Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oT2R4hPFDaot-9foNIQrn65luvk.roa
File: oT2R4hPFDaot-9foNIQrn65luvk.roa (raw, json)
Hash identifier: SOrXTghdNGpwvyPEtbpna8W0EP6p429GwEQGEYxuGlg=
Subject key identifier: A1:3D:91:E2:13:C5:0D:AA:2D:FB:D7:E8:34:84:2B:9F:AE:65:BA:F9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oT2R4hPFDaot-9foNIQrn65luvk.roa
Signing time: Thu 15 Sep 2022 02:52:52 +0000
ROA not before: Thu 15 Sep 2022 02:52:52 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 123.195.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:52 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A13D91E213C50DAA2DFBD7E834842B9FAE65BAF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:45:f9:98:86:96:d9:89:1c:bf:db:a0:1b:05:
d2:3c:d0:2e:2a:42:7d:6a:9e:ef:64:a5:fc:68:eb:
1a:46:3a:9b:37:e5:63:fc:6f:04:5f:1c:e3:08:d5:
81:49:76:53:41:7d:8c:49:f4:0c:a5:96:8a:4b:6d:
c5:91:7f:0e:ab:af:9a:c5:82:7d:8a:2c:37:68:fd:
88:5e:1a:3e:f6:8f:b5:3b:c0:a4:39:70:58:52:5d:
71:c9:9e:d9:c9:65:9d:a1:9c:c7:1c:e3:85:01:60:
6d:0a:81:90:3f:17:51:7d:26:58:d6:d5:7f:dc:e2:
1b:cc:b7:5d:d8:fd:8a:3f:57:04:4c:33:c8:e8:5e:
bc:c7:50:73:ce:80:eb:b8:34:cf:09:75:00:6e:0c:
80:46:f3:84:8e:5c:a6:ca:0e:eb:a8:1f:88:22:56:
25:a7:de:84:ad:ea:b2:1e:60:66:36:6b:10:5d:87:
89:16:e1:69:48:88:c2:21:c2:c9:fa:df:b2:5c:6d:
ca:88:a5:cc:4a:7c:f2:8f:a3:a3:b9:d4:17:43:c8:
93:cb:e6:ec:b4:0f:33:75:42:44:4e:ef:80:25:06:
6e:51:ae:fb:35:b2:2f:59:65:39:2e:be:3f:b0:3d:
d7:4d:f3:6d:b8:63:88:3d:92:22:a7:b7:82:8c:88:
7c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3D:91:E2:13:C5:0D:AA:2D:FB:D7:E8:34:84:2B:9F:AE:65:BA:F9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oT2R4hPFDaot-9foNIQrn65luvk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.237.0/24
Signature Algorithm: sha256WithRSAEncryption
af:82:23:a7:a4:09:81:91:30:70:f4:7e:14:99:92:9c:cb:eb:
e1:5c:ee:1f:f3:75:fa:d5:84:9c:53:ae:c8:a8:0f:9e:c2:e5:
01:39:89:07:9e:e4:a1:36:ba:90:05:36:18:39:10:0b:6c:21:
2b:64:76:69:06:e6:11:0f:d2:3a:78:a9:de:3b:05:c7:07:65:
50:5e:6c:de:f9:41:ba:bf:b0:92:d3:52:3b:c8:dc:07:84:b1:
83:25:4c:cb:d9:8c:93:60:3c:15:6f:f6:68:c8:e2:d1:8d:33:
96:e9:0c:70:e7:6a:f4:a7:58:83:68:81:53:57:bc:a0:f1:c8:
d0:6e:ae:bd:3d:39:da:24:b1:01:c5:e7:1c:dc:7b:fe:bd:a6:
bc:22:58:82:fa:3b:1e:aa:4e:a7:d7:82:7f:93:cb:45:f6:a1:
ab:c6:a3:a7:0a:90:06:94:fa:8a:d2:5e:02:72:2b:58:ce:3c:
96:55:72:2d:49:a3:83:9b:be:7d:b4:9f:43:89:1d:9f:0e:ed:
8a:15:62:36:d3:79:85:62:66:04:55:d7:43:86:36:8e:a4:f1:
1c:31:57:f6:30:f9:aa:66:31:be:1c:f2:2b:4b:c1:8d:45:33:
63:a2:37:50:5e:74:84:6e:50:82:82:7a:4c:db:fd:ef:e5:eb:
c4:3b:78:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-fra.rpki-client.org