Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UWuX61r1eLBsuuRYK7cVNugFEGk.roa
File: UWuX61r1eLBsuuRYK7cVNugFEGk.roa (raw, json)
Hash identifier: w77WyR11XOmdIEFk2LK/WuGty8/N8QHMZtnpgkixNXk=
Subject key identifier: 51:6B:97:EB:5A:F5:78:B0:6C:BA:E4:58:2B:B7:15:36:E8:05:10:69
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1E67
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UWuX61r1eLBsuuRYK7cVNugFEGk.roa
Signing time: Tue 03 May 2022 03:44:53 +0000
ROA not before: Tue 03 May 2022 03:44:53 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.192.128.0/20 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7783 (0x1e67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: May 3 03:44:53 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=516B97EB5AF578B06CBAE4582BB71536E8051069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ac:fe:22:ea:f2:81:30:b6:f8:35:1e:13:c2:
f0:dd:6c:5e:07:53:ed:2a:d9:ea:40:d6:b7:fb:2b:
f9:eb:de:6a:15:25:68:72:db:c2:ab:df:1c:ed:f0:
73:bb:79:90:07:35:4d:2e:d2:7d:84:0a:37:5e:1f:
81:0c:aa:a5:c6:f8:2c:58:cc:56:50:7d:22:a9:be:
9e:5d:5a:d9:9b:7f:05:0b:08:87:3e:10:cd:19:62:
74:f6:fb:37:c4:a0:e6:c4:fb:79:ad:fe:12:46:df:
95:67:c2:10:41:94:f7:59:ef:83:1f:98:9a:6d:ee:
2b:d1:aa:23:f8:cf:b9:04:44:ad:87:21:3a:49:36:
46:eb:98:37:ec:c8:52:3a:a8:af:9f:90:a8:bc:96:
1a:6b:0e:64:57:96:a8:64:54:ba:7e:9e:03:1b:b3:
ff:bf:ce:af:46:99:8a:90:42:8f:5a:4d:e1:47:66:
ad:13:4f:de:1e:eb:b3:b5:44:07:86:e8:d7:26:09:
6c:49:1b:bc:b0:77:c2:48:e3:8c:26:2f:da:02:27:
42:f6:ec:c6:9a:b9:4a:08:4c:09:af:fd:38:9a:87:
d3:e3:59:65:50:99:cc:77:3e:0c:56:dc:79:08:d3:
3f:12:f2:69:91:63:10:7a:93:d5:bd:ac:bb:92:a7:
1c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:6B:97:EB:5A:F5:78:B0:6C:BA:E4:58:2B:B7:15:36:E8:05:10:69
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UWuX61r1eLBsuuRYK7cVNugFEGk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.128.0/20
Signature Algorithm: sha256WithRSAEncryption
39:41:5a:5f:fd:6f:e7:10:67:fa:15:2b:e9:a4:40:e7:1f:34:
01:01:68:85:a0:c4:3c:8a:62:d8:54:a6:ee:d3:b3:35:1d:d8:
4a:49:5a:bf:d0:c7:76:a8:3c:43:80:8c:19:09:eb:ba:56:c8:
28:5d:35:8b:02:9c:0a:4b:fa:2a:86:cd:49:27:bd:ad:80:d4:
18:38:76:8b:6e:03:6d:70:1b:3f:18:ec:c6:d2:d5:b7:cf:ab:
74:ad:42:8d:0c:95:1c:57:f7:08:06:8e:6f:5b:b9:e8:bb:e8:
aa:e4:05:12:bc:41:37:8f:1f:8c:31:a3:f8:ce:42:67:bb:0a:
40:07:cb:0c:1e:40:18:91:1c:d4:f1:1d:cf:84:d0:59:04:ac:
be:d2:b8:a2:90:95:03:ed:d3:c5:23:8b:3d:f7:f8:47:81:d4:
37:3a:0a:54:95:7d:55:5a:c0:a2:da:92:58:9d:0a:57:2a:f2:
9f:16:dc:be:7b:f0:37:fe:e6:6e:37:b1:2c:09:b2:2c:ff:59:
3e:3b:3d:37:4c:4e:8e:dc:44:a6:32:ee:02:23:ed:99:e5:af:
60:f8:cd:a3:1b:7f:db:0d:e1:8a:28:a3:2c:ed:72:5f:09:ca:
c9:3f:1a:04:80:ed:5c:c6:de:ef:56:9a:0e:b1:93:9d:1d:87:
c5:bc:fe:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org