Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/m-qO9GYdETYjeiJtlLZLkIVmocU.roa
File: m-qO9GYdETYjeiJtlLZLkIVmocU.roa (raw, json)
Hash identifier: MxJV790HzxIpsHp+Eqnol5xbFT+Pftei8ryVAynv4hY=
Subject key identifier: 9B:EA:8E:F4:66:1D:11:36:23:7A:22:6D:94:B6:4B:90:85:66:A1:C5
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 20FD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/m-qO9GYdETYjeiJtlLZLkIVmocU.roa
Signing time: Fri 25 Nov 2022 04:39:22 +0000
ROA not before: Fri 25 Nov 2022 04:39:22 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.160.0/20 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8445 (0x20fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:22 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9BEA8EF4661D1136237A226D94B64B908566A1C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:47:11:1e:f5:d0:0e:c9:d2:fb:aa:75:f8:4d:
c0:23:85:f4:6b:70:66:d3:8e:f5:38:89:d5:a1:67:
bc:3e:34:8f:7a:fb:b6:c3:69:9d:f6:98:1b:12:27:
86:20:e6:31:89:b1:59:d7:b7:1f:72:5a:5d:92:c9:
d5:55:8c:38:73:04:ac:ee:f7:9c:ab:bf:fc:2f:7e:
25:87:4c:23:11:79:2f:0a:c6:2d:ca:e2:4e:1e:da:
f3:d1:dd:e1:e4:94:0e:81:c4:16:b7:7a:7f:9c:33:
92:e2:26:10:9e:81:b8:22:9c:ff:72:47:1b:0e:c7:
00:02:a5:8b:e4:eb:10:c8:c2:02:42:15:39:88:30:
03:34:fa:f1:26:fc:06:24:42:bd:3f:6e:1e:42:8f:
19:68:ce:6c:e2:5f:47:2f:fb:2f:5e:37:28:11:c4:
1c:55:ba:67:c9:55:3c:91:5e:a6:db:b9:a6:62:a1:
d2:bd:70:6d:e9:8e:cc:22:21:92:5c:46:71:69:43:
36:0d:cf:72:ae:48:a8:74:23:db:45:ba:3c:88:b8:
78:c0:4e:01:cd:4d:ed:3e:86:4d:b2:d3:87:89:41:
3d:33:a6:87:21:8b:f8:13:d6:ab:4c:fb:41:9c:bd:
0e:80:22:12:b2:be:3f:50:18:79:54:1e:28:38:f8:
f2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:EA:8E:F4:66:1D:11:36:23:7A:22:6D:94:B6:4B:90:85:66:A1:C5
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/m-qO9GYdETYjeiJtlLZLkIVmocU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.160.0/20
Signature Algorithm: sha256WithRSAEncryption
94:2d:03:4f:d4:d9:1b:3c:97:1b:a2:e9:a5:2f:1f:87:51:be:
dd:1f:4f:96:63:7d:6f:12:b5:c6:c2:1e:66:dc:31:d9:49:ee:
47:d7:e1:20:7f:00:b4:47:cf:f3:ae:28:e8:4f:14:20:97:00:
29:49:52:0b:b1:8c:59:eb:dc:46:ed:1f:68:fb:30:06:64:bc:
96:ab:33:1c:b2:6c:e7:bf:39:1f:1b:c9:6d:67:5d:d6:27:87:
7e:1e:0e:82:d6:cd:23:23:f4:9d:c0:74:f3:75:f2:76:ae:bb:
ab:62:14:10:81:3d:1e:a2:25:01:ad:32:31:ee:21:53:de:65:
c3:06:1a:e3:a2:ef:15:c1:40:fe:15:94:e3:6a:d4:6d:04:c1:
bf:28:4e:95:14:8c:64:60:7e:7b:55:12:e7:74:56:3d:0d:4c:
de:16:3d:cc:7e:e9:e2:82:0f:1b:cd:f2:ea:31:8c:60:0d:13:
1f:7f:54:b2:0a:96:5e:e7:ff:cd:84:e9:fc:06:a9:e6:63:23:
7a:c4:65:5b:48:4f:70:6e:17:27:e9:08:49:d6:18:56:3d:e9:
91:60:9c:d1:0f:10:6f:34:0a:ad:08:27:e8:10:8a:c4:21:7c:
1a:ba:5d:1a:a1:a4:b0:70:7c:c3:0f:ff:fa:b7:0b:b9:03:03:
c4:39:42:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:39 2024 by rpki-client on console-ams.rpki-client.org