Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bCyH9EnLuph0sklLPybqmMETTD4.roa
File: bCyH9EnLuph0sklLPybqmMETTD4.roa (raw, json)
Hash identifier: sjCKEcc2acyq4V6ZRusewJCDyWbxFpJ+jo86FBlfnGs=
Subject key identifier: 6C:2C:87:F4:49:CB:BA:98:74:B2:49:4B:3F:26:EA:98:C1:13:4C:3E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1AAC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bCyH9EnLuph0sklLPybqmMETTD4.roa
Signing time: Wed 29 Sep 2021 02:45:37 +0000
ROA not before: Wed 29 Sep 2021 02:45:37 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.193.109.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6828 (0x1aac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:45:37 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=6C2C87F449CBBA9874B2494B3F26EA98C1134C3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7b:75:2f:de:d6:b8:4f:2e:05:f1:f8:be:61:
f0:9e:72:06:f1:64:cc:f8:87:e0:04:90:ba:88:95:
38:d5:8a:b8:dd:72:1e:2c:6c:de:7b:bf:af:c0:6f:
0a:a6:c2:b5:30:d6:bc:02:01:36:b7:01:bb:9e:01:
49:4a:36:6a:81:77:c9:a1:5b:71:e4:d1:cc:81:ad:
d8:f1:76:70:3c:05:0e:03:c9:1a:9f:36:74:d1:59:
7b:81:d1:e4:c1:da:81:f2:bf:4f:03:f5:7b:c6:0c:
13:38:12:92:34:b9:21:0a:1f:d5:66:ed:ac:1e:ab:
3d:cc:3f:87:47:56:33:86:82:64:af:78:58:18:5b:
95:50:0d:f4:d1:a0:6d:f5:b2:56:a1:69:47:12:24:
fb:09:a2:7e:cd:60:df:16:4d:aa:08:e7:19:e9:36:
12:58:08:58:cb:3d:05:3a:cb:ba:77:dd:d0:4f:91:
d0:88:0a:c3:97:bf:3c:49:4d:ec:d9:2b:83:e0:6d:
a3:c3:19:6a:a9:e8:cc:90:85:c4:52:06:d2:ca:52:
b1:59:a9:33:92:60:59:5f:6a:25:65:7b:24:11:03:
13:42:aa:b5:02:dd:c7:d7:cf:98:85:a1:ae:f4:17:
8b:7e:bb:a8:c1:f1:50:4e:03:46:b7:89:2d:64:7b:
7b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2C:87:F4:49:CB:BA:98:74:B2:49:4B:3F:26:EA:98:C1:13:4C:3E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bCyH9EnLuph0sklLPybqmMETTD4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.109.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:bc:11:dc:d7:39:a2:2f:df:3e:ef:6e:a5:46:25:8e:f9:e9:
66:36:9d:23:ef:be:bd:f4:f7:01:b5:d4:4e:48:09:29:eb:1e:
89:ba:b0:f6:77:e3:05:97:99:cc:51:74:8d:32:6f:1c:e4:02:
7e:c9:20:86:20:73:0c:e3:bd:a3:22:fe:0a:57:3e:48:ce:a0:
23:22:d2:c4:69:0a:a4:f2:eb:97:9e:70:b6:d7:ae:44:2e:80:
64:7c:7f:60:9a:34:ef:ae:5c:c2:7a:ea:32:f5:6a:14:79:a7:
57:d4:4c:65:0c:66:10:17:34:41:e2:26:1a:2b:f1:fb:4c:af:
47:3a:4b:23:c2:a1:77:4a:ab:ef:ca:0d:2e:33:c3:39:7b:58:
3e:4f:ab:86:33:ed:d2:59:9f:13:bc:6b:b0:f8:d1:a0:78:12:
1c:aa:b1:76:a2:3f:1e:19:23:78:a2:5a:69:90:db:7c:af:fd:
79:35:88:42:3b:9b:7a:04:79:20:b8:34:e0:16:b5:25:c6:09:
d2:0f:b4:c1:2d:11:8b:49:cc:52:45:1b:62:ee:ca:33:de:26:
8c:cc:87:30:86:e1:56:fd:3d:2b:e8:5a:6c:a7:f0:b7:21:0d:
f8:97:48:0f:fd:12:4c:3a:a5:8e:66:70:8c:60:f9:b4:57:b9:
43:9f:56:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:35 2023 by rpki-client on console-fra.rpki-client.org