Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/T7M3QROazRt-E5FLdKKyzoQaWqk.roa
File: T7M3QROazRt-E5FLdKKyzoQaWqk.roa (raw, json)
Hash identifier: jIA4nftjr4rFgGm+v/PvPos0E3a/q7nkUIdhzOWD3VM=
Subject key identifier: 4F:B3:37:41:13:9A:CD:1B:7E:13:91:4B:74:A2:B2:CE:84:1A:5A:A9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FDB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/T7M3QROazRt-E5FLdKKyzoQaWqk.roa
Signing time: Sat 22 Oct 2022 11:19:05 +0000
ROA not before: Sat 22 Oct 2022 11:19:05 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.24.0/21 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8155 (0x1fdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Oct 22 11:19:05 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4FB33741139ACD1B7E13914B74A2B2CE841A5AA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6e:e3:15:75:4c:3f:53:9e:07:36:08:75:a3:
66:db:c0:3a:35:b4:d6:c1:6f:89:2c:f7:29:93:f1:
21:79:b3:36:a8:35:12:90:27:8f:96:2d:d2:0b:23:
72:80:28:56:5b:1c:f7:41:e5:60:87:a4:d4:28:4a:
3d:be:a0:7b:15:35:c6:6c:d4:6b:94:66:ec:48:68:
12:36:86:25:36:ed:2a:eb:52:68:55:fc:a9:bc:de:
62:7c:e7:a7:04:14:85:13:71:bc:e1:a2:0b:79:cd:
da:68:d7:07:3e:d9:bc:03:09:f5:99:f9:f1:ca:2b:
31:90:d7:65:72:51:d5:0d:9a:42:08:df:b6:2f:a4:
34:80:4d:07:c1:e2:70:b4:8f:92:13:6c:fb:29:e9:
ab:b7:39:e7:2d:6f:96:7a:be:c1:9e:b2:6e:ac:ef:
da:dc:22:67:1a:2f:e9:18:15:dc:4f:1c:39:c1:02:
1a:bc:6c:49:a7:01:4c:c9:2a:9b:81:8e:29:f0:33:
7a:dc:8f:d8:06:80:d3:11:d7:7a:de:c1:b5:72:81:
5c:12:49:df:cc:ac:ff:ae:96:bd:c9:54:8b:bc:ef:
11:ac:d4:08:07:c5:e4:72:f2:0d:77:cc:73:47:5b:
2d:01:65:69:24:a9:96:e0:f3:22:1c:c5:4a:db:22:
6f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B3:37:41:13:9A:CD:1B:7E:13:91:4B:74:A2:B2:CE:84:1A:5A:A9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/T7M3QROazRt-E5FLdKKyzoQaWqk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.24.0/21
Signature Algorithm: sha256WithRSAEncryption
57:93:ab:98:03:d9:ed:dd:57:ca:e2:d2:17:87:db:74:c1:ef:
a9:7a:2f:ca:23:60:85:a4:ce:b5:c3:31:4d:85:60:97:31:7e:
dc:cf:0a:cd:1b:70:a1:44:0c:7e:6e:3b:51:70:bb:41:4e:55:
4e:4c:85:17:04:d6:f8:d9:9a:9b:d8:9f:04:68:54:4f:dd:2d:
7f:0e:05:0d:d6:1d:01:63:11:1e:e2:62:a6:37:f7:15:3a:57:
83:d1:35:aa:7f:7d:69:f5:6a:48:04:13:b3:b1:53:22:1c:74:
e2:96:f8:bf:5f:4f:0f:f0:11:89:06:83:ae:5a:8a:23:67:23:
95:01:ef:b4:e5:02:e7:ed:e3:db:49:fa:02:72:88:81:a3:67:
57:25:aa:aa:bb:ad:31:a5:3b:c5:f9:8f:5d:0d:07:d8:89:44:
47:a0:b9:fb:9a:f7:ca:d5:d0:3a:1b:fb:60:58:38:36:06:d0:
ee:51:d9:ab:bd:d9:da:0c:f7:fa:b5:c7:94:ea:e1:95:b3:1c:
07:17:5b:c9:42:25:9a:bd:df:f3:62:7c:5b:7b:ab:a5:9f:17:
cb:62:2e:8e:f7:80:50:1f:bc:0e:51:3c:7d:93:37:d2:fb:a8:
c6:7a:34:67:57:db:a7:5b:e3:bf:ed:86:fb:5e:bb:0e:7a:ff:
8b:9a:ee:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org