Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_OiHvWAaPrGvKs6HssHfXY9pHJ0.roa
File: _OiHvWAaPrGvKs6HssHfXY9pHJ0.roa (raw, json)
Hash identifier: CW7WaNJQSGcJs1JimDd9O5PQ1dkv/aN/aINrFJe6jSw=
Subject key identifier: FC:E8:87:BD:60:1A:3E:B1:AF:2A:CE:87:B2:C1:DF:5D:8F:69:1C:9D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1A78
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_OiHvWAaPrGvKs6HssHfXY9pHJ0.roa
Signing time: Wed 29 Sep 2021 02:45:23 +0000
ROA not before: Wed 29 Sep 2021 02:45:23 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.192.232.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6776 (0x1a78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:45:23 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=FCE887BD601A3EB1AF2ACE87B2C1DF5D8F691C9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:af:8d:e4:aa:ff:b5:a1:4f:7b:08:6f:f0:3e:
6a:af:e9:49:57:c8:dc:b8:ea:82:3e:51:0d:1c:91:
49:4a:a1:9d:cd:3c:52:0f:17:6b:51:b5:a7:0f:43:
00:b0:76:54:b0:d6:23:93:28:7d:80:83:57:9d:e7:
7f:75:0b:fd:6d:4d:5f:0c:c4:08:ff:3b:2e:9c:d4:
8a:f1:40:d1:08:2b:01:29:59:90:b1:f6:3f:b0:41:
0b:b9:d3:e7:b6:f0:93:c1:f9:1c:18:61:73:1c:4f:
06:c9:1e:56:fd:3c:ef:56:dc:92:44:b3:d4:e4:cc:
ad:15:f0:f3:6c:a7:77:e0:e2:e4:fc:7b:20:c1:af:
5c:5f:6a:f3:77:d6:4a:b4:df:6d:c7:d0:55:8a:c5:
7f:7b:d2:82:dc:36:8c:4f:58:95:2f:2d:8a:50:85:
5b:69:01:82:90:41:4d:1f:3a:2c:2f:a4:f4:80:f5:
54:f4:d6:1f:e8:04:1d:e8:6e:1a:26:03:6d:8b:01:
cb:a8:80:57:1d:b4:dc:89:e0:6a:40:5d:4a:5f:2b:
a3:f2:89:81:d9:33:44:81:87:fe:81:78:3e:4a:89:
ec:dd:8d:6d:a5:ba:b2:8b:f2:a5:92:55:57:13:82:
53:f4:e7:cb:34:05:94:a6:b6:00:01:7a:c0:f3:86:
0a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E8:87:BD:60:1A:3E:B1:AF:2A:CE:87:B2:C1:DF:5D:8F:69:1C:9D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_OiHvWAaPrGvKs6HssHfXY9pHJ0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.232.0/22
Signature Algorithm: sha256WithRSAEncryption
79:5c:cd:f1:8f:bb:03:12:df:f0:6f:bc:f1:57:92:1d:d5:fc:
65:ee:6b:84:30:de:ce:e5:91:2b:09:d6:02:30:ef:00:48:0b:
fd:97:86:74:fe:09:3d:44:02:5c:84:71:44:c3:23:c8:2b:30:
dd:b5:08:be:89:29:33:54:7f:c6:b4:e4:ac:18:50:14:61:13:
05:4d:af:c8:1a:25:8e:49:c4:95:18:c3:f8:12:16:c7:59:d8:
15:3f:24:e2:59:68:c2:8d:9a:90:8f:de:aa:76:dc:ad:d8:cf:
0f:73:b2:ea:3b:09:1d:c1:32:7e:ea:cf:61:8b:cb:22:d2:3b:
a5:12:83:60:5e:0a:c4:15:2a:ee:fa:6b:2d:eb:d6:7f:65:31:
1a:57:5c:15:24:09:3e:b3:22:3f:06:9c:83:a1:2c:3d:fa:37:
19:18:d2:aa:c7:7d:de:9e:a7:be:31:b9:e4:c4:a3:da:3c:2e:
0a:5a:04:20:f1:91:e1:c1:87:63:57:92:14:a8:01:78:ec:63:
56:a3:4a:cf:ab:44:bf:9b:5c:b4:a3:32:26:c8:2e:89:21:05:
67:da:37:6f:d7:66:60:81:3f:4d:3a:61:5c:99:41:18:72:ad:
2e:fe:cb:f3:35:af:3c:44:cf:59:b7:92:7e:21:1b:2e:53:c2:
59:48:06:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:34 2024 by rpki-client on console-ams.rpki-client.org