Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cjOAXleknfFvAdNln4l8zxnoCIc.roa
File: cjOAXleknfFvAdNln4l8zxnoCIc.roa (raw, json)
Hash identifier: KxuJYP8eY/6mXVtvwtznd5MoaSxAS+kPZE1+7WikHXU=
Subject key identifier: 72:33:80:5E:57:A4:9D:F1:6F:01:D3:65:9F:89:7C:CF:19:E8:08:87
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 190B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cjOAXleknfFvAdNln4l8zxnoCIc.roa
Signing time: Sun 07 Feb 2021 12:56:30 +0000
ROA not before: Sun 07 Feb 2021 12:56:30 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 123.195.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6411 (0x190b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:56:30 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7233805E57A49DF16F01D3659F897CCF19E80887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ab:2a:41:aa:71:84:b1:13:df:3e:6a:e7:d8:
18:60:f8:c3:64:1f:ed:a4:06:0e:ae:a8:bc:d5:da:
37:1d:5b:e5:00:4c:21:73:d0:2c:84:5d:11:d1:21:
38:cc:67:c4:dc:17:7b:30:84:36:61:8c:bd:90:b9:
18:39:a2:9e:d0:c5:72:b2:9c:36:61:56:e2:07:3d:
29:1a:88:b1:ef:14:67:93:fc:22:5c:81:f2:13:f1:
43:7e:4f:c0:91:62:d5:55:97:1f:b4:28:9e:88:fc:
82:af:da:52:da:7c:4e:e5:68:0d:be:80:c1:d0:1e:
49:6c:83:f8:44:1b:52:be:8b:56:d3:fc:34:1b:41:
a4:24:e9:58:24:94:0e:e4:60:bc:12:68:10:d1:c4:
b6:76:25:30:36:7a:51:2d:65:27:12:50:f3:fc:0e:
fb:e8:fb:88:e6:96:af:2f:b3:24:7a:d3:20:01:32:
4f:13:1f:3f:e8:2b:17:6b:10:53:27:2b:25:d8:a3:
96:55:df:b4:62:ae:b7:56:74:3f:a0:6b:04:df:67:
1e:37:62:29:ca:dc:7c:8b:87:34:fb:dd:ad:7e:d5:
9f:c7:92:1e:fc:76:41:90:be:e8:d0:3e:fd:01:66:
14:0d:06:3e:41:0b:4e:9c:e8:46:f0:15:83:78:37:
df:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:33:80:5E:57:A4:9D:F1:6F:01:D3:65:9F:89:7C:CF:19:E8:08:87
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cjOAXleknfFvAdNln4l8zxnoCIc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.237.0/24
Signature Algorithm: sha256WithRSAEncryption
65:4b:df:d6:6c:a9:8b:85:81:4c:6e:68:87:8c:05:62:49:92:
b4:01:1c:cf:ed:fc:88:ae:91:76:4b:6d:c0:06:2c:09:92:4f:
7c:b4:fb:45:37:44:11:b3:96:12:f6:59:61:4f:90:4c:2e:ca:
1c:a2:06:81:81:09:48:d8:5a:d0:c2:67:5a:cd:53:6a:43:42:
9b:be:9a:fb:b1:8d:4f:de:30:71:e4:0e:2c:11:8c:9a:29:bf:
b2:4d:6d:06:3e:a3:c5:ca:ed:dd:5a:af:70:94:5e:1f:db:20:
f7:5e:9d:2d:a4:5c:ed:a7:72:b3:95:cf:21:7e:1c:0b:69:5d:
3b:fe:d3:86:b0:ef:ae:30:1f:9c:b9:20:c5:ee:76:e4:02:ea:
d9:d7:f5:88:64:d8:f2:a2:b8:62:41:83:ca:ad:fa:63:e6:32:
8e:d2:bb:20:ea:0c:81:a2:42:69:01:28:69:4f:2b:e1:8c:82:
54:9d:2a:8b:cb:5c:57:d7:70:b1:3b:8b:75:6c:c2:e9:86:eb:
6d:c4:f0:b5:9a:0b:40:dd:49:dd:cd:8d:c4:24:0b:5f:1c:84:
dd:fb:5d:59:55:e8:d3:cd:4b:d9:d8:33:19:00:b4:66:60:0c:
e9:7a:e5:cd:4b:ac:d1:41:dc:ce:33:4d:51:2c:fe:7a:dc:b7:
c7:bb:e7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:35 2024 by rpki-client on console-ams.rpki-client.org