Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cDfhKRFJWstznaX_fJ8NGiYVtIs.roa
File: cDfhKRFJWstznaX_fJ8NGiYVtIs.roa (raw, json)
Hash identifier: 3qZFBQg8JbOjhIdoG8cc4ij6aBQvpvbST8bvpHOBsvk=
Subject key identifier: 70:37:E1:29:11:49:5A:CB:73:9D:A5:FF:7C:9F:0D:1A:26:15:B4:8B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 217D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cDfhKRFJWstznaX_fJ8NGiYVtIs.roa
Signing time: Fri 25 Nov 2022 04:39:59 +0000
ROA not before: Fri 25 Nov 2022 04:39:59 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.204.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8573 (0x217d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:59 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7037E12911495ACB739DA5FF7C9F0D1A2615B48B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:23:eb:1a:4d:3a:e8:e3:6c:fa:8b:80:f5:ba:
0b:17:bc:22:26:7d:e0:d2:0a:d7:21:b7:a9:a3:25:
86:59:31:ff:f4:52:12:44:bf:f0:af:9c:63:9c:4e:
f5:98:43:bd:aa:08:99:19:34:4a:ff:81:2e:7b:a5:
98:13:cf:e0:cf:03:f7:14:6e:ba:aa:85:11:19:cf:
0f:87:5f:fa:c7:1f:3e:59:59:b3:76:eb:11:cb:3f:
cc:5a:87:d9:e6:bb:47:2e:19:07:63:23:17:b7:5f:
10:1f:21:b9:d1:1e:6b:c7:76:e1:1f:22:2a:7b:45:
a3:03:3d:16:f0:eb:b0:8d:74:20:54:5c:58:08:c1:
c4:bf:12:3a:6b:b3:75:33:e5:0f:cc:b5:43:13:4e:
83:b4:c0:7d:a1:5e:ae:3b:3a:b3:0a:52:99:52:98:
7b:7a:b3:c0:9f:b3:38:47:f4:e0:ca:a6:49:eb:2d:
ee:bf:b6:08:ad:9a:ae:72:a2:60:a1:67:aa:df:f6:
fb:cb:7d:5e:60:87:49:6c:71:0d:b1:63:6f:dc:b6:
09:66:ea:b4:6d:8b:a7:9b:0d:a9:25:ed:38:3e:01:
d1:17:d2:5d:43:b7:84:02:2b:3c:f6:68:31:2c:65:
bd:3c:1f:70:b7:fd:23:29:31:bf:9b:c6:2b:ed:2b:
6d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:37:E1:29:11:49:5A:CB:73:9D:A5:FF:7C:9F:0D:1A:26:15:B4:8B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cDfhKRFJWstznaX_fJ8NGiYVtIs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.204.0/22
Signature Algorithm: sha256WithRSAEncryption
71:31:2f:50:96:4a:71:7a:98:85:d0:5f:ca:cb:94:54:28:70:
c4:09:7a:e4:cd:8b:be:d9:cf:03:2c:89:2e:66:23:fc:97:65:
51:65:10:d7:95:e2:95:41:4c:5a:07:06:b7:35:e1:ff:e9:71:
0b:15:96:51:c7:c2:42:df:40:98:0f:ef:11:77:db:ac:5e:35:
10:58:c1:04:7d:3b:a3:ad:96:65:44:be:2e:5c:cd:f6:bf:87:
46:99:e0:c7:08:48:81:1d:95:4c:f6:86:ed:37:79:5d:c8:aa:
7c:e7:05:22:80:02:69:c3:bf:90:86:2b:77:88:24:97:0c:9e:
9f:c4:40:0c:3c:91:e1:2e:f4:26:b0:25:39:8a:63:a7:d0:7a:
31:39:00:a5:99:a5:39:1a:d4:ff:e3:93:78:8d:d7:7b:bb:05:
6a:7a:a9:ac:1e:a1:9c:50:08:f3:65:b2:59:39:9c:04:08:d6:
cf:2f:7a:35:49:80:b9:2c:e4:b8:b0:d4:a6:0d:f1:ea:39:d6:
88:54:84:dc:a6:33:0b:33:6b:b2:37:45:de:79:28:2c:b3:dc:
f5:2f:34:e2:b9:c8:62:59:1e:e0:c5:f7:f3:03:77:6d:47:e0:
f7:66:57:2a:61:9d:ff:62:21:d9:4c:e9:d3:09:31:3c:b0:de:
1d:fc:2a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:55 2024 by rpki-client on console-fra.rpki-client.org