Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PJzQP7Yw9MKXaWatIpAYCADwRDY.roa
File: PJzQP7Yw9MKXaWatIpAYCADwRDY.roa (raw, json)
Hash identifier: kQTb0A4TQSlaMsKi8cMI06a9jTCk5QsNvM+zcOQX4g0=
Subject key identifier: 3C:9C:D0:3F:B6:30:F4:C2:97:69:66:AD:22:90:18:08:00:F0:44:36
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2360
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PJzQP7Yw9MKXaWatIpAYCADwRDY.roa
Signing time: Fri 25 Nov 2022 04:43:30 +0000
ROA not before: Fri 25 Nov 2022 04:43:30 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.196.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9056 (0x2360)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:43:30 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3C9CD03FB630F4C2976966AD2290180800F04436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:03:d0:ed:ad:12:b7:68:2d:07:c5:7c:6c:d0:
25:a4:86:79:22:19:ac:d9:f2:f9:50:e2:ed:64:0f:
64:8a:2b:93:ec:a0:43:cd:d4:e8:45:86:43:01:95:
f7:4d:ac:ba:db:f4:75:27:35:e6:f7:09:85:2f:1a:
4d:13:72:bf:fb:0e:99:2d:65:ee:12:3d:a4:b0:c0:
45:d5:47:63:fa:55:ee:01:9b:47:12:68:0d:8c:1f:
ba:b6:0e:c2:e7:47:b5:fd:81:ca:1f:a9:4c:10:73:
e7:1b:cf:f5:a6:6f:6c:74:4c:58:12:bd:c3:c2:0a:
f8:39:c5:e6:b8:5e:07:a5:8c:2c:41:cb:74:cd:82:
f7:51:97:c1:aa:73:74:3d:8a:3f:7b:a7:af:b2:44:
46:2f:f5:55:95:06:c6:2a:f7:fe:2e:5d:a4:4d:30:
17:59:52:6f:5c:d2:f3:57:1a:10:22:f5:5e:8f:c7:
0f:8f:97:88:56:0f:6f:de:9c:a8:4a:80:68:a0:9d:
80:85:b8:33:43:b7:c2:39:f2:9e:d2:6d:c0:dd:00:
80:dc:37:52:c1:32:e9:a9:73:78:0b:c9:67:3d:cc:
45:42:75:9b:5d:c6:8f:8b:1d:3c:cb:34:d3:f3:61:
d3:8a:a6:8c:48:72:70:18:e6:92:26:d9:a1:e9:99:
6d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9C:D0:3F:B6:30:F4:C2:97:69:66:AD:22:90:18:08:00:F0:44:36
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PJzQP7Yw9MKXaWatIpAYCADwRDY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.196.0/22
Signature Algorithm: sha256WithRSAEncryption
89:28:3a:88:c4:da:f4:15:33:7c:e8:77:68:79:07:b7:85:87:
12:f9:a4:af:ac:ac:8e:b3:6f:04:d4:d2:c2:95:32:da:2c:0d:
69:5f:39:61:37:fd:bd:d3:88:44:32:f9:c6:d4:eb:6c:cf:c8:
f0:46:15:13:70:9f:44:dc:50:5f:b3:52:19:f0:1f:fb:fd:c7:
10:47:f7:27:e2:d1:63:08:de:2b:d3:b8:6a:cd:0f:09:dd:81:
69:93:bd:92:39:3e:0b:67:06:0d:83:1d:a6:16:66:50:bc:3f:
8c:6a:22:6d:7d:07:a3:f3:d5:5b:51:22:cc:13:8c:0d:e9:5b:
a9:37:e2:1c:2c:a3:7a:f3:02:21:60:47:2d:cc:58:67:48:e1:
a1:af:d1:2b:2f:0e:c7:5c:2e:06:34:82:7e:2f:69:1a:a0:de:
9c:78:b9:8d:da:fd:ba:cd:0d:b7:3e:62:8d:92:15:83:d6:29:
02:b5:57:56:54:6a:f4:2e:81:7f:62:40:72:6d:76:14:4f:76:
ab:89:e4:67:1c:da:fd:0f:24:a1:61:03:55:3f:dc:61:d4:9c:
bb:f6:b3:d3:b0:89:05:5c:54:c7:7b:17:ad:a9:51:bd:0c:c4:
a1:77:4c:48:26:77:f6:62:0c:78:b6:73:5b:a9:f9:c0:0f:ac:
0c:78:a8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:30 2024 by rpki-client on console-ams.rpki-client.org