Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/W_R7LTQ2UJtkFaskyb8Ch376Qd8.roa
File: W_R7LTQ2UJtkFaskyb8Ch376Qd8.roa (raw, json)
Hash identifier: mO43WJV9/kNQB5aIdaAxr+xO7iRn+JA6wUaD3UJszXI=
Subject key identifier: 5B:F4:7B:2D:34:36:50:9B:64:15:AB:24:C9:BF:02:87:7E:FA:41:DF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2019
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/W_R7LTQ2UJtkFaskyb8Ch376Qd8.roa
Signing time: Fri 25 Nov 2022 04:38:19 +0000
ROA not before: Fri 25 Nov 2022 04:38:19 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.152.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8217 (0x2019)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:19 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5BF47B2D3436509B6415AB24C9BF02877EFA41DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:90:41:8f:be:b1:79:75:0d:91:ad:8d:ad:ac:
c2:a1:d3:df:a2:8c:ab:a3:92:78:d0:7c:47:23:71:
01:7e:fc:f7:39:95:aa:a0:b0:01:83:53:a4:98:3c:
cd:28:cc:4b:74:73:18:57:80:f1:c0:c3:07:98:36:
0c:83:4b:24:55:8e:2b:3a:a0:37:8e:f9:ab:91:81:
96:84:8d:cf:9b:db:d6:c9:7e:e1:33:90:bd:71:95:
c6:91:d9:6c:d9:c7:69:78:62:13:66:95:02:e3:24:
1d:ee:ed:e8:96:91:f6:83:67:7e:7c:3d:a4:ba:66:
b9:89:d0:ea:e6:2b:a7:b9:ce:98:58:13:73:2d:f0:
93:da:15:75:82:42:c1:32:47:c0:e6:99:90:d6:c1:
c4:81:5a:a3:f9:03:a5:40:a8:d3:b2:5f:79:36:07:
1c:2b:41:c0:4c:f3:60:a7:e0:6c:e0:f2:39:43:6a:
ae:8c:f0:01:7c:20:f3:1c:a2:34:cc:d9:e7:d8:15:
8d:09:d9:5e:d6:8f:df:06:4a:6b:16:de:9e:7b:a9:
c1:39:cd:94:9e:0c:dc:33:94:d8:49:ef:c9:c5:ac:
af:61:13:50:c0:38:a8:09:52:1c:05:72:e4:b3:0b:
af:78:4e:89:c1:d8:3a:f1:89:33:de:39:2d:23:a6:
74:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F4:7B:2D:34:36:50:9B:64:15:AB:24:C9:BF:02:87:7E:FA:41:DF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/W_R7LTQ2UJtkFaskyb8Ch376Qd8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.152.0/21
Signature Algorithm: sha256WithRSAEncryption
7d:c7:49:c4:e9:b0:6f:60:3b:5c:94:f2:bb:80:0b:db:e1:29:
fc:78:62:c7:09:c7:18:a0:f1:9d:ea:03:4b:53:01:7f:43:6c:
ed:f6:80:ac:dd:2e:ec:9c:bd:08:f0:1b:2a:36:02:27:71:79:
e5:36:77:23:44:0f:77:fe:f1:fd:75:99:c4:1e:79:1d:ce:ee:
fd:c6:69:1c:6b:47:fe:40:c3:39:de:50:d2:29:80:91:ac:45:
84:00:cc:24:a6:08:07:24:2c:79:44:5a:73:e7:80:34:31:b8:
da:5c:ed:99:0d:cd:f3:37:f8:b4:ab:f6:f9:7b:8f:85:7e:d9:
78:4f:6c:7a:7c:ed:4a:c0:c4:f6:cd:98:34:b1:c2:7d:73:07:
8d:5a:e9:0a:d2:ac:f3:6e:62:30:a6:1f:7d:77:81:79:5b:23:
f0:9d:93:11:04:b7:cd:37:26:6b:bb:ab:d9:5a:e3:a7:60:d9:
fa:a2:79:78:6e:51:73:6b:2c:e1:7f:15:e7:b6:6b:3d:57:ea:
a7:e5:85:b7:99:79:5e:2c:2c:6b:e3:69:2f:99:5e:54:19:ad:
bf:e8:aa:53:09:db:12:dd:5f:8d:cd:88:1a:cc:f5:0f:d5:6f:
5c:b4:3e:00:b3:bd:b4:90:c5:80:32:a4:00:90:e6:ad:ac:e0:
2f:ee:c1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-fra.rpki-client.org