Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Wsmhki6AkxBnya1qBBX3bOoduFw.roa
File: Wsmhki6AkxBnya1qBBX3bOoduFw.roa (raw, json)
Hash identifier: 9F6xF82NJp8vg2RxvtXh8edvIMBA8nwYy45s/biUrbw=
Subject key identifier: 5A:C9:A1:92:2E:80:93:10:67:C9:AD:6A:04:15:F7:6C:EA:1D:B8:5C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 214C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Wsmhki6AkxBnya1qBBX3bOoduFw.roa
Signing time: Fri 25 Nov 2022 04:39:45 +0000
ROA not before: Fri 25 Nov 2022 04:39:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.160.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8524 (0x214c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:45 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5AC9A1922E80931067C9AD6A0415F76CEA1DB85C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ad:57:9b:c5:27:de:4f:3e:ab:b1:f3:1b:a6:
e9:3f:42:7a:03:9f:d6:d7:0f:e4:01:b0:f9:78:bc:
ae:50:13:db:73:3d:d5:96:c6:e6:f2:12:79:50:f2:
b9:9f:02:cb:a2:ee:ee:45:d9:d9:1e:26:cd:54:96:
8b:93:ea:87:8f:17:3b:ab:77:97:44:ae:99:e8:dd:
3d:25:39:0e:e0:44:cf:14:57:b6:78:6e:e6:23:5d:
1a:f8:7a:2b:1c:f3:b3:c3:37:0e:7c:5e:bf:2b:34:
8c:6a:b6:94:92:d2:a4:b8:0a:55:2c:92:db:fa:29:
14:ea:cc:55:74:d7:f8:67:47:66:4f:5d:51:d4:20:
37:19:c8:3a:34:8c:41:91:d1:45:18:4b:78:ec:a6:
33:fa:52:37:9d:ab:64:64:53:95:c2:7f:21:75:0b:
57:03:64:a4:62:3c:6b:f9:b2:2a:3c:20:d2:e7:01:
be:49:b8:e1:71:c3:01:4b:09:0c:61:84:b7:28:fe:
56:57:d8:c6:d2:4d:c1:91:41:9e:2a:5b:85:a9:21:
73:19:b5:97:4b:24:a9:44:37:8c:98:53:b7:db:9d:
9d:e8:57:be:f2:51:15:fe:f4:75:dd:3c:84:f6:54:
a4:dc:09:62:99:6a:0d:2f:dd:67:6d:f9:07:2e:a4:
6a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C9:A1:92:2E:80:93:10:67:C9:AD:6A:04:15:F7:6C:EA:1D:B8:5C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Wsmhki6AkxBnya1qBBX3bOoduFw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.160.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:10:38:18:ea:4f:10:c1:4d:b8:6a:b3:23:a1:20:5b:66:6e:
24:94:b2:94:5d:6f:99:bf:c8:38:c1:fb:56:94:ed:9f:3b:f2:
6e:ed:53:76:a4:82:39:e0:2e:e2:12:2f:d7:7a:bf:24:93:f5:
31:9e:e0:77:55:43:dc:3c:f7:14:5a:6f:82:2e:6f:f7:56:9d:
b4:05:c1:26:ad:e9:51:05:78:3f:e5:cb:f4:d7:6f:42:b4:58:
5a:84:ed:57:d0:27:a5:ea:ae:d4:f6:98:92:ea:c4:32:cd:7b:
e9:7a:17:7d:a1:73:34:7d:0a:fb:b3:ad:ba:bb:ee:a8:69:0d:
83:aa:2a:ea:3c:c0:18:5a:d0:0e:f2:aa:a9:df:71:9a:b6:94:
b9:d3:95:be:34:b3:27:37:6d:31:69:3b:81:5f:dd:6f:c4:dd:
b3:87:c0:7f:6a:2b:35:1f:e9:d4:78:70:66:04:16:c6:9f:a5:
51:09:52:bf:99:2b:a8:b8:e0:c3:7b:44:11:49:b3:09:76:a4:
11:a7:7b:7d:bf:b2:4a:7b:41:82:46:8d:10:a0:03:30:8a:f5:
ae:a7:fe:7a:c6:23:0e:d1:30:9f:91:94:7d:36:94:3e:24:ae:
71:b6:34:c3:80:91:ac:1f:8a:04:03:c5:33:bd:cf:10:af:eb:
f6:14:e6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:33 2024 by rpki-client on console-ams.rpki-client.org