:30:86:a4:ae:54:92:cc:92:5b:60:1f:
e8:72:c0:65:d6:4e:13:f2:5a:ae:89:0c:b6:33:41:
67:d1:f7:f3:06:33:f4:e8:e0:43:a5:dd:69:18:2e:
63:ce:8d:40:dc:67:93:9a:a1:10:a9:59:33:99:2c:
1f:d6:78:1c:3a:b3:8a:14:27:b7:f8:78:07:60:ba:
d6:c9:60:58:30:3e:96:5c:ae:d3:db:ec:00:6a:72:
c1:e8:d9:b9:ad:fe:9e:e0:5e:b8:1b:d2:25:20:e0:
33:49:45:25:be:45:ef:ed:b5:28:12:4e:d2:4e:22:
06:b4:ec:e7:99:b6:be:bc:8e:ab:71:40:9c:91:6e:
78:48:21:a0:e5:8a:6a:f2:ef:93:c9:9f:6a:a8:54:
76:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:1E:5C:1C:09:3D:00:24:27:08:91:D0:FB:C5:66:C4:EB:77:25:A0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LB5cHAk9ACQnCJHQ-8VmxOt3JaA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.9.64/26
Signature Algorithm: sha256WithRSAEncryption
86:f7:bb:5f:a6:19:55:a4:9c:fa:a7:59:34:48:f9:d9:4a:b1:
f5:f6:e3:be:1d:cc:30:af:ef:c6:0d:b9:d1:d4:96:a3:04:20:
90:8a:da:29:48:a6:87:76:94:23:c8:51:e2:03:d4:01:4b:3b:
42:2f:b1:f3:c1:e1:4e:da:cb:36:f6:6f:54:3f:04:8d:e8:6f:
1f:55:ca:61:53:83:31:71:d0:3a:2f:04:a8:e5:f7:a2:0e:e0:
22:80:6b:f1:3c:78:52:66:48:64:af:12:2c:67:86:96:2b:dc:
5a:12:00:c9:89:9c:26:22:cd:1d:49:7a:30:7e:91:eb:97:1c:
83:b1:c4:18:6b:1e:09:08:bf:27:57:00:66:9b:da:1e:73:99:
d7:05:9b:31:7e:0d:94:af:de:b6:3a:f2:ee:62:f8:00:50:77:
27:83:21:81:34:14:3b:8d:87:e2:2f:d5:57:ba:a3:58:cd:3d:
2d:5b:19:2c:df:49:74:de:1f:38:5c:0c:5b:10:57:d5:55:06:
2b:42:42:22:2b:5f:f2:6d:eb:f3:6a:50:ee:46:67:81:79:eb:
c5:cf:96:b0:9f:ff:49:a8:dc:19:13:ee:65:3c:d0:cf:66:c4:
04:e8:43:7e:ef:fb:2b:4d:70:d3:cd:c1:84:ad:af:e2:6d:35:
b7:54:65:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:28 2024 by rpki-client on console-ams.rpki-client.org