Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LDaIQTnl2lJSGM5RlR_xgmuYioA.roa
File: LDaIQTnl2lJSGM5RlR_xgmuYioA.roa (raw, json)
Hash identifier: tAQZ7bR37mQRcv/327nNjnwfeI/GVBHLtsm43Z34sNk=
Subject key identifier: 2C:36:88:41:39:E5:DA:52:52:18:CE:51:95:1F:F1:82:6B:98:8A:80
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LDaIQTnl2lJSGM5RlR_xgmuYioA.roa
Signing time: Thu 15 Sep 2022 02:53:30 +0000
ROA not before: Thu 15 Sep 2022 02:53:30 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.80.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:30 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2C36884139E5DA525218CE51951FF1826B988A80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:57:13:bc:f4:d9:b9:df:30:18:77:58:57:70:
35:56:62:38:81:00:37:fe:7d:71:7b:5b:08:fc:cf:
33:fc:82:a3:0e:94:1f:55:98:af:a9:a0:4c:ce:bf:
5d:c6:0b:c7:e7:af:49:00:03:0c:98:b0:23:f3:ca:
e3:84:46:96:31:a1:d9:e7:87:49:13:0c:1c:24:eb:
b6:15:de:48:ec:ed:2a:5c:68:94:ec:08:83:9a:e8:
1c:84:1a:2c:78:e8:25:38:e2:a1:5a:bb:d5:83:eb:
0b:28:43:88:c6:42:50:d4:b0:bb:a2:3b:b0:33:73:
69:0b:9e:c7:ee:69:d2:5f:be:cf:bf:93:cf:15:a7:
da:a6:22:bc:70:8e:d0:09:31:c1:80:51:02:1c:98:
78:5a:f1:fd:78:93:86:e4:21:bb:8c:c2:75:7f:e9:
35:96:b2:7f:91:a1:e2:e9:61:ae:a8:1f:a1:a8:66:
19:e7:2b:e3:a1:96:76:de:40:6f:07:4a:f9:bf:d3:
1d:37:77:68:a7:62:c9:ca:af:55:68:2d:1d:b8:a3:
70:63:c7:92:76:b7:a9:c9:c3:8d:89:cd:4c:89:7b:
fb:ce:bc:c2:76:ea:30:03:74:e5:ee:46:bf:f6:30:
b1:1e:08:fe:77:cb:d0:4f:e0:40:17:7b:f4:5f:2d:
1e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:36:88:41:39:E5:DA:52:52:18:CE:51:95:1F:F1:82:6B:98:8A:80
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LDaIQTnl2lJSGM5RlR_xgmuYioA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.80.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:b1:7e:0a:da:a7:e6:16:74:4c:8e:7b:b1:2a:b1:91:54:6f:
42:ba:c2:fc:e0:88:9f:e1:2c:cd:49:69:7f:b0:e2:65:95:ce:
4e:f3:64:49:59:cc:ec:b8:27:e8:45:b1:36:9b:9e:28:8f:3e:
88:46:f7:17:28:2a:1a:ef:a9:b6:f9:7d:d5:88:97:84:44:41:
06:98:cc:d2:23:2c:b0:81:59:39:d5:bd:f7:d0:22:25:d5:97:
c9:a2:3a:2b:d8:f5:85:9b:81:b1:64:2d:f0:bc:ea:e7:02:a7:
88:21:af:1f:15:50:65:c9:6e:2c:97:52:1f:52:f1:5f:bc:ff:
42:ea:1b:fd:31:fa:82:dd:19:b0:81:ab:a8:ee:3e:d2:c8:28:
a6:8d:44:5a:bc:68:32:0e:15:b7:86:7d:fe:e0:bd:d7:2a:c1:
ab:d7:51:4d:09:b0:fa:77:36:60:6f:8e:4d:b8:3e:fe:46:ff:
06:9f:d8:76:47:9d:e0:8c:1c:6e:dc:a4:92:aa:05:e4:b9:ae:
93:21:dc:ff:a2:a9:1f:70:54:d6:c4:e0:31:8b:81:5f:e0:40:
29:9b:af:5a:08:d8:f6:a2:cd:9b:5a:ce:82:5a:44:c9:8f:4a:
3e:65:0f:dc:7c:24:2f:2c:b3:1d:9b:83:fa:4e:55:77:13:2f:
ee:7f:c8:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:28 2024 by rpki-client on console-ams.rpki-client.org