Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NqcZYVmOaRDlZRCpwJ7KmLVZMSE.roa
File: NqcZYVmOaRDlZRCpwJ7KmLVZMSE.roa (raw, json)
Hash identifier: noJvOgyNOUMsvHoSpI6wJtZHX/GZ1TJdvOphMgvgBmc=
Subject key identifier: 36:A7:19:61:59:8E:69:10:E5:65:10:A9:C0:9E:CA:98:B5:59:31:21
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NqcZYVmOaRDlZRCpwJ7KmLVZMSE.roa
Signing time: Thu 15 Sep 2022 02:44:59 +0000
ROA not before: Thu 15 Sep 2022 02:44:59 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.144.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:44:59 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=36A71961598E6910E56510A9C09ECA98B5593121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5a:77:9b:d9:e2:f6:93:e5:ff:07:53:92:a9:
d4:7e:52:b2:cf:95:9a:1c:0d:42:0f:dd:8e:04:19:
2b:38:81:49:45:42:83:e3:d4:b2:66:58:90:05:59:
d1:20:6a:92:d7:ba:9e:92:71:04:5d:80:10:d6:be:
41:59:cb:85:ef:a4:c3:7d:e9:c6:1a:d0:a4:77:66:
2a:1b:1b:6a:b1:cd:e4:a7:c8:fa:d1:77:ac:f3:b9:
a4:69:f3:06:e9:0e:f9:4b:d0:57:c8:5c:2d:0a:a8:
4b:62:9b:65:8b:a3:4f:0f:74:04:f8:54:3b:d2:16:
9b:52:6f:a1:16:01:89:dd:d3:80:b2:f8:ee:53:73:
1b:c3:f4:5c:09:07:e6:e0:c5:a3:92:5e:fb:60:b6:
3f:98:55:36:d6:60:2f:6d:80:64:42:c9:f3:d5:f6:
ee:8c:ae:0d:42:c3:97:8a:ce:9f:04:2a:41:90:5b:
ed:e0:2a:ca:77:46:a6:85:bb:f2:fd:ad:55:c8:2c:
ee:68:ee:d3:fb:d6:64:81:b5:0e:6c:14:b2:ef:84:
01:5b:a2:24:59:ae:a4:f4:1f:5c:b2:5e:00:05:7b:
79:e5:3d:82:00:6a:b5:5e:1e:b5:06:dd:50:ee:42:
cc:15:ee:37:8c:40:27:00:11:66:ac:fb:73:9a:1d:
a3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A7:19:61:59:8E:69:10:E5:65:10:A9:C0:9E:CA:98:B5:59:31:21
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NqcZYVmOaRDlZRCpwJ7KmLVZMSE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.144.0/21
Signature Algorithm: sha256WithRSAEncryption
33:50:ce:8b:45:98:cc:56:56:d3:ef:0c:f4:03:39:ec:fd:1f:
2f:e1:da:2a:c8:65:86:69:55:7d:fc:22:44:b2:71:57:17:e8:
ce:c3:49:35:11:2a:6a:a8:3c:4a:6a:fe:8e:47:d9:01:f4:eb:
20:39:93:f6:89:7d:9a:86:87:20:58:d8:f5:1c:b8:1a:47:2e:
ea:15:d5:d1:e8:36:0d:b8:c6:14:78:e7:18:72:d4:23:fc:61:
2d:70:52:df:5f:9d:21:20:96:20:5b:15:14:12:c9:76:42:65:
42:4c:3a:b3:a2:50:de:58:65:0c:97:7a:5b:6d:8e:9f:2f:7d:
89:2b:f7:1a:46:b2:aa:74:78:fc:2c:95:fa:dd:1a:3e:36:7f:
2c:43:3b:87:4a:50:4f:29:e1:1b:dc:63:9a:32:59:fa:64:ca:
c6:22:3c:78:ad:85:44:55:94:df:af:2b:82:5c:0e:35:19:e2:
8c:68:4e:af:fd:61:e7:7e:ad:0d:62:30:6d:90:71:b6:83:b4:
10:3a:8c:fe:ee:09:c8:fd:94:04:00:26:62:3b:10:2f:6f:fa:
cf:d9:1b:38:6b:13:9a:5a:9c:f4:35:70:a7:ab:a0:48:c8:e7:
f6:44:af:4d:58:4e:f7:f7:82:af:73:03:2d:95:ea:44:3e:0a:
8d:4e:6e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org