Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RKRZZLXpvoAqmDFz3PKdEIAewqE.roa
File: RKRZZLXpvoAqmDFz3PKdEIAewqE.roa (raw, json)
Hash identifier: j1eUYKjps1/k4jv4M3gVXn75nc6+tO1ALEWAMzComjs=
Subject key identifier: 44:A4:59:64:B5:E9:BE:80:2A:98:31:73:DC:F2:9D:10:80:1E:C2:A1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1BDF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RKRZZLXpvoAqmDFz3PKdEIAewqE.roa
Signing time: Wed 29 Sep 2021 02:47:06 +0000
ROA not before: Wed 29 Sep 2021 02:47:06 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.195.160.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7135 (0x1bdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:06 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=44A45964B5E9BE802A983173DCF29D10801EC2A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:82:b5:74:fe:8d:5e:84:18:76:db:ac:ee:55:
c3:06:a8:6f:18:09:af:15:1e:22:b8:29:39:48:1a:
6c:73:21:49:3a:3b:8e:09:f8:87:1a:bc:52:34:8e:
f7:05:d1:e1:c9:40:ee:45:d3:6d:66:53:d9:ec:b1:
ec:80:b2:54:5d:43:c7:72:54:c4:a5:9e:ca:7e:c3:
63:54:a8:a6:a5:a1:d7:2c:f1:c9:3c:9f:c7:13:eb:
90:8b:17:07:f0:4c:87:e5:45:b4:cc:3c:af:04:2b:
2d:95:6e:7d:4e:1e:68:c2:9d:00:06:bf:62:e2:df:
75:e6:a7:19:9b:5c:aa:46:02:57:1c:45:86:d5:3c:
21:26:31:db:57:d5:7b:7b:8b:63:06:03:e5:fe:ca:
4c:1e:22:14:ce:c7:f2:65:76:e3:b7:91:fd:59:39:
fb:97:b5:b4:61:10:78:fe:90:7e:66:f3:56:26:98:
23:e2:34:76:71:ad:7b:41:d1:66:ab:0c:64:30:ab:
83:bc:8c:00:90:78:dc:38:fd:0e:86:e5:71:80:1d:
49:bb:02:30:a5:86:f8:c3:b0:96:60:c0:26:39:9c:
d0:97:30:f1:3e:f9:dc:46:a5:4a:ba:ff:77:57:f7:
2e:76:26:81:4f:e0:fd:66:0e:c6:e3:c9:91:aa:b1:
43:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A4:59:64:B5:E9:BE:80:2A:98:31:73:DC:F2:9D:10:80:1E:C2:A1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RKRZZLXpvoAqmDFz3PKdEIAewqE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.160.0/21
Signature Algorithm: sha256WithRSAEncryption
31:02:c9:08:78:bc:f5:4d:86:94:86:b4:da:93:3d:1a:5f:ba:
b5:07:9a:70:70:1e:6f:1e:75:06:f9:1b:d5:cb:e9:54:80:cd:
f8:04:36:d5:75:21:8e:ef:0b:08:c6:31:1d:0e:a4:b0:df:d6:
7c:fc:5f:6f:4a:a1:ab:98:47:ff:16:05:64:bd:4d:0e:ac:03:
1d:9d:2a:e8:ed:db:4b:66:86:01:e0:e6:90:4c:2b:3d:f1:95:
4a:48:78:1c:a8:90:c7:68:0e:85:4b:40:59:f7:5f:8a:4a:55:
64:8c:06:dd:33:2d:94:4c:95:db:c1:96:b2:20:74:c2:05:bf:
ec:87:de:86:52:3d:45:2b:e7:38:48:2c:da:f1:9d:ef:6d:c8:
e5:70:74:b4:74:8a:39:ab:b5:ef:1a:c6:96:a1:b2:58:2e:9b:
38:6c:1a:0e:26:51:79:a7:fe:88:1f:3c:96:75:9b:dc:34:cf:
2d:ca:ac:c2:bf:14:15:69:86:1a:ad:68:2b:05:6c:a3:ef:df:
5a:42:0d:57:f4:6a:46:e6:ce:c1:fc:7b:07:dc:fe:b0:92:32:
e6:87:4a:38:fd:d6:02:ba:bc:b4:25:a3:04:d2:9f:ea:1c:63:
07:7f:e7:20:5d:e1:42:76:25:22:f0:24:4a:2b:a3:c7:32:83:
24:a5:c9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:31 2024 by rpki-client on console-ams.rpki-client.org