Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cRa8o_MNB1f5Z5dBvD3B2A4SvK0.roa
File: cRa8o_MNB1f5Z5dBvD3B2A4SvK0.roa (raw, json)
Hash identifier: vp8F4xcHltnY3vLTgfYCHywGi/ll8eP6IwNElgzTCsQ=
Subject key identifier: 71:16:BC:A3:F3:0D:07:57:F9:67:97:41:BC:3D:C1:D8:0E:12:BC:AD
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 20A3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cRa8o_MNB1f5Z5dBvD3B2A4SvK0.roa
Signing time: Fri 25 Nov 2022 04:38:56 +0000
ROA not before: Fri 25 Nov 2022 04:38:56 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.52.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8355 (0x20a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:56 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7116BCA3F30D0757F9679741BC3DC1D80E12BCAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6b:a6:16:41:38:26:47:92:c7:67:50:81:8c:
95:13:94:c8:74:12:53:82:75:b3:0a:08:71:73:9c:
aa:13:92:19:2d:c4:09:ce:c5:f2:cb:03:ee:cf:c8:
38:72:86:63:66:01:0e:ed:e4:73:75:88:e9:0f:a7:
21:49:5b:7e:04:a7:2f:7f:eb:ec:b2:c7:6c:41:dd:
6c:0d:40:b6:18:97:f6:e1:44:72:c7:f6:8c:b7:16:
0a:95:f4:b7:8c:f8:8e:89:37:51:60:b2:33:a5:42:
e1:99:48:86:82:4e:2a:98:e7:e9:10:06:ee:c7:53:
49:23:25:79:a3:e0:f5:cd:65:4f:79:8b:38:47:b4:
51:97:ec:68:e9:61:2c:ae:61:8c:08:33:91:9c:80:
ae:51:fb:85:c9:49:86:fe:ee:d1:77:a5:9e:5a:ca:
dd:02:b4:a2:69:ce:85:8f:23:ff:be:82:87:fd:12:
f1:3d:d5:88:00:15:0e:93:e3:ac:6c:55:74:99:9a:
32:27:44:dc:05:d9:0d:2d:2b:8e:68:d2:a2:58:63:
f1:ba:fa:a9:15:a9:a9:e4:82:d1:08:51:5d:9d:15:
e9:d4:f2:20:31:f7:4c:e9:f0:2c:d8:bb:c0:8b:da:
b7:74:00:a0:34:2c:26:23:fc:7f:fd:9e:b6:b0:33:
7f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:16:BC:A3:F3:0D:07:57:F9:67:97:41:BC:3D:C1:D8:0E:12:BC:AD
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cRa8o_MNB1f5Z5dBvD3B2A4SvK0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.52.0/22
Signature Algorithm: sha256WithRSAEncryption
82:6d:81:cf:f9:4a:ad:e9:10:48:cc:02:f6:5b:b2:a4:56:9e:
3b:63:2a:53:03:bd:c2:51:d2:06:c7:dd:cc:bd:7c:3b:ad:26:
69:1e:e5:fe:0c:cd:80:c7:d7:c3:b2:2f:e8:06:26:a9:27:d4:
3e:b8:9e:b2:98:ec:f2:9a:44:e4:fc:08:f9:6b:9f:19:43:65:
2f:e6:84:6a:b1:b9:91:83:09:58:06:0a:83:c0:69:8e:2f:4a:
91:dc:c6:9f:a8:69:8c:59:dc:21:2b:9d:f6:e7:49:d2:16:e2:
4e:11:41:c8:5b:bf:8d:75:29:1c:97:0e:0a:8a:f6:75:ec:89:
ca:16:ee:4c:ba:0b:a1:22:cb:5d:9a:38:1c:6c:1f:d6:86:02:
f1:07:01:f6:f5:41:32:3a:be:87:7e:c7:a8:5d:32:28:12:60:
38:69:5d:3f:a7:9b:35:37:dc:24:2b:4e:a0:90:2b:95:c2:cb:
27:cb:28:b8:47:3b:db:b5:6b:40:9d:9a:e5:52:be:bf:18:99:
10:a7:66:12:70:11:82:97:26:06:a2:49:b3:96:40:04:10:29:
ba:81:6d:1d:ee:b4:91:8a:72:55:22:d0:60:3b:ba:da:52:1d:
6e:74:6a:eb:6c:97:e1:37:de:04:57:53:6d:ca:b0:bb:5a:17:
ad:8d:36:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:35 2024 by rpki-client on console-ams.rpki-client.org