Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XZp5fTt-5YHfxkY0IRh0xJBYY98.roa
File: XZp5fTt-5YHfxkY0IRh0xJBYY98.roa (raw, json)
Hash identifier: vHzx2UzKMMu2ADlL/2ZF8o+qPn2MDhyUrCOG0zsfpkU=
Subject key identifier: 5D:9A:79:7D:3B:7E:E5:81:DF:C6:46:34:21:18:74:C4:90:58:63:DF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 22CC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XZp5fTt-5YHfxkY0IRh0xJBYY98.roa
Signing time: Fri 25 Nov 2022 04:41:40 +0000
ROA not before: Fri 25 Nov 2022 04:41:40 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.144.64/26 maxlen: 26
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8908 (0x22cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:40 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5D9A797D3B7EE581DFC64634211874C4905863DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6b:fa:f6:98:46:be:e9:4d:61:e2:9e:43:69:
2e:fd:2a:a2:7d:54:69:e3:79:d4:67:41:d0:3d:13:
43:1f:23:71:9e:b3:c7:80:e7:ee:3b:f1:b3:f9:e6:
a2:de:45:7c:35:6b:be:e1:49:a8:b4:a3:00:7b:ca:
e6:2d:4d:77:61:8c:1f:5b:83:c0:38:33:9e:a2:24:
e5:78:ef:e3:31:50:84:94:0b:1d:27:5e:94:5f:76:
d4:b8:66:22:fb:98:a0:46:8b:8c:b5:5f:e1:65:38:
e7:86:65:9c:39:83:de:ca:07:62:cf:5e:98:90:ec:
c5:3e:dd:12:8e:59:34:34:39:ab:9c:02:47:82:b9:
7b:71:1b:a7:2f:24:c3:21:c3:bf:ae:9d:e4:81:74:
68:27:d3:be:b6:ef:8b:2e:31:f3:34:0b:af:ae:77:
a5:0a:fb:4c:61:e7:96:0e:9b:d3:e0:e1:e6:fa:0a:
b2:d0:46:ae:8f:e4:3b:45:7c:0c:c1:ba:b5:1a:b3:
e9:75:f5:04:1b:42:13:ba:44:51:b9:37:29:55:18:
b8:46:1a:5d:ba:e2:4b:15:64:ff:df:6e:45:c1:b5:
2f:aa:2b:31:bf:a4:a6:dd:fb:23:88:e8:6b:37:ba:
44:5a:1a:01:02:69:c5:1e:68:c1:50:11:5a:a3:c6:
a8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:9A:79:7D:3B:7E:E5:81:DF:C6:46:34:21:18:74:C4:90:58:63:DF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XZp5fTt-5YHfxkY0IRh0xJBYY98.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.144.64/26
Signature Algorithm: sha256WithRSAEncryption
7d:9a:c4:ad:bc:56:e7:2e:34:0b:55:80:fe:1d:71:d2:4e:b2:
66:2e:26:88:b3:95:bb:e5:47:38:c4:f3:89:c0:20:3c:e2:36:
a9:c8:82:ef:d3:a7:75:71:e3:dc:de:a5:43:5a:08:89:f1:82:
3e:3f:9b:2b:14:d8:54:88:84:50:f9:e9:4c:7c:0a:5b:d4:8e:
6f:18:85:06:be:e1:68:61:9d:9b:18:a4:cc:95:3c:31:a9:87:
16:c1:9e:b0:82:3e:10:21:49:75:31:d8:66:65:b1:d6:76:d5:
5b:17:81:39:1f:06:28:9f:ef:3b:46:3e:37:0e:1f:4f:07:3a:
52:bc:b7:e2:a5:5e:ab:ed:d0:e7:e3:1a:cb:c5:62:6a:df:1c:
e9:47:9e:6b:9e:9b:fb:bd:31:9b:70:d1:d3:6f:e7:82:72:89:
ca:ca:18:48:04:48:ca:fb:96:a4:fb:8f:9f:fb:78:73:ed:2b:
8b:70:37:8e:e4:63:52:35:62:1b:0a:ba:b7:d5:e7:9f:fe:d3:
50:97:95:53:23:b9:d3:1d:41:1c:87:7c:c8:b3:46:bf:a0:c8:
7a:57:13:e1:74:25:f1:e5:6f:61:ea:c6:2c:e8:5d:10:0d:25:
df:f8:8f:43:a5:a0:29:2f:94:c3:1e:2e:b1:67:c9:1e:e5:15:
ed:1c:28:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-fra.rpki-client.org