Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZIAYE4bjru9rptXl4hqZ1HI0Q4g.roa
File: ZIAYE4bjru9rptXl4hqZ1HI0Q4g.roa (raw, json)
Hash identifier: VNq9O+hYkZKmCwx8GG+Hv3znM7rbOVw3wC6VKrbjIIQ=
Subject key identifier: 64:80:18:13:86:E3:AE:EF:6B:A6:D5:E5:E2:1A:99:D4:72:34:43:88
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZIAYE4bjru9rptXl4hqZ1HI0Q4g.roa
Signing time: Thu 15 Sep 2022 02:45:05 +0000
ROA not before: Thu 15 Sep 2022 02:45:05 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:05 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6480181386E3AEEF6BA6D5E5E21A99D472344388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8a:0a:21:cf:be:87:7c:bd:a7:53:8d:d9:21:
ff:8d:8c:c7:6c:a7:eb:54:79:ac:e5:41:57:b8:0a:
0b:fb:0d:7f:6e:a3:cc:25:ae:00:ce:85:6d:46:94:
2e:de:9c:05:ab:76:cd:3b:b5:0f:8e:e2:34:bc:4e:
2b:d8:0e:2e:3a:86:73:eb:47:bb:a2:cd:6a:53:c9:
77:78:99:6d:c6:41:47:74:48:f9:7b:fa:3f:1a:05:
0e:b6:1b:6e:b4:4e:72:28:31:90:e9:75:bc:ef:1c:
17:fe:96:fe:d0:9a:7e:7b:04:fe:4c:9d:3d:26:92:
1e:7a:97:9c:4d:68:85:2e:cc:af:4c:e8:19:df:64:
74:19:e0:92:cb:45:0a:b6:ae:7a:7a:83:b0:fa:f5:
67:12:0e:2c:c9:3f:e6:99:b1:e1:b7:1e:54:8e:8e:
48:28:38:23:6f:21:1f:8b:88:50:55:d1:46:32:9b:
e8:6e:ea:d7:d3:26:2b:ca:8e:9b:82:8c:23:94:89:
7a:33:4d:ae:eb:0a:82:76:51:93:ec:2b:9a:8e:66:
c7:7f:cd:85:84:e8:90:dd:ca:5d:c9:3d:0d:d4:18:
3f:0c:12:61:fe:ce:e3:02:84:d3:8d:78:84:96:ae:
7d:be:56:53:ea:bc:b8:37:33:cd:39:67:f1:7c:bb:
37:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:80:18:13:86:E3:AE:EF:6B:A6:D5:E5:E2:1A:99:D4:72:34:43:88
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZIAYE4bjru9rptXl4hqZ1HI0Q4g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.177.0/24
Signature Algorithm: sha256WithRSAEncryption
67:0f:b6:db:ca:6f:c0:54:b1:fd:1a:d4:c8:a4:11:de:51:ab:
28:c1:6d:2f:d8:69:e2:7b:17:e5:cd:be:80:d5:2b:3d:de:26:
ca:74:2e:34:1c:a1:28:6d:1a:8a:e2:31:5f:6a:ab:52:b8:cf:
d9:9e:12:69:98:43:bb:b5:25:8c:c6:80:b5:36:e5:79:65:34:
c6:d2:48:1a:2e:1c:51:a2:d5:0f:d5:73:27:39:0f:ff:42:14:
19:b4:22:fc:8b:c0:a7:c2:a7:44:1d:b8:7e:f3:4e:0e:a4:bb:
5f:5c:a1:3e:2b:23:b8:7b:49:de:29:7d:d5:8c:aa:23:e0:d5:
7e:97:8e:77:1c:d1:31:73:09:72:16:5c:86:b4:96:ea:55:4a:
d1:24:5f:52:4a:9a:05:48:56:16:fa:dd:54:42:b9:06:4f:43:
10:22:55:82:b1:04:3c:b4:ac:35:ee:17:2d:e3:57:6a:45:c3:
81:df:de:2c:3f:72:18:08:07:a0:b1:f6:29:07:3e:67:b8:8c:
d8:1c:e9:e0:9c:2e:4d:1f:94:c0:d5:f2:f2:9c:82:d3:c3:21:
68:d1:8e:bc:bb:df:5a:83:d2:f8:4f:36:22:bd:30:01:9e:9d:
db:2b:ac:a2:76:f7:36:d0:71:53:42:3e:00:c0:91:67:d5:61:
70:48:a1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-fra.rpki-client.org