Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fYqs1EG2C8T25xF6R5im7m2T6lo.roa
File: fYqs1EG2C8T25xF6R5im7m2T6lo.roa (raw, json)
Hash identifier: W4ISIi6vl5XNZRA7JOjuXnaVinizm/zAGnwNFm7rpyI=
Subject key identifier: 7D:8A:AC:D4:41:B6:0B:C4:F6:E7:11:7A:47:98:A6:EE:6D:93:EA:5A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fYqs1EG2C8T25xF6R5im7m2T6lo.roa
Signing time: Thu 15 Sep 2022 02:45:05 +0000
ROA not before: Thu 15 Sep 2022 02:45:05 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 123.195.192.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:05 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7D8AACD441B60BC4F6E7117A4798A6EE6D93EA5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8e:de:2b:ff:10:28:6d:78:d1:25:b3:d0:c9:
0e:bb:72:7d:59:21:7f:53:e4:dd:ee:49:c8:cd:3a:
12:f6:77:17:55:19:89:c0:75:14:83:4b:79:76:08:
41:66:a9:39:58:19:3e:66:2b:86:2a:f5:ad:7a:ea:
2e:3e:2e:69:1e:bb:bd:eb:68:b4:30:5b:93:ca:d3:
77:e9:b5:e9:20:9a:60:ec:26:9f:c4:53:63:c5:8d:
ef:0e:7a:5c:10:20:c2:22:5a:c4:49:1e:c3:43:29:
14:25:43:6f:f5:f4:5a:4b:5a:1f:48:41:92:10:61:
bc:f8:4e:7c:be:54:28:5e:44:df:61:39:ed:fe:d1:
bb:de:ec:ba:d4:1c:79:a9:c3:b7:42:e3:d8:a1:f7:
d8:85:33:3c:2c:51:72:39:d7:7e:f4:0c:05:50:1c:
4a:c9:17:36:91:d3:69:11:61:ab:cb:50:94:99:48:
38:b2:b3:e4:ee:1a:82:79:0a:2e:8f:bb:5a:11:05:
93:0b:d2:33:50:2f:93:6e:b9:5d:bd:fb:cd:3f:4c:
ec:06:33:1c:58:2d:fd:2f:31:2a:38:99:6a:85:b9:
85:70:34:3c:05:eb:bb:40:e2:b2:2a:a6:9d:75:ff:
65:03:e4:d3:e1:ee:34:14:68:50:f7:95:a1:7e:27:
a6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:8A:AC:D4:41:B6:0B:C4:F6:E7:11:7A:47:98:A6:EE:6D:93:EA:5A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fYqs1EG2C8T25xF6R5im7m2T6lo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.192.0/19
Signature Algorithm: sha256WithRSAEncryption
07:6b:ed:ad:c4:a1:2f:10:f4:b2:41:41:f2:5f:d1:fc:a4:1d:
a9:88:bb:9e:8d:c0:eb:32:e8:c9:b9:60:eb:53:cf:63:8f:80:
d7:5b:14:71:8a:a3:ae:26:d4:5f:dc:a1:92:c8:f7:e7:5d:5e:
4e:2c:38:c3:92:44:9c:ac:4f:2d:99:54:ad:cd:11:ee:07:52:
03:fe:a0:c0:b3:fb:a8:96:df:39:99:8f:54:c8:99:23:e5:da:
4f:8a:b4:7b:cd:e1:bb:70:24:39:e4:9f:80:be:96:45:c1:ab:
a7:96:21:b9:84:17:84:56:9f:98:eb:8c:46:bb:97:74:74:66:
ad:e8:3d:81:ac:c3:a5:51:b5:1a:c7:9e:f0:d9:5c:b7:48:ff:
7d:89:e4:32:1a:d0:98:13:46:7a:85:e7:d9:f9:fd:6a:cf:31:
ca:e9:08:5a:ea:58:ac:e1:7b:76:9a:af:0d:fc:a7:25:ea:7c:
b3:83:f3:cd:46:56:85:ea:c7:a3:8e:17:3d:7e:fb:50:d6:e3:
26:7d:e3:ca:bb:a5:98:e9:87:07:e5:02:d6:aa:03:19:58:0f:
c6:6d:92:08:e6:2b:05:a5:72:08:8c:8e:7e:a2:5e:23:68:79:
a7:99:85:2a:d0:47:43:cc:c9:0f:9a:16:64:93:98:54:82:e0:
e7:70:3e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:56 2024 by rpki-client on console-fra.rpki-client.org