Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hKMKI261I5Vh_jjnDffRh7mvs5U.roa
File: hKMKI261I5Vh_jjnDffRh7mvs5U.roa (raw, json)
Hash identifier: IUe+CobuYqj2oltAxi4Wwd+xY2Nn9aZdu41Z1hFNlQA=
Subject key identifier: 84:A3:0A:23:6E:B5:23:95:61:FE:38:E7:0D:F7:D1:87:B9:AF:B3:95
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1E8F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hKMKI261I5Vh_jjnDffRh7mvs5U.roa
Signing time: Wed 04 May 2022 06:46:49 +0000
ROA not before: Wed 04 May 2022 06:46:49 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 123.193.160.0/19 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7823 (0x1e8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: May 4 06:46:49 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=84A30A236EB5239561FE38E70DF7D187B9AFB395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fb:f0:cd:38:c1:5c:31:45:03:7a:a4:ee:93:
5e:70:93:ce:d1:a2:e8:63:bf:18:33:01:69:52:6f:
b7:56:0a:2e:6c:37:8a:9f:a2:c7:72:e4:ff:30:02:
4e:f2:5b:d0:28:9e:37:5e:4f:67:05:66:f6:22:6a:
80:9e:4b:40:c0:2f:84:8d:0a:84:fd:bd:dd:84:45:
a4:37:bf:87:dd:7e:0a:df:a7:67:e7:2b:dd:4e:71:
14:04:96:b1:57:81:6d:f9:42:89:3d:00:ce:84:60:
e5:c6:54:3b:67:18:82:4b:31:31:0b:ef:48:8e:f0:
9d:e4:ae:a6:28:5e:75:0d:f3:f4:2a:a4:0d:fa:f4:
ad:6c:6e:67:78:81:e5:85:cd:4c:f8:e4:31:94:97:
3a:d6:be:62:a9:d3:db:b1:1d:9f:ce:b0:41:aa:ea:
d1:7e:e7:7a:e7:82:66:09:b3:b6:c3:f3:86:dd:82:
23:cb:e9:79:e0:2d:0f:0b:0d:89:67:9f:bd:f7:e7:
2e:9d:24:a3:4d:96:e5:25:22:28:1a:9a:aa:94:2c:
71:66:16:36:4e:cd:a7:e3:fd:ac:fc:b1:60:c7:5c:
cb:2d:72:30:3e:b2:5e:95:5a:46:72:bd:8e:ed:d1:
d6:7b:0d:80:4c:ea:11:07:7f:0e:10:c1:dd:b1:14:
c0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A3:0A:23:6E:B5:23:95:61:FE:38:E7:0D:F7:D1:87:B9:AF:B3:95
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hKMKI261I5Vh_jjnDffRh7mvs5U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.160.0/19
Signature Algorithm: sha256WithRSAEncryption
3f:67:1f:ab:35:8e:50:7e:31:df:09:59:00:2a:55:d5:23:fe:
34:96:b0:aa:85:10:83:4a:42:49:2e:88:ec:ca:ec:f5:3e:c9:
2b:bc:4e:e7:92:63:b9:2d:05:f5:fe:d3:e1:57:ec:55:21:ad:
8c:8c:cb:f7:ee:5c:13:39:4f:d0:85:9c:60:ed:6d:55:f3:91:
07:8d:18:ce:51:f5:15:64:79:b3:39:2c:33:c5:8c:9c:60:e5:
d2:3e:14:9c:6f:c9:ba:18:67:55:c5:02:fe:b1:bb:fd:0e:19:
ec:48:ed:ac:9e:a2:5f:b8:92:ca:54:bb:90:32:89:b7:a3:c1:
23:34:dd:4f:16:e4:b0:9f:04:85:69:2a:d3:76:2a:3d:a1:dd:
e3:31:63:80:1f:90:c0:7d:91:8d:a4:26:6e:33:21:16:0c:23:
c7:6d:e8:39:77:b3:1d:e3:f0:93:fa:b1:bd:5b:8e:22:58:cd:
df:4f:8c:5c:4c:a0:85:1a:7b:d3:b5:ac:ce:42:31:b0:c5:b1:
bc:49:e3:8b:72:e9:a7:1d:07:69:5a:d1:a7:dc:bf:7d:e4:8a:
24:68:71:6a:0c:9b:d0:15:b4:0e:fb:2d:25:2f:e5:08:39:fa:
ae:4d:2d:3f:95:77:78:93:8e:08:85:74:aa:79:5f:32:f4:78:
ad:e9:ac:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:37 2024 by rpki-client on console-ams.rpki-client.org