Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YqmJKmxR0elpU_SpItbhg9zvm54.roa
File: YqmJKmxR0elpU_SpItbhg9zvm54.roa (raw, json)
Hash identifier: QnvYSKq2hhlU4uU8s/vF/UL1N7w+IyzgGFa+z3wV3Ss=
Subject key identifier: 62:A9:89:2A:6C:51:D1:E9:69:53:F4:A9:22:D6:E1:83:DC:EF:9B:9E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YqmJKmxR0elpU_SpItbhg9zvm54.roa
Signing time: Thu 15 Sep 2022 02:45:08 +0000
ROA not before: Thu 15 Sep 2022 02:45:08 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.200.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:08 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=62A9892A6C51D1E96953F4A922D6E183DCEF9B9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:de:8c:21:b0:58:44:55:0a:ba:6d:fd:cf:5d:
eb:8a:dc:66:34:93:fb:93:54:9c:0d:9a:2e:6f:1a:
b7:83:1f:90:de:5f:12:14:91:89:c7:01:c3:84:84:
7c:92:60:d8:e3:eb:8d:58:ee:76:44:45:41:f3:ce:
65:c7:3a:57:fa:a6:d4:3a:f0:4f:10:2e:0c:23:3a:
2e:c6:11:d3:30:21:10:68:f0:6f:14:2e:ff:8e:5b:
64:40:7c:5f:76:df:91:c7:09:f9:3b:35:ff:0a:a2:
8b:84:1c:d0:1b:ea:b9:a1:42:68:3f:9f:de:87:44:
3c:50:df:60:8b:ef:6e:58:6b:46:cd:2c:d9:a1:0f:
52:65:5f:28:c5:c0:ba:a1:7f:79:b7:82:d5:26:d8:
a0:2d:5b:89:c1:9c:2a:c3:46:31:bd:04:c7:8a:03:
c6:7c:3e:20:9b:b6:69:b9:45:29:bc:43:8d:57:2b:
08:bd:e3:92:0f:40:c7:fd:7f:cb:d8:86:95:20:27:
70:c9:ed:a6:1c:75:e1:69:dc:7f:72:8d:65:9d:33:
06:8d:a1:58:0d:b3:ee:28:4d:c6:81:e9:de:78:d7:
b5:06:24:5b:37:6f:f3:57:7b:05:63:79:25:49:da:
df:2e:55:6b:54:02:05:64:fb:09:0c:98:fa:b2:96:
b8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A9:89:2A:6C:51:D1:E9:69:53:F4:A9:22:D6:E1:83:DC:EF:9B:9E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YqmJKmxR0elpU_SpItbhg9zvm54.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.200.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:39:df:ed:24:d6:03:af:fb:bd:8b:9c:65:bf:5a:97:11:25:
ab:56:9e:f7:72:77:7e:c5:b1:32:0a:4c:6d:44:21:89:77:e5:
77:0b:c9:73:8c:b4:21:ec:7c:f3:ea:c0:19:0e:f3:03:53:75:
a4:04:d7:c9:56:55:9e:e8:ee:6d:9b:4a:ab:14:24:3a:04:46:
dd:37:83:fe:3c:ee:1f:68:3c:36:25:72:af:e6:35:10:44:21:
e3:c9:b2:f8:83:6f:b7:86:4b:02:ce:bc:2d:3c:46:f5:89:6d:
79:ce:45:29:8a:34:52:c7:ed:b4:de:21:c3:80:68:ff:c1:60:
57:55:7e:aa:83:0a:9a:87:b3:81:a4:2e:03:5b:0a:cb:3e:98:
58:36:46:86:ae:4f:a1:d1:5f:bd:04:70:39:dd:12:bf:ce:55:
80:d5:05:0d:fa:1e:59:d7:36:57:9a:b0:6f:45:af:68:f7:c5:
4d:65:18:32:1d:a9:17:a4:b2:57:c7:c1:b1:3d:e7:30:7b:66:
ea:80:df:98:d8:95:14:0e:a6:62:a0:cb:14:68:5c:6d:f9:10:
5a:72:b8:4d:33:a0:2a:b2:6f:60:84:97:1a:34:1f:65:85:bc:
43:27:53:ec:f9:84:cc:08:c3:3f:f4:e3:95:02:4d:01:69:96:
d4:e4:04:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:34 2024 by rpki-client on console-ams.rpki-client.org