Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/saTLYquxINlqbXVA4Sz-WX7dogg.roa
File: saTLYquxINlqbXVA4Sz-WX7dogg.roa (raw, json)
Hash identifier: KTbUgRWGg/BflWio3d53P8WLO0IG2cS4OU2nzsalnJY=
Subject key identifier: B1:A4:CB:62:AB:B1:20:D9:6A:6D:75:40:E1:2C:FE:59:7E:DD:A2:08
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1ACB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/saTLYquxINlqbXVA4Sz-WX7dogg.roa
Signing time: Wed 29 Sep 2021 02:45:46 +0000
ROA not before: Wed 29 Sep 2021 02:45:46 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.193.192.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6859 (0x1acb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:45:46 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=B1A4CB62ABB120D96A6D7540E12CFE597EDDA208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d1:5c:77:5d:31:4c:e2:24:74:85:73:a8:a1:
09:b6:1d:2b:9e:be:bd:bb:c7:73:e9:8b:1e:76:77:
a4:bf:ee:a0:3d:7f:fa:00:e3:fd:02:85:1a:fc:59:
30:7f:50:eb:b5:ad:ff:23:f7:83:78:58:6b:a4:e5:
f2:e9:e8:88:79:d5:4d:b6:50:df:52:55:4a:b3:0f:
3a:2c:c7:82:ef:d3:9c:a3:54:ed:19:aa:c9:fa:07:
4c:7a:c0:25:54:6d:9a:f1:ea:3a:8d:fb:ae:56:3d:
ea:fd:d9:e2:78:4b:6d:ae:b6:5e:fb:c0:a4:84:af:
90:21:e5:f5:fc:f7:e5:61:5f:0e:30:a6:33:58:0e:
19:3e:f8:ff:89:ff:41:24:72:8a:c4:d8:6e:9a:5e:
98:92:1c:72:7a:01:c6:d2:72:d6:df:6e:6f:f1:51:
de:c7:0f:d9:ec:1b:e8:7d:eb:cf:5d:80:94:d9:84:
92:3e:56:2b:19:df:ca:d6:02:a8:45:34:e3:c9:f9:
7e:58:86:3a:b6:34:7a:cd:d0:a5:4b:0f:ef:92:40:
d8:ad:3e:0c:c6:2a:36:5b:6e:35:6f:0b:6f:50:2b:
bc:19:e6:b4:59:1c:ab:99:4d:0f:95:2d:76:3f:f9:
c7:42:ba:f5:8d:88:67:4b:74:5f:ea:79:a4:4c:45:
2d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A4:CB:62:AB:B1:20:D9:6A:6D:75:40:E1:2C:FE:59:7E:DD:A2:08
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/saTLYquxINlqbXVA4Sz-WX7dogg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.192.0/20
Signature Algorithm: sha256WithRSAEncryption
3c:49:a4:30:52:1e:87:e1:bc:60:ae:85:87:67:96:6c:2e:5f:
72:4f:c7:b2:ef:8d:9e:35:b8:09:63:f1:4c:ec:0a:05:65:0c:
a5:6f:2f:fe:ed:f0:54:f2:b5:0c:e7:17:e5:2d:18:84:ee:a3:
96:26:1d:f6:ca:01:f7:75:f5:6e:01:70:87:dc:f7:ea:cd:33:
d9:ae:d9:b6:6f:29:3d:a2:95:8a:61:79:8b:11:47:22:e8:32:
f8:05:da:d4:11:a9:ca:cf:50:5f:6a:e0:6e:fd:27:bc:9b:6e:
91:d0:7f:50:a3:48:d4:dd:c4:da:ab:4f:51:66:15:bb:df:91:
c1:4c:02:91:d7:bf:57:d5:ec:35:17:34:94:a3:a3:e4:20:16:
77:b8:7b:c6:02:54:21:04:f2:69:90:9a:01:85:c5:ff:7d:32:
ea:ba:8c:bb:a4:0f:db:3c:44:b7:6d:cf:a5:c3:4f:1f:98:57:
3d:54:23:89:fb:67:75:d5:87:42:3c:8b:09:34:ff:84:b2:e5:
4c:21:ad:a0:df:a5:1e:e2:5d:48:b8:cd:c6:de:2d:6b:dc:b8:
fa:68:c1:79:33:9b:96:2f:a4:59:f2:47:9e:50:55:14:e5:a8:
a9:f4:93:4f:ca:08:5c:d6:5e:8c:30:d7:bb:92:6f:02:47:0b:
8d:25:52:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:59 2024 by rpki-client on console-fra.rpki-client.org