Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lo9UT2uOUdJwhK7B3jgBeofymfY.roa
File: lo9UT2uOUdJwhK7B3jgBeofymfY.roa (raw, json)
Hash identifier: wuuiy1e7IYwLSCTMDWNlMseuOZK35SaBFo9bUnAzW9k=
Subject key identifier: 96:8F:54:4F:6B:8E:51:D2:70:84:AE:C1:DE:38:01:7A:87:F2:99:F6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lo9UT2uOUdJwhK7B3jgBeofymfY.roa
Signing time: Thu 15 Sep 2022 02:53:25 +0000
ROA not before: Thu 15 Sep 2022 02:53:25 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.80.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:25 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=968F544F6B8E51D27084AEC1DE38017A87F299F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:62:28:6b:b4:19:bf:0d:95:b0:da:34:63:8d:
53:d3:26:ac:a8:94:23:61:06:7e:6b:5e:c8:d3:18:
23:b5:34:58:31:2b:d2:54:f3:4b:ed:6c:ae:f0:d1:
e6:a3:df:6f:e5:1b:9a:2d:c5:bf:52:21:6c:ab:10:
59:a0:ce:b3:b6:2b:8e:ed:5b:f3:69:4c:ec:4f:40:
dd:67:a3:b1:31:f7:42:2b:49:42:4c:a0:da:86:fb:
6b:a1:55:15:23:e1:68:f1:cb:fa:91:6a:1b:5f:ae:
72:ed:22:7c:3d:6c:5b:a9:0e:f3:10:f2:fc:17:ff:
e0:56:c2:db:a8:45:f7:3d:4a:3d:14:c0:5f:b8:22:
2a:a4:e3:39:cd:f6:90:16:cd:78:4f:8f:cb:95:6f:
8e:e5:5f:8e:8e:6d:13:19:2a:53:14:9d:0a:5f:30:
dc:fd:79:31:95:01:49:f7:e8:a6:5c:70:66:fe:be:
ed:a1:81:0f:71:6b:af:2b:75:ba:9a:0f:ea:71:75:
26:c1:cd:40:bc:56:6c:c1:f8:68:b3:4d:7c:15:1c:
ed:80:42:c0:5e:c1:5a:85:9a:70:70:7d:4c:fe:b8:
55:eb:57:98:d9:52:1a:4d:90:ba:46:c5:49:b0:a8:
f0:26:29:40:25:64:40:4a:04:62:91:55:65:f1:6b:
44:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8F:54:4F:6B:8E:51:D2:70:84:AE:C1:DE:38:01:7A:87:F2:99:F6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lo9UT2uOUdJwhK7B3jgBeofymfY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.80.0/21
Signature Algorithm: sha256WithRSAEncryption
6d:9e:6a:f7:3a:90:00:89:d4:8c:97:05:64:ba:aa:b6:02:8e:
bf:60:e5:ee:14:4d:0a:d7:76:d3:79:2d:87:c6:d7:c6:2b:fb:
4c:35:66:b2:7b:8a:82:81:1d:e3:cf:51:c7:44:1d:4a:fb:fd:
d5:55:f1:27:39:0f:75:a4:28:ab:d4:82:2b:b9:14:6a:f3:47:
6d:bf:13:63:09:c7:14:42:39:70:9a:ac:a1:1a:76:b6:7d:cb:
a9:a8:28:7b:90:7b:8e:9d:b3:f8:00:c7:7f:6c:ac:dd:b3:f1:
2d:de:11:24:88:57:ed:1a:18:99:cf:31:3f:c4:5e:f4:21:77:
13:28:79:41:bf:4f:6e:94:f2:de:b8:74:64:13:dc:77:18:f5:
2b:05:46:dd:2e:56:2a:b6:07:b1:63:9d:0e:20:9d:bc:94:4d:
94:e9:60:94:f4:c1:89:e7:2a:d5:79:a8:86:da:29:24:72:ba:
f0:65:3e:9b:de:42:f7:ec:e4:c4:64:a3:96:77:da:8e:30:33:
d7:1d:34:45:2b:0f:76:0c:8b:72:37:df:b7:d6:10:d7:b6:ca:
b0:fc:81:80:0e:48:2c:b6:38:34:f4:9d:8c:ed:4c:11:49:33:
66:37:86:86:d7:8d:3f:61:8a:20:a2:65:1a:a4:57:5e:2b:73:
04:09:66:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:39 2024 by rpki-client on console-ams.rpki-client.org