Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/acP0ute4voRwk-y5qaSxx-hBTn0.roa
File: acP0ute4voRwk-y5qaSxx-hBTn0.roa (raw, json)
Hash identifier: qlhVpx0skr8Y4oYzj9qdNZda39g3FFML4s4lqAp5SYU=
Subject key identifier: 69:C3:F4:BA:D7:B8:BE:84:70:93:EC:B9:A9:A4:B1:C7:E8:41:4E:7D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2187
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/acP0ute4voRwk-y5qaSxx-hBTn0.roa
Signing time: Fri 25 Nov 2022 04:40:01 +0000
ROA not before: Fri 25 Nov 2022 04:40:01 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.223.192/26 maxlen: 26
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8583 (0x2187)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:01 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=69C3F4BAD7B8BE847093ECB9A9A4B1C7E8414E7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:59:7a:48:76:f6:3f:2a:d1:16:df:b1:e4:25:
31:34:9e:cd:b2:75:5e:3c:4c:fc:bb:93:5f:a6:b8:
d3:a5:1b:a3:51:fb:ec:c0:48:de:c9:ce:03:85:3f:
c4:88:fb:14:84:c8:13:3a:bf:d3:f0:25:de:5f:cb:
b8:6b:1b:7c:26:34:58:bd:a4:12:19:7b:ce:8d:0f:
2e:cb:88:34:7e:4b:74:5c:7a:e5:eb:96:42:6c:dd:
cb:a7:13:5c:37:b6:09:dc:06:1e:3f:a8:7a:0d:d4:
0e:a6:08:7f:70:cf:b8:83:25:4a:e3:12:a0:3e:c7:
97:03:0c:23:aa:02:17:69:49:a2:19:6a:64:ac:2c:
6b:41:f1:dd:ee:11:2b:02:02:2e:08:27:a4:f3:5a:
df:00:5c:e6:49:36:b8:05:ee:74:cd:8e:27:38:5b:
bb:0e:d4:5a:2e:49:57:f4:30:b1:4b:7a:1a:28:88:
b0:e0:a3:c8:ee:01:d8:41:00:2f:31:2e:2b:95:75:
e7:67:9d:06:a9:10:bc:32:a5:60:b8:10:15:b0:ba:
33:0c:d7:60:7c:4f:7f:d3:a3:b8:14:a0:b7:c0:e0:
46:f0:17:bb:64:5b:96:54:fb:cf:b7:43:29:5c:85:
50:31:74:19:55:41:c6:0d:b2:9c:c2:ab:f5:8b:3c:
f0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C3:F4:BA:D7:B8:BE:84:70:93:EC:B9:A9:A4:B1:C7:E8:41:4E:7D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/acP0ute4voRwk-y5qaSxx-hBTn0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.223.192/26
Signature Algorithm: sha256WithRSAEncryption
35:b6:6b:64:34:99:24:a8:aa:84:e5:30:f4:48:9f:1b:d4:24:
a4:a7:ae:ae:08:50:90:2e:d5:27:15:9a:c2:b3:20:77:7b:82:
30:84:cf:a9:d2:9d:cd:02:bb:9a:55:77:a2:cc:48:81:ba:19:
af:06:89:0f:b1:84:c0:0a:03:25:03:43:8e:b4:91:45:d8:2f:
27:89:15:8c:09:07:f6:f6:3f:f1:af:3a:bd:24:b6:45:8b:55:
38:45:32:f5:85:6b:76:b5:95:dc:09:a5:87:a6:48:f1:db:34:
67:1e:ac:28:b4:1a:59:62:bb:c5:b4:6e:9f:87:a4:8b:f7:9f:
b6:11:ed:f4:ca:b5:63:c1:34:fa:05:db:32:93:0e:28:bc:ab:
4d:e7:b8:85:29:a8:ca:46:0a:9c:5c:b8:48:27:4a:95:76:c8:
95:ab:21:f8:8e:bb:d1:cc:6b:f1:a3:76:43:0a:c9:cc:0e:31:
95:ca:cb:b8:00:53:91:8b:6a:64:8f:0f:4e:86:c6:7f:89:38:
79:09:82:c8:e3:3e:44:ae:d6:22:da:67:8d:08:ca:c7:7d:d8:
32:ad:c1:fb:b6:3a:14:fd:39:91:b9:0c:41:45:ff:54:47:16:
a9:5d:f9:48:92:91:23:67:3c:a7:a3:1f:01:df:00:4f:18:24:
8e:fa:eb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:35 2024 by rpki-client on console-ams.rpki-client.org