Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X3a4CP-ds_FTnjT9EHXtLb70wDw.roa
File: X3a4CP-ds_FTnjT9EHXtLb70wDw.roa (raw, json)
Hash identifier: C7GIMSjnFveRuSm8+kSgm3xcBCq15ceMCUlpUdBsbyY=
Subject key identifier: 5F:76:B8:08:FF:9D:B3:F1:53:9E:34:FD:10:75:ED:2D:BE:F4:C0:3C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1C35
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X3a4CP-ds_FTnjT9EHXtLb70wDw.roa
Signing time: Wed 29 Sep 2021 02:47:28 +0000
ROA not before: Wed 29 Sep 2021 02:47:28 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.193.152.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7221 (0x1c35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:28 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=5F76B808FF9DB3F1539E34FD1075ED2DBEF4C03C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b2:2a:0a:31:14:1d:98:ff:bb:69:82:80:98:
67:21:20:7c:45:ad:a0:37:60:a0:42:e1:d1:b9:dc:
a8:a6:fd:a8:8c:69:a6:83:f4:85:a9:5a:50:10:8a:
1d:45:93:9d:10:8c:b2:ec:25:70:2d:bb:6d:0f:6b:
b5:79:a3:5b:bc:e1:34:c2:ee:a4:58:d4:fe:0c:62:
85:10:45:15:cd:a1:a9:0e:16:6b:99:d1:5d:ee:b7:
89:41:80:e7:49:7c:a6:fa:df:22:83:b4:95:7a:d6:
3f:45:b8:92:3b:75:0a:99:cf:c0:85:5a:dc:cd:47:
36:d2:99:0f:fa:a9:14:82:b5:1c:d4:9f:77:4d:d0:
82:a3:cb:b1:40:6c:82:5f:24:3c:8d:29:b1:69:8f:
de:55:d5:14:f0:c7:00:f2:be:8d:57:56:fe:be:93:
41:68:55:f0:c4:2a:b1:40:bc:a2:f5:17:17:aa:9f:
54:d6:4d:c1:aa:81:dc:ee:cc:6b:4b:0a:ca:62:1a:
c1:8f:11:cc:35:a2:b9:d1:e8:93:b5:3f:74:86:cd:
53:89:8b:60:81:5d:76:93:fa:fe:46:ae:13:4c:d8:
3c:2e:ce:53:f9:b2:49:2b:e0:c5:4e:b2:e8:31:ad:
21:0b:d4:1e:7e:28:ea:b2:c8:f2:66:41:74:54:58:
52:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:76:B8:08:FF:9D:B3:F1:53:9E:34:FD:10:75:ED:2D:BE:F4:C0:3C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X3a4CP-ds_FTnjT9EHXtLb70wDw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.152.0/22
Signature Algorithm: sha256WithRSAEncryption
89:e6:d5:77:42:84:0c:23:32:8c:8a:76:d0:08:d1:72:25:38:
92:a3:64:cc:96:48:3f:d7:c5:0d:00:5c:88:24:6d:bc:16:71:
c4:5b:9f:00:d8:d7:62:f1:19:bb:71:22:75:58:63:d7:76:3a:
66:99:64:f7:98:95:cb:5e:6c:66:e7:db:55:e8:ca:31:5c:d6:
83:ab:32:3f:06:b6:cc:5e:68:e4:45:31:6b:88:0b:bc:d0:c6:
a4:62:d8:ce:3b:48:da:2f:da:b4:ce:5a:9f:fb:f7:70:45:f1:
66:71:8a:f5:40:39:c4:d2:e8:a8:cd:2f:6d:c6:e3:7a:73:1c:
35:33:70:6c:9a:ef:31:72:db:21:b0:d8:e3:da:b0:97:6b:f6:
fd:b5:d9:d3:d8:74:3c:19:7c:36:30:a9:bc:1b:4a:4d:79:ae:
11:11:11:8e:03:26:d2:31:8a:e2:ea:8b:6d:2f:0e:cf:73:ce:
02:fd:fc:c8:a1:c0:d3:01:60:c7:b5:18:3d:94:66:d9:06:c1:
60:2b:60:a1:81:62:47:a1:f6:e7:4b:46:b1:e7:cf:a8:2e:ba:
2a:ae:19:fc:bc:c4:d4:40:18:bc:4f:3f:9d:07:54:0b:7a:f0:
4a:b2:8c:56:b1:de:82:70:35:dc:5b:49:4f:f0:62:de:03:fc:
19:a8:30:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-fra.rpki-client.org