Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hGn9-Bb_Xkm6bdtb1NIsRKewA1Q.roa
File: hGn9-Bb_Xkm6bdtb1NIsRKewA1Q.roa (raw, json)
Hash identifier: 28F3tyCPsMikVIMWKcJGv4KMqeMvsVqlEwcFyQTAwNY=
Subject key identifier: 84:69:FD:F8:16:FF:5E:49:BA:6D:DB:5B:D4:D2:2C:44:A7:B0:03:54
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1B24
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hGn9-Bb_Xkm6bdtb1NIsRKewA1Q.roa
Signing time: Wed 29 Sep 2021 02:46:13 +0000
ROA not before: Wed 29 Sep 2021 02:46:13 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.193.100.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6948 (0x1b24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:13 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=8469FDF816FF5E49BA6DDB5BD4D22C44A7B00354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c2:6d:44:c3:b6:bf:5b:15:1d:e4:86:1c:1c:
f0:81:f9:de:87:39:56:c4:41:e1:6a:11:b1:00:4d:
61:be:e1:6d:ab:a2:29:13:05:15:7e:ef:43:91:91:
4e:36:43:91:25:34:bd:9c:73:07:0e:1e:0d:07:f4:
3d:6a:2c:12:5e:e4:cc:07:25:b4:c6:b5:84:99:8e:
c9:dd:07:93:32:6e:31:5c:df:c8:70:15:4d:4b:39:
e8:57:aa:89:ee:23:3c:c7:5a:2d:c6:07:69:bd:d8:
7b:4a:4b:ee:dc:b7:d3:36:e0:71:bc:30:20:cf:4a:
b8:bb:ff:84:a1:9a:ea:2b:ba:70:f3:e3:de:e2:d8:
ef:80:ad:7b:ac:6a:39:bf:50:f4:bd:07:15:e5:1e:
cd:7e:0f:22:60:e1:fd:7d:59:0b:8a:42:b5:80:12:
f8:89:dc:7e:0a:b4:fc:f7:76:eb:3d:d5:f1:d6:a0:
bb:97:1f:1a:2c:3a:45:e6:53:f9:40:ec:96:72:b0:
f2:39:bd:5c:e1:3f:51:7d:f4:ae:06:5b:be:9d:73:
4c:d9:f8:ff:48:44:e8:90:29:63:9f:24:09:20:02:
d9:84:0c:d3:8d:ab:e5:c3:f2:6d:a2:e4:af:de:11:
e0:14:1b:e6:e4:51:1c:ae:b1:c2:48:26:fc:0c:2e:
68:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:69:FD:F8:16:FF:5E:49:BA:6D:DB:5B:D4:D2:2C:44:A7:B0:03:54
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hGn9-Bb_Xkm6bdtb1NIsRKewA1Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.100.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:6b:b2:42:ac:70:6b:be:82:e0:85:8e:c0:a7:57:5e:92:bc:
08:cd:94:89:12:73:7e:5b:d5:a1:11:ca:6d:a0:09:07:24:15:
ac:d5:b8:76:b3:9d:c5:b3:5d:17:c8:67:01:d7:18:70:bc:b9:
78:d8:65:12:2d:33:06:60:f1:a4:08:89:21:98:91:f9:c3:29:
57:d9:1d:2c:48:13:c3:db:1c:82:12:5d:b2:6d:48:6e:47:d9:
2a:1d:be:41:fc:f0:85:27:a8:3f:a2:6c:45:23:cd:b2:a3:03:
b2:c1:fb:b1:91:c6:93:26:1e:01:60:ef:16:f7:4c:bd:4e:a4:
d2:6d:74:e7:3a:67:54:f5:85:e4:de:0c:4d:f7:6f:82:cc:46:
c3:c9:7e:f3:b2:e1:9e:15:6c:39:89:64:24:8b:09:b9:9b:71:
0e:26:55:b7:24:7a:93:42:12:fd:1e:bf:c2:dc:d0:16:17:2c:
fb:ac:10:4a:0a:b4:21:ac:fa:f4:4b:18:07:c5:65:bf:0f:3c:
be:e4:5c:03:99:ee:0f:8b:31:83:75:4f:1a:f1:cd:16:9c:96:
5f:00:be:3d:09:9a:08:d9:a5:5d:f2:31:cb:84:7c:f0:f0:8d:
19:b2:b3:3a:6b:31:a5:7a:45:30:c5:06:d8:b7:76:28:1c:5d:
3b:f6:04:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:56 2024 by rpki-client on console-fra.rpki-client.org