Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lw5zAJiZL1McVYq1JS6mSmjouB8.roa
File: lw5zAJiZL1McVYq1JS6mSmjouB8.roa (raw, json)
Hash identifier: masKVfNJqdAbM0exW4329vq4t6qdAoTVV2PSjdAzaYg=
Subject key identifier: 97:0E:73:00:98:99:2F:53:1C:55:8A:B5:25:2E:A6:4A:68:E8:B8:1F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 22B1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lw5zAJiZL1McVYq1JS6mSmjouB8.roa
Signing time: Fri 25 Nov 2022 04:41:32 +0000
ROA not before: Fri 25 Nov 2022 04:41:32 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 123.194.128.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8881 (0x22b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:32 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=970E730098992F531C558AB5252EA64A68E8B81F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e9:9b:b8:c1:64:ec:b5:cb:91:f7:23:a4:8f:
31:d9:e5:77:ae:26:92:f9:11:86:c2:e8:46:28:80:
73:46:6c:c9:95:9e:75:4e:b9:2d:7a:32:3b:08:28:
0f:c8:45:9a:04:ee:f4:0a:85:e4:1a:5c:0b:d3:92:
60:49:5e:1a:3c:3a:a3:e8:af:8b:92:a3:43:98:5f:
67:a8:71:db:eb:f1:3d:de:07:73:a9:b9:92:b7:10:
70:6d:c7:6a:79:fa:08:22:c4:50:4c:27:0a:95:16:
6a:c7:99:a3:d1:71:38:77:46:37:6e:03:29:24:0e:
c5:8d:45:00:f9:b9:ca:32:a7:51:95:21:94:f1:ba:
c8:e2:7b:81:14:18:19:bf:d9:31:d1:12:ad:51:59:
74:9d:8b:74:34:aa:f2:a9:1a:51:02:bd:33:bd:8f:
15:ee:6a:1d:da:1a:aa:b9:c6:ee:58:93:3b:2e:55:
af:c5:e1:12:3b:7e:cc:1e:6b:73:4e:40:ea:23:cd:
9f:29:fd:53:56:71:ac:06:0a:1e:92:41:70:d0:b2:
64:94:2a:b6:1c:b3:8b:3b:25:c7:e5:c5:e2:49:6d:
40:a4:7b:5e:0c:fc:16:ce:87:9d:ea:03:aa:c4:7e:
0a:0f:31:62:17:ae:dd:30:10:12:e7:8b:5c:5e:69:
4e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0E:73:00:98:99:2F:53:1C:55:8A:B5:25:2E:A6:4A:68:E8:B8:1F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lw5zAJiZL1McVYq1JS6mSmjouB8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.128.0/18
Signature Algorithm: sha256WithRSAEncryption
8c:b6:fb:73:91:42:ec:48:22:d4:96:90:4f:ad:92:f6:1a:99:
55:75:ba:f6:10:f1:2a:01:9e:c1:a0:34:2d:16:2a:94:7e:b3:
1a:46:c3:65:03:23:04:fe:fa:98:e1:28:7b:ef:eb:bc:b1:e6:
21:72:b5:0a:f0:12:e0:2b:9e:bc:44:e7:e3:80:7a:3a:40:08:
1b:92:4a:bd:42:72:df:00:a9:22:b5:00:70:0a:2d:a7:2b:00:
ca:db:49:d1:32:b6:d6:ac:ff:e7:17:55:bf:34:25:b9:cb:e2:
af:79:55:d9:cf:16:70:06:90:da:dc:18:a7:ff:9f:d5:6a:90:
91:7c:5a:3b:b7:c3:be:7a:34:b3:39:83:eb:f2:89:8b:e6:02:
20:94:8f:1a:2d:a3:2a:38:14:21:fa:8c:57:dd:27:90:37:1a:
06:68:4a:e1:bb:24:ed:b0:1b:96:c0:1a:fa:ae:80:3f:17:65:
ce:04:11:70:e4:66:91:3a:26:94:95:20:7f:01:1d:7c:ad:36:
92:87:2b:f9:ca:d0:59:96:2c:4f:b8:6f:65:bb:84:0a:f3:54:
66:f1:b4:b8:13:51:11:54:19:a4:bc:11:e9:fe:13:ce:60:44:
c0:80:79:db:a6:5c:32:28:90:5b:ce:88:1a:e7:e4:1e:f0:5b:
ab:48:81:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:39 2024 by rpki-client on console-ams.rpki-client.org