Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VVAhOma5kBLVCFY6PmOIlpUD4Ug.roa
File: VVAhOma5kBLVCFY6PmOIlpUD4Ug.roa (raw, json)
Hash identifier: zZQz1zal7WYO/kY3FgSoIqevsBKiq2PPKAjinVvconw=
Subject key identifier: 55:50:21:3A:66:B9:90:12:D5:08:56:3A:3E:63:88:96:95:03:E1:48
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2245
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VVAhOma5kBLVCFY6PmOIlpUD4Ug.roa
Signing time: Fri 25 Nov 2022 04:40:58 +0000
ROA not before: Fri 25 Nov 2022 04:40:58 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.28.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8773 (0x2245)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:58 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5550213A66B99012D508563A3E6388969503E148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a4:70:33:dc:b0:c6:b6:0d:e5:81:61:65:6f:
c4:bc:23:cb:83:43:4e:06:6f:a5:bf:ce:ca:40:16:
e9:aa:4a:57:b9:d1:56:54:58:c4:f4:98:ea:ec:2c:
26:35:c0:8c:d6:e7:6f:2c:23:e3:ca:48:bf:9d:40:
fb:6e:6f:9a:c1:41:d5:28:d1:d6:65:c8:46:ef:c1:
a5:42:56:51:78:a4:a0:b4:1a:9c:3d:45:44:60:64:
0e:35:4a:50:48:a5:e8:75:0c:84:85:35:7a:45:8d:
5d:47:1e:1a:ff:94:05:1d:64:01:1d:eb:ed:1c:4a:
6b:0d:83:ab:06:3e:c2:e3:d6:fe:76:00:fa:2a:99:
a0:46:24:91:dc:11:eb:70:9e:9e:9c:b2:82:7e:e9:
27:03:19:37:18:b6:7a:76:27:0f:44:76:b4:2e:14:
a1:9a:b9:be:92:29:df:f9:75:c3:9a:61:62:89:0f:
7e:ed:9e:e2:6d:08:0b:78:7b:ce:5b:77:39:83:c4:
ea:aa:9a:1a:92:0c:35:cc:ef:10:33:42:10:66:58:
31:87:cc:73:26:0a:91:50:ff:b1:44:c7:20:37:c9:
1c:09:ee:00:c9:38:f3:b7:a2:fa:99:c7:83:7b:4e:
da:e1:4b:19:79:80:5d:38:38:5e:d4:5d:40:03:ee:
2e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:50:21:3A:66:B9:90:12:D5:08:56:3A:3E:63:88:96:95:03:E1:48
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VVAhOma5kBLVCFY6PmOIlpUD4Ug.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.28.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:6f:d5:ad:3f:e5:48:f4:48:67:9b:fb:c3:ae:ff:14:2d:73:
2a:3e:64:cd:9d:98:11:1a:37:6e:30:f2:d7:b1:68:10:a4:b8:
46:07:92:aa:5a:a2:e7:24:32:e1:b8:c1:fe:ac:58:3c:8a:02:
73:7a:e9:d1:99:ba:cf:88:4b:42:cc:83:86:b3:2c:4d:d6:00:
11:4e:2e:7e:c7:24:3c:fb:8d:16:c2:06:b6:97:f9:2e:91:b1:
54:4e:f4:fd:62:81:e7:4b:89:90:a3:73:33:c9:c9:df:eb:78:
4c:62:f8:67:72:cf:05:17:cf:78:a3:a4:09:f0:9d:46:23:9e:
60:fe:06:c7:fe:59:dd:49:07:3d:7a:c0:ef:9f:8b:be:19:73:
21:27:1b:1d:9c:11:19:61:90:6b:29:a1:59:87:2e:02:d3:b0:
39:78:a0:d1:70:52:b6:b3:2b:f1:26:4f:e3:34:c6:dc:18:e3:
73:b4:63:49:2f:6e:cc:77:9b:c6:bf:d2:08:a7:08:bc:da:74:
0d:09:3f:f5:5d:95:42:5b:4f:a1:90:0c:4a:a2:36:94:d4:f3:
85:93:42:be:38:54:0f:fb:f2:3a:a9:b8:bb:9f:3b:f9:51:e5:
4d:9e:5d:fe:97:03:dd:c0:5a:77:6b:23:9c:20:9c:8c:7a:ec:
1f:b5:9a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org