Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MAt9wtm380fHKtEdkbL0uedGBdU.roa
File: MAt9wtm380fHKtEdkbL0uedGBdU.roa (raw, json)
Hash identifier: /FDh1ajW5sIdBzpyEoziMWjov+XYIAcCAW217dLClBI=
Subject key identifier: 30:0B:7D:C2:D9:B7:F3:47:C7:2A:D1:1D:91:B2:F4:B9:E7:46:05:D5
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 224B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MAt9wtm380fHKtEdkbL0uedGBdU.roa
Signing time: Fri 25 Nov 2022 04:41:00 +0000
ROA not before: Fri 25 Nov 2022 04:41:00 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.196.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8779 (0x224b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:00 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=300B7DC2D9B7F347C72AD11D91B2F4B9E74605D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a6:a4:08:b5:21:b5:a2:08:be:8b:b4:46:7a:
ef:9a:e1:37:b0:27:e4:13:ec:88:11:3b:fe:66:1d:
a1:90:80:9a:1e:a2:62:b9:86:bd:f9:2d:cc:b9:c8:
ad:44:0f:e1:53:ba:22:f9:63:90:16:5d:98:2c:8c:
6d:4a:43:a4:4f:97:c8:5a:fd:ad:53:60:76:f3:a4:
51:15:fe:d5:9c:82:a2:7b:e8:7d:9e:cb:46:f5:c9:
a4:8b:1a:5a:2b:fb:eb:ea:67:36:f9:01:9c:c8:57:
94:d6:d8:76:b7:ea:57:d3:8d:28:ed:12:36:55:e9:
17:43:73:d8:4f:30:0f:73:7c:a2:3b:5d:e6:5b:ac:
21:1d:10:35:26:dc:69:ff:d7:ed:75:8e:df:89:e1:
c7:4a:44:09:64:2b:d7:b8:a4:6e:08:8d:0f:70:08:
d8:29:aa:77:8f:76:a4:d1:ad:8b:84:d5:2c:64:a2:
4f:49:31:a7:ec:12:1f:f1:da:72:13:e0:04:b6:39:
9f:00:dc:e0:57:13:c0:d7:3f:cc:d0:77:78:9f:58:
cb:43:be:86:c2:81:09:60:ce:ec:d7:2a:72:a8:2d:
20:2c:41:cd:1d:0f:b0:d9:b2:0a:a3:a8:90:09:f0:
25:9d:4b:75:08:4f:7a:13:47:32:a8:06:cb:4a:47:
98:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:0B:7D:C2:D9:B7:F3:47:C7:2A:D1:1D:91:B2:F4:B9:E7:46:05:D5
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MAt9wtm380fHKtEdkbL0uedGBdU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.196.0/23
Signature Algorithm: sha256WithRSAEncryption
04:a2:d9:9e:d1:f9:2d:2b:30:1c:1b:52:ff:63:8d:62:2e:ae:
16:f6:23:ee:92:ec:ab:05:bb:ab:35:e8:be:06:e4:28:9e:d3:
58:0a:9a:97:43:84:69:58:b9:c9:2c:86:e2:0b:2e:47:69:42:
d3:6c:d4:fe:41:c0:2a:38:f9:49:cb:ac:94:57:d5:72:dd:9b:
95:c9:38:bb:28:9e:28:72:fc:ca:f6:bd:e2:da:5e:59:c7:3d:
3f:e9:f1:ad:67:13:f9:fd:45:a0:50:b7:d2:32:6d:44:87:64:
ce:4d:f2:cf:c2:e4:6b:34:81:90:4b:7e:4b:21:3a:5d:6c:fe:
28:d7:79:d2:47:e2:c5:95:d4:ed:42:50:3f:0a:75:db:da:a4:
84:c6:ce:e7:c3:ab:0d:7b:3f:0a:84:48:52:9b:8d:1b:c1:19:
0a:7b:a6:1e:84:42:81:fe:2e:9a:ae:11:09:05:b6:d7:52:e6:
1e:78:4c:84:ac:88:4a:89:2e:4d:8a:44:f6:4f:5f:57:5d:e4:
e5:df:c8:83:5a:75:24:60:66:ff:f2:b1:5b:db:84:77:69:03:
3c:ee:8b:27:8c:40:37:b9:36:8d:4c:50:ad:94:85:63:d8:41:
33:ca:a2:27:5d:34:5b:7b:fc:b8:66:c3:17:87:8b:b2:17:b1:
b0:5a:b4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:29 2024 by rpki-client on console-ams.rpki-client.org