Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/p88WgtLmYTXbgGOS0q-Jn7baTDw.roa
File: p88WgtLmYTXbgGOS0q-Jn7baTDw.roa (raw, json)
Hash identifier: hKhr6ucx1RLncIbNA1Vpro3Q6Lszws0fxJkAuB5TeDk=
Subject key identifier: A7:CF:16:82:D2:E6:61:35:DB:80:63:92:D2:AF:89:9F:B6:DA:4C:3C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 150F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/p88WgtLmYTXbgGOS0q-Jn7baTDw.roa
Signing time: Sun 07 Feb 2021 12:02:43 +0000
ROA not before: Sun 07 Feb 2021 12:02:43 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.193.56.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5391 (0x150f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:02:43 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A7CF1682D2E66135DB806392D2AF899FB6DA4C3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ba:69:0a:dd:3b:5a:a3:f7:f8:7d:ca:57:48:
4e:a0:e6:ee:76:3d:04:dd:af:86:a6:f6:ea:49:e1:
a6:db:6f:a8:bd:de:93:27:1f:d8:9e:74:86:d6:fb:
54:cf:86:47:66:31:f1:81:56:14:4f:ec:3d:bd:b1:
44:43:31:d8:bf:03:f8:62:61:66:9b:36:d0:84:b8:
7e:65:e8:51:13:a1:cf:1a:d0:7e:4f:6c:fc:aa:a6:
fe:2f:28:14:2e:37:d2:7c:df:4f:f1:cf:3d:4d:ff:
48:cc:38:b6:0a:72:21:a4:2b:e4:12:74:aa:1a:62:
ba:4f:bb:55:f2:3f:8e:9a:77:0b:61:0e:f5:a5:10:
55:23:56:91:5b:11:53:0c:05:ed:f4:82:67:a7:f9:
95:4c:1e:a6:f8:29:1e:cc:e2:e3:03:59:1e:24:f6:
7f:80:a9:a1:73:a4:5b:9b:a4:e7:ba:dc:93:5d:b6:
a1:ec:89:d5:fa:c1:a2:0b:4e:ad:24:bd:41:52:ef:
bd:43:75:23:cb:61:8f:62:ba:da:b3:d1:c7:89:bc:
bb:e9:32:9e:0f:b9:74:6f:0e:c8:d3:0b:52:d4:5d:
39:22:9b:78:07:61:f7:8a:f4:ae:ce:83:8a:16:46:
f5:a6:42:9a:54:e9:55:23:cb:8a:d3:85:bf:bd:a0:
c4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:CF:16:82:D2:E6:61:35:DB:80:63:92:D2:AF:89:9F:B6:DA:4C:3C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/p88WgtLmYTXbgGOS0q-Jn7baTDw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.56.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:63:ab:be:c9:37:dc:3a:6a:c2:48:f8:f7:47:fb:65:ef:19:
44:9b:aa:40:dc:a3:75:66:59:a0:20:0d:db:64:b8:06:15:fb:
b5:de:e8:b2:90:61:05:7f:09:c6:67:db:d9:99:fc:8a:45:f5:
16:8d:8e:c4:52:cb:be:0f:d9:b4:07:41:ad:07:b3:81:6c:6f:
e3:17:3c:db:e0:cb:b0:d8:c1:d2:e0:1e:6f:b3:a5:4d:1c:fb:
51:e6:63:8d:0c:9e:f5:f7:a6:43:0e:c9:a9:2e:0c:85:d5:9f:
dc:df:d4:54:7b:ba:4e:f3:45:8f:2c:f6:09:21:5b:08:5a:05:
2f:5e:20:e5:1f:68:a5:ed:be:e2:0a:eb:d8:e2:fe:ad:48:4b:
2c:fa:b8:58:26:11:41:65:56:10:f2:bf:56:b8:c8:c2:ae:f4:
6a:95:df:8f:87:db:cd:7b:ee:5c:ae:9b:c8:20:ae:a2:25:a1:
b2:9d:87:0b:b2:db:b8:3c:8e:78:76:9f:12:e4:e5:ea:6d:5d:
ef:18:95:14:59:d0:21:ce:e0:d5:fb:a0:e1:df:2d:33:c4:e4:
59:06:78:10:7d:5e:34:e1:a0:be:c4:60:f6:05:7c:df:70:36:
8d:c7:12:c3:58:c5:0a:da:ff:e1:63:ac:b6:e7:6a:85:49:25:
00:92:17:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:28 2023 by rpki-client on console-ams.rpki-client.org