Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/n05S1Cn8pU6m_UcaUi0d20YjVl4.roa
File: n05S1Cn8pU6m_UcaUi0d20YjVl4.roa (raw, json)
Hash identifier: fyb75laEjwlXl0E3J8nZdyT1e1z2Xpksk1Vk8JNg9Lo=
Subject key identifier: 9F:4E:52:D4:29:FC:A5:4E:A6:FD:47:1A:52:2D:1D:DB:46:23:56:5E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 20DB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/n05S1Cn8pU6m_UcaUi0d20YjVl4.roa
Signing time: Fri 25 Nov 2022 04:39:12 +0000
ROA not before: Fri 25 Nov 2022 04:39:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.168.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8411 (0x20db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:12 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9F4E52D429FCA54EA6FD471A522D1DDB4623565E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3c:b5:06:d6:0d:85:ba:16:2d:99:34:52:0c:
e4:11:15:83:a8:fa:da:61:a0:46:e4:71:ab:2a:74:
91:63:02:d1:df:a2:43:3c:be:29:19:a5:21:6a:77:
f7:7f:84:5a:f3:17:7a:c0:be:19:60:90:de:00:36:
35:47:e7:7d:cb:aa:fd:62:65:35:5a:7a:2a:f6:27:
75:1b:7f:c2:1d:07:85:12:87:6a:6c:79:f8:8b:80:
a9:b6:6f:11:99:74:33:94:b6:9f:40:c1:3e:39:e6:
60:ab:0d:8a:cf:e7:7b:84:bb:85:b4:47:c8:fd:62:
aa:fe:2d:72:98:39:dc:5d:30:ed:99:ed:24:e2:3b:
c5:64:9a:9a:22:41:e1:1d:6b:3a:11:33:24:8d:ce:
75:78:56:ab:df:e0:b9:58:92:4f:f5:48:7f:1f:8f:
4c:10:39:74:c2:7f:48:ad:6c:b4:2c:7e:ee:de:7f:
0c:2a:91:31:f9:67:45:f8:01:41:ac:37:da:4d:9c:
5f:ed:5f:5b:f5:a0:3d:e4:c8:49:d3:fb:cb:db:38:
f0:7b:3f:d8:25:ad:82:6e:56:4a:f4:31:40:3c:78:
ba:83:c6:bf:cb:55:af:23:cb:62:fc:5e:34:fa:be:
a2:7c:18:73:be:60:18:20:8e:88:3a:41:7b:89:22:
8f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4E:52:D4:29:FC:A5:4E:A6:FD:47:1A:52:2D:1D:DB:46:23:56:5E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/n05S1Cn8pU6m_UcaUi0d20YjVl4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.168.0/21
Signature Algorithm: sha256WithRSAEncryption
61:c7:56:33:56:f7:2a:d9:d2:43:ba:8e:73:d4:27:9d:28:70:
eb:64:36:de:b9:46:95:b7:06:ec:4d:dc:c9:22:95:e0:8d:75:
eb:eb:c1:60:f8:fc:92:c7:0d:1c:52:6b:4c:ab:25:1a:a8:82:
cf:4b:28:c3:15:aa:ad:b5:f6:27:bf:83:60:75:5e:02:8f:a1:
8c:11:08:3b:7a:00:99:7d:cb:ce:fc:68:36:46:15:fa:d2:9d:
9e:df:e0:88:8f:e0:f2:06:95:2b:76:f9:ad:57:e3:42:52:61:
e7:1d:b1:7d:1c:6c:86:4a:29:68:d5:f8:91:ca:ea:18:2a:a2:
05:ad:01:93:ee:d0:07:33:4a:59:df:66:e3:dc:a3:31:40:63:
b3:32:ab:3b:cb:f4:57:3a:ce:ec:1b:ec:b0:a7:4b:e8:82:bd:
e8:db:ef:0a:c5:00:a9:37:5e:72:68:ee:41:3a:ce:72:7e:67:
51:27:77:62:82:fc:d1:a9:43:1d:a1:c8:10:e1:59:ba:78:26:
0a:86:68:cd:fc:ce:89:6f:f4:ea:1f:01:6e:34:30:82:01:e6:
dd:11:c7:e9:b1:07:61:cf:4d:d6:ae:57:ac:04:7f:84:5d:46:
a3:d3:dc:b5:23:b0:74:1d:4d:4c:7d:bd:9a:06:88:a4:e5:5f:
c6:c7:5d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:39 2024 by rpki-client on console-ams.rpki-client.org