Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S5gQ9bx2op0rWhzvT2P5fz6aYeg.roa
File: S5gQ9bx2op0rWhzvT2P5fz6aYeg.roa (raw, json)
Hash identifier: SXFKfiOWSqyjkB00s6NAIuuOrjoxxgaxMqhBsE9OuSE=
Subject key identifier: 4B:98:10:F5:BC:76:A2:9D:2B:5A:1C:EF:4F:63:F9:7F:3E:9A:61:E8
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 20C7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S5gQ9bx2op0rWhzvT2P5fz6aYeg.roa
Signing time: Fri 25 Nov 2022 04:39:05 +0000
ROA not before: Fri 25 Nov 2022 04:39:05 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.208.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8391 (0x20c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:05 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4B9810F5BC76A29D2B5A1CEF4F63F97F3E9A61E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ef:7b:66:02:10:f8:81:b9:4f:ff:29:53:41:
00:82:ed:b6:25:8a:63:2d:e6:55:af:58:f4:96:70:
be:2d:76:da:82:41:ae:f8:45:b0:cd:a2:b8:f5:a7:
41:01:1a:ab:37:e1:aa:f2:1e:82:b4:47:46:16:14:
98:ef:10:7a:9d:90:27:fd:91:44:c0:8d:c3:aa:47:
29:55:1a:f0:72:bf:ad:ad:79:2b:ad:5a:fa:e6:62:
be:59:1c:fd:be:ea:73:09:32:3c:f5:aa:4e:9c:1d:
22:d0:19:f7:e1:7c:47:a6:fa:ee:5a:13:df:2f:ae:
3c:75:f4:87:3b:e2:78:c3:7b:39:61:be:65:eb:e5:
c8:1a:38:7b:9c:12:26:55:01:74:dd:7f:ca:83:45:
76:51:a0:ed:0a:d9:9f:74:6e:c9:49:e6:7a:2f:37:
22:a1:17:ba:1a:ae:8a:04:9b:b8:36:dd:e0:60:b4:
74:76:55:01:14:84:7f:ad:e6:25:b4:79:02:13:04:
a8:1a:5a:8b:89:8f:02:cd:ac:1b:e8:1a:62:99:fb:
fe:f8:9b:11:82:f6:9e:aa:91:40:fc:b6:6b:d8:fa:
73:6a:8a:eb:d8:0c:08:74:ce:f3:35:d8:a1:bd:0c:
cd:49:d5:96:bb:61:82:98:0b:4e:d9:59:55:ad:ab:
cb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:98:10:F5:BC:76:A2:9D:2B:5A:1C:EF:4F:63:F9:7F:3E:9A:61:E8
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S5gQ9bx2op0rWhzvT2P5fz6aYeg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.208.0/22
Signature Algorithm: sha256WithRSAEncryption
58:8c:bb:db:12:a5:c6:f2:7d:54:fa:b2:66:fd:8f:ed:31:a7:
6e:07:a6:20:f1:65:d0:21:25:07:05:bd:6e:91:bb:b5:81:87:
3a:d9:42:df:dc:cb:bf:93:a6:27:84:a4:92:2f:56:08:18:d2:
9e:a9:18:69:d4:59:87:4d:e5:4c:88:31:49:9d:f1:a3:1b:3b:
5e:70:99:45:1c:6e:1b:bc:7c:ae:f4:8d:4a:41:e8:a4:dc:3d:
1d:88:82:33:1e:6c:cc:7d:8a:2f:32:ea:cb:13:67:20:d8:31:
7e:55:f0:ea:e1:cc:ed:7f:4d:43:29:94:72:7f:71:b2:5a:4c:
9a:36:8e:da:66:c3:04:4e:1a:1f:d5:e8:0c:de:ad:1a:ce:11:
46:04:f5:1d:60:bb:52:af:c8:24:76:1a:ee:58:2c:7c:b4:e7:
9f:c8:f0:45:9a:d3:04:bf:ca:64:1c:44:3b:21:01:12:c7:fd:
c4:b2:63:06:ca:5d:d6:df:48:ce:38:b4:71:96:cd:c6:8e:6f:
4d:1a:f7:2d:5d:a8:13:9a:b3:89:45:09:c6:fb:ad:85:10:10:
d0:f5:a3:4a:f2:e6:ef:c0:02:e6:a9:4b:18:98:47:bf:20:fe:
02:26:93:5d:95:37:dc:d8:23:c1:c8:90:e6:01:f7:28:84:67:
2e:ea:bf:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:31 2024 by rpki-client on console-ams.rpki-client.org