Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lnEElxBg_h6t0jTS6fXd7EOJ0Fw.roa
File: lnEElxBg_h6t0jTS6fXd7EOJ0Fw.roa (raw, json)
Hash identifier: /cc8s6mwTPSpwxfkmaaB/z5/CIRg6ypDbIDCdyOprBQ=
Subject key identifier: 96:71:04:97:10:60:FE:1E:AD:D2:34:D2:E9:F5:DD:EC:43:89:D0:5C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2021
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lnEElxBg_h6t0jTS6fXd7EOJ0Fw.roa
Signing time: Fri 25 Nov 2022 04:38:21 +0000
ROA not before: Fri 25 Nov 2022 04:38:21 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.40.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8225 (0x2021)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:21 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=967104971060FE1EADD234D2E9F5DDEC4389D05C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:25:d3:ef:37:bc:72:3a:c7:ce:23:a6:c2:5f:
9e:2b:0b:d5:1a:93:3d:c7:60:ae:2f:e6:ca:86:7d:
f8:18:e0:47:9b:c9:df:3a:b8:6f:dd:15:fb:7e:cc:
00:7f:20:a5:ad:b4:4f:77:f9:f9:3c:11:0f:a5:ce:
01:1e:bd:46:ea:c9:d2:80:08:a4:b3:c4:d7:48:52:
56:77:fc:7b:94:7d:85:4b:38:5e:d9:8f:a4:e5:26:
20:70:67:7e:48:26:7b:d7:67:e4:7c:88:3e:fc:d1:
8e:86:7a:f4:0b:a5:f4:f3:7d:3e:7b:82:01:16:82:
be:76:84:c8:d1:da:5c:01:2b:32:72:b4:fe:9f:c6:
be:ce:be:88:a2:d0:35:1b:70:53:f5:f0:46:0c:5d:
d1:f9:d0:13:66:5a:94:95:09:6c:af:89:ac:80:c9:
5c:bb:a0:38:2e:e6:3e:10:e7:2d:e9:72:26:fb:b9:
71:de:55:1c:d5:6b:a5:e5:b9:22:7b:55:f4:7f:21:
67:a2:84:a8:a8:3a:97:39:0f:f4:a9:c3:e6:5c:12:
02:89:49:73:06:5c:cf:32:62:51:c4:2a:8a:f3:93:
38:da:0f:e4:6b:2b:05:ea:81:2c:1b:2a:0f:6f:f3:
45:34:47:f7:ee:0c:59:98:fb:5a:df:95:1a:3f:ec:
60:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:71:04:97:10:60:FE:1E:AD:D2:34:D2:E9:F5:DD:EC:43:89:D0:5C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lnEElxBg_h6t0jTS6fXd7EOJ0Fw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.40.0/21
Signature Algorithm: sha256WithRSAEncryption
3f:b2:9a:c5:77:1a:07:d0:bf:ed:1e:cd:33:81:8c:3f:81:cf:
ad:29:ef:cb:1a:54:a0:b7:dc:0c:d3:e2:36:dc:d2:84:df:af:
c1:a1:61:3e:cd:64:1f:31:d1:b7:26:ba:ed:9d:28:a6:b0:5e:
40:46:36:01:c6:85:b0:a5:2a:77:00:82:2e:fd:54:ee:7d:53:
4f:db:f2:18:9d:9b:38:14:12:2e:47:a6:54:70:b5:a6:9f:44:
3a:75:27:ba:6b:30:fb:7c:a2:f3:fe:4f:92:9d:8d:cf:96:86:
26:34:c6:ba:cb:b8:18:2e:f9:41:52:d1:98:9c:d4:09:f0:19:
63:6e:93:f9:01:8d:5c:2a:38:ee:7a:c1:b4:92:e2:24:b3:7c:
5e:af:2f:eb:7f:48:92:f2:a1:bf:2e:16:ad:ac:de:3d:b9:25:
4e:01:c3:af:e1:d7:cd:74:8e:45:06:6e:60:e3:ea:23:86:be:
f7:c4:34:fc:4c:04:5b:11:83:dc:85:3c:7e:3e:2b:00:14:2f:
00:3f:84:a1:20:a3:b8:54:db:1f:e6:16:03:ea:1f:7c:7a:0c:
d2:ec:60:73:d0:f6:66:c1:46:d8:c8:8a:0a:10:4b:28:bd:09:
78:79:47:c1:3b:89:bc:a3:46:4d:79:db:8f:af:85:cc:76:59:
9f:cc:5e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:57 2024 by rpki-client on console-fra.rpki-client.org