Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/blgHbw-E_1N28VF67oHGCvUvJDI.roa
File: blgHbw-E_1N28VF67oHGCvUvJDI.roa (raw, json)
Hash identifier: bNk2OY+p+67Ets20kIH1CEivFjgR4yOE8l42RoVSfPI=
Subject key identifier: 6E:58:07:6F:0F:84:FF:53:76:F1:51:7A:EE:81:C6:0A:F5:2F:24:32
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 229D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/blgHbw-E_1N28VF67oHGCvUvJDI.roa
Signing time: Fri 25 Nov 2022 04:41:25 +0000
ROA not before: Fri 25 Nov 2022 04:41:25 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.248.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8861 (0x229d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:25 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6E58076F0F84FF5376F1517AEE81C60AF52F2432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f9:02:dc:42:86:8f:89:86:e6:44:7b:f5:92:
3a:f3:fb:3e:7e:f6:38:80:d2:d3:a6:98:66:1c:96:
2d:f9:74:1f:32:1d:ea:4b:c6:a3:2e:c5:4a:f3:4e:
5f:12:dd:78:ee:13:8c:b2:ee:3e:2c:c4:1c:01:2f:
6e:0a:41:2c:dc:2a:21:8d:5e:12:c1:d9:f0:e1:30:
e3:48:53:04:d4:70:32:0a:e6:95:87:16:55:d5:9b:
f2:e4:55:be:0b:36:4d:1b:f1:c0:d3:b6:02:6f:4d:
59:d1:44:76:72:91:cf:90:70:cc:44:22:06:6a:20:
14:71:05:c7:f7:ec:4f:0e:8a:7b:2f:13:49:a1:e2:
de:be:87:d6:d3:70:99:71:39:80:2f:1f:1f:19:75:
be:bf:13:b4:66:82:a8:95:15:9d:33:f2:06:f2:b9:
1c:5a:45:db:f2:1a:bd:78:96:97:ea:87:32:66:d1:
9b:36:d0:e1:81:18:2e:9d:3e:3b:80:1f:ea:26:ec:
f0:ad:b3:27:60:d3:6e:37:62:c6:2a:0c:ac:03:45:
c7:85:f1:d5:08:b6:76:ac:02:64:fe:af:3d:dc:25:
2c:45:dc:82:67:15:6d:d4:2c:37:87:bf:67:44:da:
75:bb:04:55:cd:77:29:20:1a:08:3a:7b:55:3b:d6:
bc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:58:07:6F:0F:84:FF:53:76:F1:51:7A:EE:81:C6:0A:F5:2F:24:32
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/blgHbw-E_1N28VF67oHGCvUvJDI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.248.0/21
Signature Algorithm: sha256WithRSAEncryption
18:7e:0d:12:54:c5:15:82:04:5a:6b:17:d9:41:6e:55:d4:8e:
9c:e0:01:ff:8c:c6:74:e3:03:7b:14:67:2c:08:f1:c0:06:5e:
f2:21:7f:f3:b5:66:99:6e:62:99:48:4e:12:4d:28:57:02:a0:
6d:39:2f:92:87:61:68:5e:61:b4:5a:7e:ae:60:50:77:ea:81:
25:b8:9b:f7:84:e8:bb:c0:9b:18:12:39:e8:e8:9f:47:e0:58:
50:9e:97:f0:28:4b:df:3a:45:e6:1b:fc:c3:21:cc:40:dd:81:
05:7b:b5:f2:5b:12:f9:77:93:62:c2:65:93:bb:46:cd:e2:dc:
14:d5:44:8a:87:84:91:fe:29:2e:51:8e:7f:96:fa:94:4c:06:
4c:53:37:3e:bd:0a:e4:03:2f:55:87:c6:10:d9:2e:d4:19:8e:
27:32:01:9c:5c:e5:9c:0f:93:44:c5:6e:c3:b0:47:76:63:e9:
9d:24:11:62:ee:cf:33:44:18:17:ed:52:ff:5c:1d:4b:80:04:
f4:46:84:fa:c6:b3:ad:7b:ef:a2:73:40:cd:ba:13:53:cc:7f:
ce:79:2b:b0:0e:f4:09:28:4e:f8:92:fb:ca:75:84:7d:7d:7d:
d3:ba:c9:ba:52:9a:4a:d6:96:44:ce:ea:46:98:e3:14:be:f7:
cb:04:c8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:35 2024 by rpki-client on console-ams.rpki-client.org