Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/O8l_yW-wnEtbzAAs2FYvqagiFqc.roa
File: O8l_yW-wnEtbzAAs2FYvqagiFqc.roa (raw, json)
Hash identifier: tYkRDce7bF9zjqFZkmodEda9upJHKWzYnFcegHrMruk=
Subject key identifier: 3B:C9:7F:C9:6F:B0:9C:4B:5B:CC:00:2C:D8:56:2F:A9:A8:22:16:A7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2411
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/O8l_yW-wnEtbzAAs2FYvqagiFqc.roa
Signing time: Tue 06 Jun 2023 08:24:19 +0000
ROA not before: Tue 06 Jun 2023 08:24:19 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.0.0/14 maxlen: 15
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9233 (0x2411)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Jun 6 08:24:19 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3BC97FC96FB09C4B5BCC002CD8562FA9A82216A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:01:8e:8b:29:33:6b:7d:2a:e5:fa:ff:6a:74:
70:c9:6f:bc:a4:8a:d2:86:ae:e8:59:e2:cd:7e:0c:
d8:7a:c2:96:7c:f0:03:7f:d5:70:89:c7:52:46:26:
a5:44:2b:51:4d:72:e9:28:ca:a6:86:ec:f7:21:f2:
90:4c:4f:8e:61:64:98:55:dc:6b:4a:19:de:d4:b4:
4f:50:7c:2b:2a:53:39:32:c6:0c:71:bc:e8:e7:b4:
6b:30:e8:0a:55:b5:6c:ef:71:01:1f:e0:6e:3b:4e:
2d:76:50:07:67:65:07:1c:b2:d5:98:dc:c1:55:e0:
da:e5:a7:2f:87:9c:40:38:73:48:74:8a:8c:9f:62:
91:10:21:eb:7f:ef:74:4f:1c:16:32:9d:92:49:93:
6a:0e:0f:88:c6:81:3c:43:7e:80:19:c3:84:97:12:
e9:a1:e0:01:42:35:2e:ce:f0:86:4d:9a:bb:31:c2:
4e:ee:bb:51:ec:65:da:95:77:3e:81:ab:98:64:83:
b8:4e:05:14:bf:a7:b6:a9:0d:89:75:2c:f6:e1:db:
5d:06:10:10:b3:6d:70:66:68:e6:06:0f:df:96:4d:
2f:5e:87:3e:16:b1:e4:21:a4:c1:46:8c:3c:54:a7:
f7:66:0f:bc:15:76:cf:0f:09:53:5d:e8:1a:04:69:
cf:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C9:7F:C9:6F:B0:9C:4B:5B:CC:00:2C:D8:56:2F:A9:A8:22:16:A7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/O8l_yW-wnEtbzAAs2FYvqagiFqc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.0.0/14
Signature Algorithm: sha256WithRSAEncryption
4e:3f:0f:ea:9e:a7:20:dc:46:b4:85:00:1e:6b:44:cc:9c:88:
14:54:af:d2:77:a8:ed:fa:e5:7c:d5:e0:8f:e7:28:04:26:bc:
94:cd:ea:93:71:88:1e:1d:52:9b:f4:a0:cf:87:2b:05:86:a5:
2a:37:27:e7:38:ff:5c:6b:b7:6e:18:05:3d:b5:6d:32:75:06:
0f:e5:4a:b1:61:54:54:04:bc:17:f5:84:40:68:7e:b2:30:04:
89:da:fe:a2:ba:03:8e:ed:6f:22:5d:8a:53:92:c1:d8:76:3a:
51:85:1c:85:b0:37:05:57:d7:0b:5f:c1:44:b4:68:81:81:2d:
a9:52:31:8c:25:20:1d:a9:58:f7:72:d3:d2:e5:bc:8d:0c:e7:
fd:4a:fa:ca:25:06:b6:50:ce:e6:f3:d8:ae:41:2f:1c:63:70:
42:a9:08:64:dc:6f:8a:3f:46:86:4a:6d:57:cd:2c:b5:ea:e5:
bf:ea:b8:43:c8:7b:6e:a6:87:07:63:0f:c7:ae:0c:57:e9:80:
75:a1:b5:ac:9e:26:15:33:54:00:ff:d8:6c:1a:ea:a8:3c:b5:
f6:ca:e3:83:43:3a:fc:89:58:8a:4d:95:ad:57:ce:eb:af:45:
8c:6e:3d:e0:58:51:93:7f:a7:ef:23:4a:61:43:09:ac:ef:11:
4a:e7:74:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org