Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Lwal4pUdYTUVUdhiQKlHI2Iyn1A.roa
File: Lwal4pUdYTUVUdhiQKlHI2Iyn1A.roa (raw, json)
Hash identifier: +Bhz18DUNzsvAB/CvSk6tOkF6K9nUdO63I9NlVUtohU=
Subject key identifier: 2F:06:A5:E2:95:1D:61:35:15:51:D8:62:40:A9:47:23:62:32:9F:50
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1481
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Lwal4pUdYTUVUdhiQKlHI2Iyn1A.roa
Signing time: Sun 07 Feb 2021 11:58:54 +0000
ROA not before: Sun 07 Feb 2021 11:58:54 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.184.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5249 (0x1481)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:58:54 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=2F06A5E2951D61351551D86240A9472362329F50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bf:62:ab:97:44:6d:47:59:b7:56:88:f7:04:
81:99:22:04:c3:a1:0b:50:fe:09:50:35:78:71:2b:
61:70:80:4b:a7:0a:36:d8:e3:e6:a9:b8:57:f4:76:
e4:4b:82:36:6b:c9:5b:c5:2c:97:67:52:b2:1c:bd:
5e:ca:27:97:60:bf:de:1f:a8:be:83:61:6b:18:00:
bd:07:45:a4:99:c7:84:b2:3c:79:17:b2:88:de:45:
70:07:68:9d:2c:73:0c:05:c3:d8:b4:68:83:d1:a9:
56:ff:d7:b3:e3:1f:12:c5:4a:5c:8c:db:e1:9b:bd:
23:82:9c:06:0f:58:11:c7:b6:f8:a5:cd:b7:cc:97:
3e:cd:4c:20:f7:40:6c:7d:c2:ec:90:9d:48:e6:c5:
77:36:8f:86:97:93:de:9f:ea:ec:6a:9a:07:de:b2:
17:62:24:0a:b9:a1:36:65:55:59:17:1d:c5:79:3a:
f1:79:7e:92:b0:48:7d:00:b8:48:4e:4a:f7:ec:e8:
d5:89:23:83:14:8b:9b:fd:cf:e2:43:cc:78:ed:bd:
f4:5e:56:b4:56:c2:ba:6c:9c:4f:b2:10:62:c6:e2:
05:b4:1b:07:e2:4b:54:0d:6a:e5:cb:ad:ee:42:c2:
ff:da:60:61:ff:7a:a9:de:d4:29:7e:28:aa:54:13:
30:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:06:A5:E2:95:1D:61:35:15:51:D8:62:40:A9:47:23:62:32:9F:50
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Lwal4pUdYTUVUdhiQKlHI2Iyn1A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.184.0/22
Signature Algorithm: sha256WithRSAEncryption
29:7c:36:a3:1d:0c:79:4f:dd:89:d1:95:dc:88:c2:bb:16:78:
fc:20:9b:74:7e:28:5f:f3:f4:ed:9d:b2:36:60:fa:33:e2:a8:
03:b5:71:f6:64:3b:20:39:d5:c1:47:06:cb:f3:83:18:3d:f1:
97:91:fe:ac:6e:b6:62:18:56:be:c9:ba:70:65:b8:11:80:65:
3c:21:7a:c6:ef:cb:13:db:e4:aa:7b:b1:1e:6e:92:64:ec:0d:
fc:32:3d:1e:7e:0c:03:9f:5c:73:ae:a6:39:0c:93:62:3b:64:
0d:79:44:96:aa:63:00:a6:36:02:3f:5f:f4:c7:c7:9f:78:f2:
aa:c4:f2:b9:e4:ae:45:03:d6:a7:36:ae:b4:40:f1:6d:55:c9:
a9:c4:d9:b5:04:cd:d7:f7:5b:ea:cc:80:76:96:83:f6:7c:ce:
0b:fc:7d:78:78:b4:48:3d:f5:24:03:66:5c:d4:81:65:b5:8a:
0c:d8:52:89:bc:f7:3f:53:0c:f4:24:df:0a:1c:9f:f9:71:ac:
1a:27:2b:02:5e:23:8e:ab:bf:bc:a2:83:bf:9b:66:e4:8b:65:
d7:38:88:93:8a:1d:ac:08:27:59:75:1c:e1:26:09:02:d1:25:
8f:6e:41:a3:be:56:86:64:a8:c2:a0:0f:49:e0:3f:58:b6:0c:
be:3a:4f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:26 2023 by rpki-client on console-fra.rpki-client.org