Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aZMuvALensThbsd3cghZgBwVCDQ.roa
File: aZMuvALensThbsd3cghZgBwVCDQ.roa (raw, json)
Hash identifier: 4Xj3N93iHn4yvImT4QX5jaEk9UBdzZ8AAbnDPDyGh1c=
Subject key identifier: 69:93:2E:BC:02:DE:9E:C4:E1:6E:C7:77:72:08:59:80:1C:15:08:34
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 18B9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aZMuvALensThbsd3cghZgBwVCDQ.roa
Signing time: Sun 07 Feb 2021 12:53:04 +0000
ROA not before: Sun 07 Feb 2021 12:53:04 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 123.192.0.0/14 maxlen: 14
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6329 (0x18b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:53:04 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=69932EBC02DE9EC4E16EC777720859801C150834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:db:3a:e1:4a:e6:3c:94:75:09:de:88:46:96:
1f:8d:7b:b1:4c:92:ab:6e:be:ce:8f:07:e7:40:db:
30:35:2a:6c:a4:9b:3e:90:9d:28:02:24:85:a3:11:
f6:74:b5:9d:42:9e:7f:5b:57:df:ee:4b:fe:68:85:
7c:4e:01:4c:dd:85:ed:7d:58:ea:67:04:d3:41:67:
98:7e:d3:e6:15:ff:76:c5:db:a8:26:95:e0:8f:f8:
a8:71:6d:cd:7b:be:ce:c9:34:57:9d:08:c6:a8:10:
08:8c:0b:ee:41:03:64:73:33:e7:7f:18:2d:d1:b6:
44:db:59:fc:42:b7:6d:39:68:95:7e:6e:fb:93:b5:
7c:3f:bc:3e:c8:cf:4c:8d:08:06:96:05:3e:78:66:
4c:ab:2d:5a:07:ee:42:5c:f2:41:f9:5b:61:cc:0a:
25:e9:87:e4:7e:80:03:4e:7e:dd:c0:43:cb:3f:45:
c0:63:f1:b1:63:ee:95:d4:f4:6e:1b:19:32:df:bf:
64:a0:d2:f7:4f:44:89:cf:99:45:e8:b5:59:21:ed:
79:f1:bf:7b:26:b7:f1:9d:4d:1b:d3:f0:a8:6b:ed:
94:a1:5e:3f:3d:47:79:4d:4b:38:32:b7:25:b3:98:
3d:57:67:40:9f:31:be:f5:0d:e6:ad:1c:28:e1:19:
7b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:93:2E:BC:02:DE:9E:C4:E1:6E:C7:77:72:08:59:80:1C:15:08:34
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aZMuvALensThbsd3cghZgBwVCDQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.0.0/14
Signature Algorithm: sha256WithRSAEncryption
05:1f:d0:ce:c4:68:f8:c9:c5:01:bd:47:b3:a5:af:e5:e4:b3:
12:b9:99:ec:c5:8b:5a:86:2a:d9:56:e3:ac:20:0b:d6:e6:53:
f7:66:29:26:7d:73:46:b1:95:b6:f5:50:a8:0b:0c:48:0c:8a:
82:d7:0a:c4:dd:5b:de:a1:f4:88:61:0d:14:f4:af:62:24:44:
28:f3:68:76:0e:43:e7:1d:9f:f0:b5:c7:98:1c:a2:ef:7e:d1:
e8:e6:fe:bb:b9:db:03:32:8e:12:97:31:b0:e9:e0:4d:fc:53:
52:65:a6:cf:21:c5:8d:b7:16:01:eb:e0:ba:bd:14:6f:ad:2b:
d2:3f:eb:21:75:fb:4d:9b:1f:06:09:33:8f:d3:d2:f5:9b:99:
5c:c6:6c:06:ec:08:aa:f8:38:89:08:0a:85:4a:ac:82:e2:13:
b2:ec:70:b0:24:95:1e:a1:b9:e2:0f:ec:ba:2a:af:c3:90:1b:
f2:6d:db:09:a5:df:12:5b:60:d5:c1:97:71:63:19:23:a6:cf:
77:e5:fa:d7:65:2c:f2:a4:d2:15:4c:e5:a6:3b:f5:a4:17:af:
3f:47:f7:bc:4e:e3:d9:be:5b:dd:40:a6:4f:08:b3:f0:40:67:
37:ce:f3:e5:8b:dd:a8:64:b4:7f:93:a5:6a:32:4f:42:d0:1e:
24:30:73:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:35 2024 by rpki-client on console-ams.rpki-client.org