Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rWuY8EwmtQ4V51g1hlUsugd_4SA.roa
File: rWuY8EwmtQ4V51g1hlUsugd_4SA.roa (raw, json)
Hash identifier: 5voLEBi89mjlC32Wu/5oms5Qjpzu44gqkhIkdrmrC6M=
Subject key identifier: AD:6B:98:F0:4C:26:B5:0E:15:E7:58:35:86:55:2C:BA:07:7F:E1:20
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rWuY8EwmtQ4V51g1hlUsugd_4SA.roa
Signing time: Thu 15 Sep 2022 02:53:03 +0000
ROA not before: Thu 15 Sep 2022 02:53:03 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:03 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=AD6B98F04C26B50E15E7583586552CBA077FE120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:71:59:b3:64:ee:08:07:e3:a3:4f:eb:f7:7a:
56:34:b2:41:54:26:c9:f5:50:e5:ec:32:65:ea:92:
ac:ed:64:e0:51:ed:9d:14:c6:d3:df:4e:b9:f3:c8:
8a:f3:04:aa:28:0d:14:1f:17:27:dd:39:62:8b:13:
fc:e2:e2:31:1c:84:1e:f3:ab:7f:f7:dc:3e:6f:db:
67:bf:51:3d:3b:4e:60:fa:cb:00:03:84:07:b7:b3:
82:3b:d2:e9:6b:67:1e:b3:aa:3c:95:bc:c3:79:bb:
e9:a7:f2:22:e1:d3:c3:14:70:38:3f:c9:27:fd:8e:
42:46:a5:c1:fc:1e:84:bd:20:49:12:58:b8:31:cf:
67:3b:3c:36:f6:a8:7e:58:81:dc:68:1d:1d:bd:b9:
3d:bd:7a:df:2d:73:63:4c:1c:d2:b3:eb:c5:f9:41:
44:16:14:e9:38:03:d5:cf:dd:21:5a:ca:1f:09:e6:
28:37:8e:13:a5:21:ad:2f:08:e2:95:59:3b:6c:85:
86:0a:bb:c9:f5:a1:bb:dc:3d:01:7e:de:ed:a4:d5:
0a:41:66:7e:07:bd:07:d5:e6:5c:74:bb:5f:7a:85:
dd:30:16:40:7a:20:ef:50:96:30:54:8c:28:7f:92:
52:37:05:27:ca:f7:79:5d:5f:ed:9d:90:c9:44:c7:
66:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:6B:98:F0:4C:26:B5:0E:15:E7:58:35:86:55:2C:BA:07:7F:E1:20
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rWuY8EwmtQ4V51g1hlUsugd_4SA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.182.0/24
Signature Algorithm: sha256WithRSAEncryption
39:1e:29:77:7e:59:85:4b:1c:61:44:80:14:08:37:47:30:09:
8f:1a:63:ee:c5:26:63:8c:d6:e4:a5:0b:34:2d:79:80:91:13:
9a:3c:98:aa:88:a5:db:4a:08:5c:8a:d5:8b:af:a1:1b:0b:ee:
37:64:31:ff:1f:01:a2:21:15:b6:9e:8d:47:92:ae:ce:3f:ca:
c5:e1:76:33:46:77:62:db:bf:25:5c:5b:fc:ff:6c:de:2f:28:
15:df:fe:c1:06:6d:01:d5:1a:24:74:df:c8:bf:9f:ea:40:d8:
b9:d1:1f:12:28:77:f2:cf:03:1e:f1:25:80:48:8e:7b:72:ac:
87:25:d1:2f:3b:e3:6e:87:9b:a0:93:68:4d:3e:5f:de:9c:c5:
04:cd:33:1b:3e:36:90:16:57:84:dc:e9:b6:d6:e4:cb:2d:84:
d0:6e:f0:7d:9f:69:b9:19:09:90:1e:33:bd:52:d7:27:f6:05:
a7:e0:7a:89:c6:d4:c7:a3:15:74:02:3a:7d:b0:5c:63:04:0f:
27:5e:fc:46:34:d1:65:27:b7:48:6f:37:ce:44:a3:61:ce:01:
b7:be:5f:2d:7f:b3:2a:84:ca:1f:73:51:4a:97:fa:bc:0b:3e:
02:53:12:32:41:8f:d3:96:9c:cc:59:aa:62:71:42:2f:cf:e6:
c2:a2:d2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:41 2024 by rpki-client on console-ams.rpki-client.org