Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kny22NGkJa_bIXNM15FTRKA9_Qw.roa
File: kny22NGkJa_bIXNM15FTRKA9_Qw.roa (raw, json)
Hash identifier: Lov90Q+HAxweTJVNo0BLx47+uAmNBFCYqFWwEzJWlCM=
Subject key identifier: 92:7C:B6:D8:D1:A4:25:AF:DB:21:73:4C:D7:91:53:44:A0:3D:FD:0C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1535
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kny22NGkJa_bIXNM15FTRKA9_Qw.roa
Signing time: Sun 07 Feb 2021 12:03:24 +0000
ROA not before: Sun 07 Feb 2021 12:03:24 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.237.0/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5429 (0x1535)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:03:24 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=927CB6D8D1A425AFDB21734CD7915344A03DFD0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:77:f1:99:a6:91:5c:3d:69:5e:d4:48:fc:92:
af:8c:0f:7a:bf:39:29:db:77:b4:b8:8c:91:4f:c0:
f6:ad:14:74:8d:ad:b4:bd:8b:3c:70:95:de:c3:e6:
90:fe:cd:d3:65:cc:c4:b6:97:bb:97:0e:00:88:87:
b5:f2:32:5a:65:a0:c6:46:e6:bf:7b:c1:24:de:a8:
df:de:89:67:1d:0f:ce:45:17:ae:2d:bf:fd:a9:72:
0e:d6:1a:07:e0:6b:55:14:9f:14:b8:1d:7d:f9:d2:
6e:66:4f:9d:4b:11:6c:a8:75:a9:06:51:10:a7:15:
2a:6e:ea:b4:88:b2:7b:07:1b:aa:95:4e:e0:26:a7:
63:36:5d:d8:c4:84:66:67:3e:25:4f:5a:d2:ff:01:
af:43:e0:6d:aa:b6:30:13:96:58:38:7e:e6:56:26:
79:7f:68:41:60:ab:60:4c:50:84:56:40:18:4e:ea:
27:08:92:de:1b:96:a4:d2:e6:a2:b4:05:a8:5b:4c:
01:5d:05:c1:0c:ac:16:d6:79:e2:bb:10:09:da:21:
ce:36:4a:a7:6c:e1:45:2f:9f:b9:af:db:24:c6:b1:
91:de:f4:15:de:dc:09:bc:78:4c:02:4d:55:78:59:
56:98:0e:65:5d:84:3c:c4:27:af:5d:73:ef:8c:2b:
1e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:7C:B6:D8:D1:A4:25:AF:DB:21:73:4C:D7:91:53:44:A0:3D:FD:0C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kny22NGkJa_bIXNM15FTRKA9_Qw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.237.0/25
Signature Algorithm: sha256WithRSAEncryption
27:4a:c4:28:3c:e7:51:23:50:33:5b:b2:c8:3c:2d:61:68:a1:
a0:73:75:d5:90:0a:73:a3:2e:7f:f2:6a:6c:51:06:4b:7f:bb:
bb:e5:65:a9:cd:78:f6:4f:db:94:11:d7:32:90:00:72:52:9f:
99:c2:c6:4b:c7:d9:67:b1:a8:8d:ce:af:ed:2d:a9:02:d7:a8:
b6:17:fa:ba:06:ed:a8:3a:d8:61:93:7f:2c:e0:df:9f:eb:04:
50:02:77:95:81:df:45:41:82:de:a5:19:24:03:fd:9a:fe:e7:
13:f4:c7:8e:67:b2:82:28:3f:bb:f2:9e:bc:03:e6:32:b9:a1:
ad:3f:44:ca:a4:bb:dd:53:6e:56:ee:0b:d7:d4:f2:a8:76:67:
63:bd:dc:3f:3f:52:59:3b:4d:62:5f:51:97:f5:52:1d:3b:b9:
0b:d8:3c:78:7f:93:c2:82:1d:3a:19:6b:f9:2d:6a:93:24:ea:
60:0e:cc:83:5a:60:9e:da:a2:32:e2:95:51:f4:f5:42:8d:1e:
14:51:33:c8:2c:1e:36:ef:65:c4:33:52:fa:c5:20:b1:17:05:
53:bf:a9:6d:40:2f:b1:14:6f:91:bb:f2:48:d2:f8:eb:44:e2:
05:a4:2b:66:b6:3e:41:3e:ae:1d:b7:13:50:13:c8:39:99:08:
4a:d7:b2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:57 2024 by rpki-client on console-fra.rpki-client.org