Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XNLBCa-9n-Ur_OZZ5dT5uCvOy9Y.roa
File: XNLBCa-9n-Ur_OZZ5dT5uCvOy9Y.roa (raw, json)
Hash identifier: XUvi0c20SWBTNkZyQG0tsm+5pyGIV/V3L6efmyRq8/0=
Subject key identifier: 5C:D2:C1:09:AF:BD:9F:E5:2B:FC:E6:59:E5:D4:F9:B8:2B:CE:CB:D6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1AAA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XNLBCa-9n-Ur_OZZ5dT5uCvOy9Y.roa
Signing time: Wed 29 Sep 2021 02:45:36 +0000
ROA not before: Wed 29 Sep 2021 02:45:36 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.192.96.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6826 (0x1aaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:45:36 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=5CD2C109AFBD9FE52BFCE659E5D4F9B82BCECBD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5c:bd:c0:26:92:ce:b7:6c:6a:2e:7f:07:1b:
85:a5:7a:c8:c4:ba:73:51:1f:43:cf:46:26:95:37:
94:f8:8a:58:11:0a:b2:dd:0d:ff:26:e6:48:37:80:
56:19:23:0c:9b:70:8f:36:f9:f6:81:33:c3:88:27:
b9:30:26:3c:9b:49:ab:99:6f:5c:c1:78:5d:c6:17:
6a:d1:e6:e2:b8:c8:be:b7:15:52:24:b3:6b:64:1c:
52:60:40:7d:02:7e:5c:8a:06:1c:e0:5d:df:4f:7e:
9d:44:87:08:cd:f4:db:a3:b1:a2:ef:3a:e2:06:e2:
4d:e7:ea:9e:d9:9b:e8:b4:4f:2f:5b:e6:bf:7e:0c:
6d:cc:25:27:67:45:16:4d:ea:e6:23:c0:e6:26:28:
9d:d1:27:a9:84:8c:dd:96:17:a5:4c:d8:ad:f8:29:
27:27:5c:61:6b:9e:51:3d:aa:eb:55:fb:1e:ef:09:
60:e6:be:ef:db:e6:5e:0d:f0:25:39:3f:03:00:4b:
62:b6:2e:5f:1b:cc:c7:3b:83:a1:a9:17:6c:b9:82:
cc:83:55:c9:2d:93:bb:88:41:60:ff:46:d8:fe:00:
99:a6:9f:d4:36:ca:79:6c:bc:3d:71:bb:05:0d:c6:
df:47:3b:fb:80:5e:8d:40:5d:bf:e6:62:56:32:66:
53:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D2:C1:09:AF:BD:9F:E5:2B:FC:E6:59:E5:D4:F9:B8:2B:CE:CB:D6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XNLBCa-9n-Ur_OZZ5dT5uCvOy9Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.96.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:fb:59:97:fa:55:eb:cf:71:95:af:77:38:23:9a:98:b1:22:
bf:45:28:dd:a1:87:df:54:21:fc:78:18:f4:c9:03:13:87:0b:
2d:78:a1:17:7e:f6:21:d8:bc:c9:4f:6c:56:f7:6d:93:2b:7b:
d1:4d:06:99:9e:89:75:98:78:aa:28:fd:da:0c:2e:b8:3b:66:
a1:df:43:95:3e:f6:25:21:1d:9a:b5:f1:50:c9:32:27:ea:a6:
1f:78:47:4d:04:b8:ef:76:7f:d2:e1:f3:89:6c:30:ad:61:59:
00:f0:70:8d:ba:87:c0:44:2d:83:89:00:e0:11:b8:d4:9d:b5:
f1:f1:3c:d5:67:75:4c:33:63:b9:bf:99:f9:1a:b9:62:fe:80:
bc:dc:8a:e8:5d:09:ef:2f:af:8b:b4:fa:0c:1b:58:17:84:2e:
1a:8c:d1:ee:df:48:5b:d4:0e:7c:2b:ad:3c:2b:2e:a6:9f:2e:
59:18:70:d2:b7:48:44:85:cb:4a:33:5d:6b:87:13:e9:41:26:
3c:8e:cc:ca:ae:df:7f:4a:cf:8c:4a:6a:3d:b2:a5:ba:7e:20:
7c:3e:5a:2a:d2:72:2a:45:a2:7f:51:20:29:6e:1b:56:4d:d7:
32:40:48:0f:35:97:ee:40:bd:5a:6d:13:0e:82:4c:91:2e:87:
dd:4e:43:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:33 2024 by rpki-client on console-ams.rpki-client.org