Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/o49naG5YrZXK4mN10yBCJ6xnJg0.roa
File: o49naG5YrZXK4mN10yBCJ6xnJg0.roa (raw, json)
Hash identifier: dHLgT44N6PtHigUOZfqyh3Kcwnovi4AInanloG8GefQ=
Subject key identifier: A3:8F:67:68:6E:58:AD:95:CA:E2:63:75:D3:20:42:27:AC:67:26:0D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2012
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/o49naG5YrZXK4mN10yBCJ6xnJg0.roa
Signing time: Fri 25 Nov 2022 04:38:17 +0000
ROA not before: Fri 25 Nov 2022 04:38:17 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.237.0/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8210 (0x2012)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:17 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A38F67686E58AD95CAE26375D3204227AC67260D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:bc:19:dc:dc:a7:84:2f:d5:9f:df:f8:e1:05:
7c:ee:52:27:8a:31:de:cd:c6:47:58:d8:fd:db:cd:
40:41:a4:34:19:7b:e4:e6:55:b9:69:a9:d3:53:f7:
5a:52:81:61:92:ea:ec:ec:a3:b3:d2:75:05:ab:d9:
38:67:73:d5:aa:8b:cc:34:1d:c3:26:f1:8c:3b:a1:
ef:f6:5c:69:c8:fb:76:fc:bf:b0:76:31:fa:80:d7:
14:33:d2:9d:79:ec:6d:d8:f4:82:03:d0:e0:58:b2:
3a:ab:b9:a3:30:ad:07:88:9c:76:d0:46:2d:9a:a8:
31:c8:db:3f:e5:b1:f0:a6:0a:f0:d7:a1:7c:7f:c9:
40:6b:37:e4:22:98:33:24:41:a4:7c:d8:4b:e8:09:
de:cb:90:3f:27:e1:7c:0f:b6:2b:b1:27:b7:03:83:
dc:54:33:52:99:33:3e:d0:d1:0f:66:4e:c9:29:ba:
91:66:bb:18:6e:d0:78:18:94:b8:47:ef:90:11:70:
43:56:46:15:40:50:8d:55:cf:bb:0f:09:a2:1d:a5:
7b:62:12:16:d4:6e:80:de:47:55:c1:a0:fc:27:3e:
e6:3b:dd:47:ea:0f:09:43:73:9b:6c:6f:1c:e6:fd:
b9:fa:d6:9f:a1:ad:0a:4b:ae:f8:96:04:51:4d:91:
af:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8F:67:68:6E:58:AD:95:CA:E2:63:75:D3:20:42:27:AC:67:26:0D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/o49naG5YrZXK4mN10yBCJ6xnJg0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.237.0/25
Signature Algorithm: sha256WithRSAEncryption
92:15:9f:13:a9:03:a7:4d:58:81:b7:a0:63:98:15:f0:27:4a:
3a:ab:b9:a1:73:83:bc:de:21:8c:bb:40:ab:6b:f9:95:69:22:
44:59:57:e5:4f:7d:17:80:71:fc:3e:c1:c2:32:6f:e6:e0:5d:
41:b0:ea:16:4f:f4:dd:fc:1b:45:67:5b:2d:d4:c9:36:2f:db:
4b:87:7b:85:f0:1f:01:3b:69:f6:a3:3e:57:76:f7:34:bb:d9:
c0:ea:cd:88:ad:13:6f:03:0a:82:92:8a:df:33:7d:08:94:95:
79:84:5e:e3:8e:04:7f:3a:68:77:9d:60:37:7e:09:1f:50:7e:
c9:5e:f6:14:f4:bd:15:58:79:7c:ec:32:78:85:9c:06:ef:1b:
e2:a4:bd:be:2e:32:fe:45:5e:5b:17:81:4a:17:eb:61:5a:fc:
cb:c8:6a:12:62:41:ed:c2:82:08:ba:d6:3a:0e:ab:39:9d:16:
ba:62:93:0b:3d:01:47:f7:9a:5f:67:25:42:88:68:28:96:79:
e8:73:4c:3c:50:93:19:9f:eb:f2:db:98:b0:02:92:2b:eb:f8:
06:d2:3b:ff:2d:97:27:28:9a:58:30:29:05:63:12:c3:c1:e5:
fc:bb:b5:11:2e:41:85:b9:df:3e:6d:68:53:0e:2b:a8:9e:0f:
b8:13:3c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-fra.rpki-client.org