Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ejY6d0qieOW8KdirAWhO_Jb3NFs.roa
File: ejY6d0qieOW8KdirAWhO_Jb3NFs.roa (raw, json)
Hash identifier: qVb3KN1cDiHI+f+AxaeuMekxbH12CGom/0DgLND5qPo=
Subject key identifier: 7A:36:3A:77:4A:A2:78:E5:BC:29:D8:AB:01:68:4E:FC:96:F7:34:5B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ejY6d0qieOW8KdirAWhO_Jb3NFs.roa
Signing time: Thu 15 Sep 2022 02:53:52 +0000
ROA not before: Thu 15 Sep 2022 02:53:52 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.204.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:52 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7A363A774AA278E5BC29D8AB01684EFC96F7345B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:62:ff:eb:c1:08:42:fc:6a:2f:ee:7f:be:d7:
57:e6:c1:86:03:70:32:e1:cd:85:cb:69:cc:50:71:
03:e8:27:2b:af:fa:5f:ba:a6:73:05:5b:e4:b7:20:
a1:82:3c:1e:2e:66:73:e3:5a:42:95:ff:34:38:c2:
59:ce:16:2d:99:63:7b:6b:bf:80:cf:e3:c5:06:6d:
2f:67:a4:5c:f4:f4:83:6a:d8:17:3a:31:a1:0b:fe:
91:bd:42:5c:6f:ca:f1:37:e9:30:98:81:2b:a2:36:
f7:b9:2e:b3:38:9a:63:ff:fa:7f:fe:14:75:69:78:
aa:a4:71:18:65:7d:f7:b5:0a:6f:f5:1f:d2:1d:e7:
de:94:6a:d3:59:25:53:17:d9:3d:65:64:11:52:ae:
06:8b:82:d6:9b:17:c3:04:ee:49:cd:9c:96:31:ba:
38:cb:8c:c1:c5:4a:35:14:81:47:69:36:9d:e0:dc:
a2:ed:88:29:4a:5b:f9:49:f6:b5:48:65:92:d4:7e:
fa:b6:e2:b3:07:d9:12:68:ca:bf:38:fb:49:d6:a6:
a8:60:bf:b4:05:21:86:5f:55:3a:79:e2:aa:3d:55:
60:c5:30:c6:a1:7c:2e:0c:fc:11:ed:04:35:c7:54:
25:62:12:69:44:ed:bd:cd:aa:9d:eb:7d:75:e1:23:
b2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:36:3A:77:4A:A2:78:E5:BC:29:D8:AB:01:68:4E:FC:96:F7:34:5B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ejY6d0qieOW8KdirAWhO_Jb3NFs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.204.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:d1:8d:00:16:96:42:bc:b3:c1:ea:e8:84:46:35:54:fd:77:
37:af:99:35:ca:bc:c3:40:14:31:7d:2d:d1:50:0b:52:04:1b:
54:e2:e8:e9:f8:28:b5:cc:53:0e:50:2d:12:e9:6f:13:2c:46:
5c:fa:91:4f:aa:1d:fc:6d:46:3f:53:dc:55:05:0d:53:3a:17:
34:f3:62:25:fc:29:bd:98:63:7f:f1:3f:1d:84:a2:09:e1:3d:
38:3e:f8:86:a2:89:00:1e:b0:a4:78:a8:14:fe:ea:d2:1e:6e:
5f:01:cc:b7:34:f3:fc:e0:83:7a:34:6c:bd:70:90:9d:d4:b8:
7e:b8:21:02:4d:65:40:04:04:96:48:1b:a9:16:49:96:05:91:
57:1c:e2:0e:5a:c1:aa:85:91:10:28:ee:83:24:64:4e:a3:98:
3f:db:9f:c1:12:40:21:7f:37:6f:71:cf:0b:80:37:97:54:92:
49:ec:bd:f3:33:ea:fc:ae:e1:f4:14:13:e6:b0:fc:cf:ce:a0:
ca:1b:06:1c:16:87:06:1f:5f:67:5b:8d:cf:fa:7a:13:75:d0:
2b:15:74:ca:b6:8f:46:7c:29:4f:0d:42:08:43:f5:91:07:8e:
c9:74:3c:de:19:d3:92:a7:ab:ba:2f:f9:0e:a6:de:3a:36:71:
7e:bc:5e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:56 2024 by rpki-client on console-fra.rpki-client.org