Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SvqTClYmvSRO1wtWWJpQOljh0Dc.roa
File: SvqTClYmvSRO1wtWWJpQOljh0Dc.roa (raw, json)
Hash identifier: 88Apk4bThPSAPZ+NslFfePgSsli7uyf3wtPamjtjNHM=
Subject key identifier: 4A:FA:93:0A:56:26:BD:24:4E:D7:0B:56:58:9A:50:3A:58:E1:D0:37
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SvqTClYmvSRO1wtWWJpQOljh0Dc.roa
Signing time: Thu 15 Sep 2022 02:44:40 +0000
ROA not before: Thu 15 Sep 2022 02:44:40 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:44:40 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4AFA930A5626BD244ED70B56589A503A58E1D037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2e:a5:f9:3f:92:5c:b7:51:2e:2a:7d:60:30:
d7:a6:35:3a:51:d0:46:4e:3e:a7:94:e1:fa:25:4f:
e4:65:ee:f9:77:27:61:68:7d:20:9a:45:fc:38:11:
3a:96:15:ef:f1:71:49:3d:00:af:15:54:d9:cb:73:
07:48:2f:51:52:57:95:1b:15:46:61:f3:3e:4e:54:
df:de:74:85:58:c6:1f:9f:e9:a1:ea:29:6f:30:97:
61:1b:5a:ee:9a:e3:8f:30:19:da:83:5f:5e:29:44:
81:ad:c5:3a:dc:28:96:33:ae:43:7e:f3:1b:38:47:
47:4d:b1:27:5a:ee:71:3d:fe:c7:f7:5b:dd:dc:0b:
95:8b:f9:58:da:da:e9:07:9a:20:0a:16:7c:3c:fc:
36:9e:a0:7b:cc:e7:34:d6:0f:5e:f9:d7:99:a2:ee:
6e:72:fc:e9:27:89:c0:0c:81:fa:d3:26:af:86:32:
f5:7a:31:b8:3d:51:90:95:16:c3:98:9b:cf:14:6b:
fa:54:4b:01:fe:4e:79:56:68:b0:1e:7b:68:0c:04:
6b:ab:75:45:03:3e:e2:65:93:00:3e:6a:68:ac:30:
83:41:6c:cf:f3:b9:c6:61:2d:50:00:24:43:80:9e:
18:9b:bb:50:d3:d0:83:ff:62:f1:cc:b7:1f:da:8b:
a1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FA:93:0A:56:26:BD:24:4E:D7:0B:56:58:9A:50:3A:58:E1:D0:37
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SvqTClYmvSRO1wtWWJpQOljh0Dc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.144.0/20
Signature Algorithm: sha256WithRSAEncryption
2d:bb:93:fa:f1:a8:49:fc:c5:d3:e0:59:4a:0c:3e:2a:07:08:
b7:47:36:4e:db:7f:5d:41:1e:45:d0:39:35:17:10:1f:1c:67:
f3:be:c3:9a:77:30:d5:ce:c7:5f:55:4a:bd:db:ac:1a:f3:16:
39:47:d5:bc:dd:18:76:0c:1b:03:90:15:96:00:36:af:35:8d:
16:27:2c:5b:d3:d3:9b:4a:7e:d7:7c:35:4d:8f:48:75:a0:73:
e9:7a:fc:e2:48:c0:c5:14:34:b4:b4:4f:b9:68:e2:8d:66:87:
f8:0f:7a:bb:9e:fb:28:03:60:d6:af:d0:3d:2d:ef:a3:da:90:
70:ab:0f:8b:ef:19:23:48:50:ce:47:42:67:26:ce:6f:17:34:
84:29:91:b9:af:e8:fe:d5:f6:6e:d8:48:a8:8c:85:2d:5f:fa:
9d:56:af:f2:5c:81:f4:d6:9a:db:2a:81:7c:7d:81:76:ab:b6:
7f:c2:61:92:c4:a5:bc:cc:2c:a9:0c:dc:30:9d:97:7a:b8:20:
b4:d7:fa:1d:19:d9:c2:3e:f1:b4:86:d3:89:a9:7c:17:5f:25:
fc:9a:41:c0:a7:fa:2d:8a:08:2b:8c:69:5b:19:64:d5:d4:6f:
d6:fc:3f:12:23:8b:43:df:b7:53:1e:5d:a9:f9:62:45:ec:e4:
ee:54:d6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:31 2024 by rpki-client on console-ams.rpki-client.org