Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/b3LM_9cfCMrxL07o2XIxl0Bwr88.roa
File: b3LM_9cfCMrxL07o2XIxl0Bwr88.roa (raw, json)
Hash identifier: XKcAOr6gqybCKLFN3bi/vv9DmqAXWCQItK5fFumY4UQ=
Subject key identifier: 6F:72:CC:FF:D7:1F:08:CA:F1:2F:4E:E8:D9:72:31:97:40:70:AF:CF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2201
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/b3LM_9cfCMrxL07o2XIxl0Bwr88.roa
Signing time: Fri 25 Nov 2022 04:40:39 +0000
ROA not before: Fri 25 Nov 2022 04:40:39 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.80.0/21 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8705 (0x2201)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:39 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6F72CCFFD71F08CAF12F4EE8D97231974070AFCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e8:75:58:8d:7d:06:ba:bb:19:27:ad:36:97:
fc:3b:51:61:5a:1e:dd:20:43:ce:fa:f9:07:47:d5:
28:82:dc:83:f5:b0:77:de:cf:3c:74:f0:f6:20:6c:
b6:aa:9f:8c:25:3f:96:f1:b6:46:59:48:54:bb:dc:
6f:8b:fa:b5:72:b9:4f:0a:99:89:d1:6c:b8:74:23:
a4:91:61:7d:39:65:f4:83:ed:c3:7c:c6:9e:63:eb:
bc:5a:c7:f4:2c:2c:66:56:1e:23:fb:56:6b:79:42:
d2:a3:50:11:a4:2f:34:c5:1a:89:0a:08:80:54:89:
79:50:74:b8:00:3d:5e:2e:ba:a8:6f:a7:b5:5f:f0:
84:3b:a1:a5:41:c7:49:28:60:b7:8d:b4:7b:58:98:
45:b6:5c:5c:81:28:18:4f:1b:a7:77:31:22:8b:63:
9d:5f:20:90:60:eb:4c:fd:db:c5:2c:3e:da:e7:2a:
c2:09:6a:71:6c:e7:96:80:61:a0:0c:c5:8d:d3:f8:
b8:1c:ca:38:b8:ff:06:5c:22:bc:1f:c0:3b:fc:9a:
d4:e8:dc:1f:36:4c:94:10:b4:9d:e0:39:45:23:c7:
61:ce:28:7e:e8:3b:12:4d:6f:4b:11:7f:71:77:49:
0f:4f:b8:55:d0:f1:16:12:84:1c:45:ec:46:7f:71:
e4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:72:CC:FF:D7:1F:08:CA:F1:2F:4E:E8:D9:72:31:97:40:70:AF:CF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/b3LM_9cfCMrxL07o2XIxl0Bwr88.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.80.0/21
Signature Algorithm: sha256WithRSAEncryption
08:3e:c3:be:b4:cc:87:3f:2a:b4:04:51:77:dc:6e:9c:b2:aa:
60:89:2d:a4:5e:85:7b:5f:ea:aa:6b:13:97:5c:fe:79:79:7d:
40:4f:c6:9a:94:85:6b:b1:5b:9e:22:5a:bf:d4:bf:97:d7:41:
51:e5:b8:12:e7:bd:4c:f1:ac:6c:c5:6c:19:02:20:21:51:c9:
71:ea:9e:01:89:22:67:4e:ff:68:22:1c:56:57:b5:20:bc:f3:
aa:72:84:d2:dd:97:a1:1e:2a:30:23:dd:9a:c0:8d:e0:1b:49:
4f:4b:79:a3:6b:4f:6f:23:e7:e5:1c:62:9a:36:18:51:06:09:
c1:d9:cb:8d:b5:11:a4:fc:a1:0e:19:0e:b5:eb:ba:57:6c:8d:
be:a5:3b:f4:eb:26:3a:48:95:45:2e:dd:43:6d:c5:67:ee:7c:
b8:c7:4e:ff:bc:22:31:a0:88:64:a1:b9:9e:a8:69:60:40:35:
0d:a2:34:53:6a:b5:bd:24:e9:ec:0b:ce:2b:71:d3:ba:6c:93:
ec:99:4b:af:06:41:cf:9b:81:c0:ce:af:1b:dd:9e:48:99:38:
96:c9:d2:29:97:6d:12:51:61:ca:8c:68:d1:ce:53:e3:74:7c:
8e:72:bd:92:9c:eb:bc:7f:62:a7:64:b4:da:2a:71:b2:7d:72:
60:c5:50:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:35 2024 by rpki-client on console-ams.rpki-client.org