Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/q4haIpV1Z2xdC6OZ4N-09ui28RQ.roa
File: q4haIpV1Z2xdC6OZ4N-09ui28RQ.roa (raw, json)
Hash identifier: 1TcArB92R1Ghen0WficVU7wUrpRYvLpHVVU1NPMOjKI=
Subject key identifier: AB:88:5A:22:95:75:67:6C:5D:0B:A3:99:E0:DF:B4:F6:E8:B6:F1:14
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 219E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/q4haIpV1Z2xdC6OZ4N-09ui28RQ.roa
Signing time: Fri 25 Nov 2022 04:40:07 +0000
ROA not before: Fri 25 Nov 2022 04:40:07 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8606 (0x219e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:07 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=AB885A229575676C5D0BA399E0DFB4F6E8B6F114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ea:5a:50:30:df:60:e3:ce:6a:43:fe:95:62:
81:d6:ea:f9:49:d8:30:73:23:f1:a1:37:c5:bb:10:
6e:e8:b4:07:c0:6e:db:c3:84:72:a1:cd:97:92:8d:
10:ff:a8:b1:15:2a:b2:6a:8d:97:30:61:d9:3c:a0:
17:9a:50:77:69:d9:00:96:7e:c4:3d:16:32:a9:87:
f5:a3:99:72:e8:25:c7:52:e6:01:b0:f6:01:0d:7c:
81:11:43:ae:42:3c:11:a0:c1:9e:c3:8c:96:c0:5a:
14:a5:90:48:38:f1:b4:3e:cc:5c:8c:6e:4e:f2:a3:
e2:05:e4:7f:8e:fa:5c:3a:de:80:18:89:9b:65:de:
47:f2:91:07:09:8b:84:7a:73:71:8d:52:38:a5:5c:
00:2e:bf:c0:20:30:3f:5e:2a:38:c8:e1:23:7a:10:
db:d7:a6:6a:f2:d8:7c:ae:40:7b:da:4e:8f:4e:3a:
b8:33:61:42:50:ed:d7:49:d8:e9:f6:87:09:c7:68:
39:eb:c1:ec:c0:08:2a:18:fa:03:84:0e:d8:53:eb:
db:9c:f8:7d:11:56:5b:c3:5e:59:9d:8b:ce:2a:8b:
fe:60:2c:b9:fa:da:0a:1c:ca:1d:36:89:4c:57:fb:
b4:1b:28:48:e1:d3:98:b0:0c:e4:1a:68:8a:ba:51:
cc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:88:5A:22:95:75:67:6C:5D:0B:A3:99:E0:DF:B4:F6:E8:B6:F1:14
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/q4haIpV1Z2xdC6OZ4N-09ui28RQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.179.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:19:87:b3:a1:d3:c3:8f:ec:5b:b9:f8:ae:6f:bc:61:13:41:
27:8f:29:ca:1a:b8:85:2e:63:ad:1c:69:78:20:b3:5d:e5:64:
3e:53:fa:bd:15:1b:06:5e:a8:df:80:7b:12:67:92:40:eb:48:
82:23:14:b2:6b:51:08:67:98:65:44:e1:17:e6:42:e0:88:39:
9f:90:0f:52:5e:7f:80:f3:c9:fe:87:7d:2b:ee:bb:32:fe:3c:
87:f6:7d:02:4a:72:ec:22:56:8d:b9:eb:d2:0e:4f:85:84:e5:
bd:95:44:f4:89:9f:e1:30:88:ce:db:3f:ba:29:dc:74:b9:cb:
2a:82:28:a3:4f:7a:58:58:64:db:b9:d0:1b:90:a0:74:1a:e0:
27:63:72:f3:c1:91:57:4b:1e:06:ac:c7:99:17:7c:e9:53:eb:
f7:78:6b:e1:d7:e4:df:ed:b9:47:a0:c3:7d:6e:99:e9:65:dd:
56:9e:b4:be:c1:ed:9e:07:99:65:17:6d:d5:74:0a:29:44:4c:
cb:bd:1b:f3:e4:b9:f4:73:d5:5b:69:ad:fa:2e:22:f4:84:2d:
70:e6:0c:1c:6a:96:d0:7f:9d:73:fc:e2:e4:ba:cf:6f:55:90:
87:28:b3:79:c2:ed:d9:6b:46:b2:96:1c:b3:7f:59:78:fb:88:
69:59:98:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:40 2024 by rpki-client on console-ams.rpki-client.org