Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YX_kPTLQVAEXvZV-hkxsWgJkxPw.roa
File: YX_kPTLQVAEXvZV-hkxsWgJkxPw.roa (raw, json)
Hash identifier: M42n1rObb9PlIWaXWGQ9ch+JgPj+KCE+oMd30bOh/gc=
Subject key identifier: 61:7F:E4:3D:32:D0:54:01:17:BD:95:7E:86:4C:6C:5A:02:64:C4:FC
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0EB6
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YX_kPTLQVAEXvZV-hkxsWgJkxPw.roa
Signing time: Tue 29 Sep 2020 09:56:03 +0000
ROA not before: Tue 29 Sep 2020 09:56:03 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.108.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3766 (0xeb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:03 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=617FE43D32D0540117BD957E864C6C5A0264C4FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c0:92:fb:a5:f0:e5:c2:b8:aa:d7:dc:b0:da:
6b:45:dc:6e:9c:30:6e:99:37:4e:cf:2d:60:aa:29:
ea:8f:71:e0:98:99:9f:93:3d:5c:a9:ea:0b:fd:be:
b7:61:6d:55:14:e7:b2:d1:92:71:fb:e4:f5:25:d1:
23:39:d4:85:d4:c0:1b:02:60:3b:05:f6:88:be:05:
c2:43:9d:0b:f7:8b:e7:89:77:87:f8:f7:89:68:f9:
cb:bf:2e:f3:29:b0:6d:cb:4b:10:c4:c6:09:92:42:
68:aa:ed:2f:45:c5:a9:fc:57:74:e6:90:f2:fc:67:
c6:fd:4d:50:dd:0b:ba:96:15:58:04:bf:18:28:bd:
9a:5e:51:5c:73:57:93:5a:f2:59:c4:59:cf:4f:5c:
6f:37:c4:be:ac:f1:4b:53:9d:85:3c:58:49:44:44:
2a:95:b9:7b:ab:ba:6e:5d:92:c8:db:e8:03:de:87:
86:34:68:26:90:2d:e2:85:90:1f:c9:10:0b:a9:49:
56:aa:31:5e:f7:6f:36:46:ff:e6:8b:6d:5b:06:94:
89:3d:f2:57:67:ed:ae:55:b0:60:15:bb:66:6b:5f:
b0:48:d5:e6:e5:78:14:2d:60:41:97:a0:f4:4a:d1:
6a:56:dc:27:16:20:2e:bf:a4:6a:e9:5c:07:10:9e:
3d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:7F:E4:3D:32:D0:54:01:17:BD:95:7E:86:4C:6C:5A:02:64:C4:FC
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YX_kPTLQVAEXvZV-hkxsWgJkxPw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.108.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:98:7d:0c:e9:12:ab:b8:b5:18:c4:46:cd:65:a1:07:b5:a9:
55:7a:2c:ae:0d:ec:0c:72:af:0b:86:c1:da:a1:7e:84:a8:5d:
59:b7:21:59:a0:cc:38:01:0b:f1:11:63:f7:56:81:f6:cf:47:
1b:94:87:79:57:76:67:78:ff:7c:7d:fd:a1:45:48:eb:75:f9:
ac:a5:70:d4:75:e7:36:0d:86:e5:e4:43:a3:01:fe:19:6b:42:
65:a8:10:0f:39:78:c2:bb:72:99:df:d3:cd:b9:1e:21:84:fe:
fc:00:b2:88:5b:03:42:40:82:ee:0d:0f:c8:a1:98:59:2c:b9:
89:b7:e7:ab:ff:5e:16:05:60:4e:39:c4:e1:75:77:60:8b:4a:
75:f2:00:c9:4b:be:c6:73:4c:e6:19:9c:95:24:05:d2:c6:34:
4a:20:a5:5d:bb:a8:ce:44:84:af:10:b9:d9:c7:70:f9:61:b4:
b1:f7:bf:64:0d:34:06:c6:e2:c3:21:19:02:81:cc:f3:38:3e:
9a:b2:55:92:4c:88:27:7e:31:60:33:49:11:bb:31:20:f0:56:
cb:f8:23:d4:70:fc:c8:55:fa:73:5b:84:9d:00:4e:56:b9:42:
fb:a4:8f:9c:91:71:25:c9:6b:44:4f:8c:54:46:f0:bb:6e:f3:
a3:fd:8b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:22 2023 by rpki-client on console-ams.rpki-client.org