Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nsigH8ubDw80H7vwzwVqbw39s8c.roa
File: nsigH8ubDw80H7vwzwVqbw39s8c.roa (raw, json)
Hash identifier: BNakM1SCFpriZBWlF8qTcIqfjhbgdLwLEtbZHCLl9D4=
Subject key identifier: 9E:C8:A0:1F:CB:9B:0F:0F:34:1F:BB:F0:CF:05:6A:6F:0D:FD:B3:C7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nsigH8ubDw80H7vwzwVqbw39s8c.roa
Signing time: Thu 15 Sep 2022 02:46:22 +0000
ROA not before: Thu 15 Sep 2022 02:46:22 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 123.195.224.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:22 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9EC8A01FCB9B0F0F341FBBF0CF056A6F0DFDB3C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d6:0f:cb:9e:25:79:d3:cf:87:5b:22:25:2e:
e3:8a:08:81:5b:4b:bf:21:78:48:ed:12:43:5b:6e:
7c:c1:ee:49:e1:47:b3:72:bd:31:7e:00:c0:8d:d8:
19:b7:0f:53:8a:97:a8:e5:74:ef:f5:e8:fe:51:28:
df:77:ff:54:c9:9e:f2:98:64:d1:6b:72:68:df:ee:
ed:6c:39:76:3b:2f:0a:76:94:f1:48:44:33:cf:ed:
01:59:b9:2f:2e:07:6c:d1:3a:22:cf:67:19:b4:1b:
ec:da:64:c8:f1:05:a1:cf:cd:a3:1e:f9:d5:7b:2b:
b8:51:a0:50:bc:3b:3c:78:ab:2c:52:b2:b5:08:00:
47:e7:3a:7c:fe:08:12:79:f7:b0:d3:b9:6b:53:82:
a1:fa:7a:09:84:51:51:ab:4c:77:c1:9c:21:bc:e1:
98:b7:4b:10:69:c8:01:f9:6b:02:a2:b4:18:85:a6:
89:5a:3a:f5:6f:3f:3b:66:42:a1:c6:02:1f:9a:28:
07:51:c2:90:91:79:5f:29:2d:1f:ba:d7:98:9f:c5:
0d:6c:b5:0a:de:7c:64:85:50:0a:cb:ca:2f:35:62:
87:9c:76:bf:cd:ea:8c:4a:d1:4b:aa:df:1a:18:d0:
83:b5:5e:22:d8:ef:79:69:71:38:43:bf:b5:56:e8:
a1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C8:A0:1F:CB:9B:0F:0F:34:1F:BB:F0:CF:05:6A:6F:0D:FD:B3:C7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nsigH8ubDw80H7vwzwVqbw39s8c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.224.0/21
Signature Algorithm: sha256WithRSAEncryption
4b:04:b8:b3:16:ed:d4:5b:85:c0:4d:73:6d:ee:64:3a:86:4d:
35:dd:eb:f3:cf:e9:25:7d:06:5c:32:71:12:67:be:0e:09:cc:
cb:0a:be:84:03:26:cd:3d:e6:33:6b:29:6f:f4:b6:88:9a:ac:
d7:41:1b:01:47:43:bf:ee:10:96:33:a0:81:dc:b5:ca:90:ae:
b6:1d:81:13:cf:dd:d7:9a:4a:5f:cf:4a:38:ec:a2:01:54:bc:
bb:6c:2a:5c:d1:d9:c4:a9:d5:2b:f2:75:56:a1:c2:43:7a:ba:
03:0a:fc:1d:78:16:c1:2b:3e:21:bc:77:78:f8:72:af:c6:c4:
2f:8e:60:b6:29:c7:80:78:5d:54:00:62:9c:8b:39:12:d6:8f:
a1:2b:c7:96:56:58:57:07:72:94:86:3b:b2:9b:1e:26:d6:50:
96:8f:64:dc:7a:90:37:95:1c:f9:ae:e7:06:62:66:7e:1f:33:
9c:19:5f:e5:27:c9:3e:ce:d2:3f:4b:8f:0c:1f:15:4b:39:44:
a9:a0:d2:55:8b:21:8a:a2:38:2b:bb:54:9d:81:de:fb:23:05:
8a:11:c4:b9:dd:33:2c:16:d0:ce:56:a2:de:20:53:70:bd:7c:
36:41:f5:1a:78:fc:43:97:23:c5:ad:d9:f5:13:d9:c1:fd:31:
c5:d0:50:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-fra.rpki-client.org