Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/scqDIVxU1Kvf740_xL8p8Y5ytn0.roa
File: scqDIVxU1Kvf740_xL8p8Y5ytn0.roa (raw, json)
Hash identifier: ypqIk4Ybgn5qHYFrv2d6+bxbr6DzyH3I9QVdgFoGkXc=
Subject key identifier: B1:CA:83:21:5C:54:D4:AB:DF:EF:8D:3F:C4:BF:29:F1:8E:72:B6:7D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/scqDIVxU1Kvf740_xL8p8Y5ytn0.roa
Signing time: Thu 15 Sep 2022 02:53:48 +0000
ROA not before: Thu 15 Sep 2022 02:53:48 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.144.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:48 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B1CA83215C54D4ABDFEF8D3FC4BF29F18E72B67D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a1:c6:6e:51:e0:5b:77:ce:f3:da:12:0d:8e:
32:37:75:14:93:e7:87:1a:26:e9:e1:13:44:83:9a:
89:99:4d:15:09:4f:1d:75:ea:59:11:e3:fe:f2:0d:
57:67:4d:59:e6:f5:12:46:17:ae:f4:05:93:a0:fc:
55:80:88:ec:01:f8:03:e1:1b:f5:6c:90:62:7c:f4:
94:c1:58:d5:9c:d7:a6:a6:4d:5f:2d:92:cc:24:a4:
cb:27:64:49:6a:76:3d:d4:5d:fb:cc:dd:30:80:a8:
af:ff:cc:3e:d6:40:5a:e9:23:b7:92:d8:b6:91:91:
fb:2c:d8:e4:4b:a1:91:0d:5c:70:36:b1:b7:ce:2e:
81:67:05:14:4b:f8:ac:59:92:5b:f6:43:fc:d1:ab:
db:fe:bd:02:e5:bd:26:a7:d3:9b:e0:f0:73:ce:3a:
d6:cc:51:fe:5a:5d:eb:5c:f9:56:a1:b5:2d:32:1b:
cb:98:39:0a:ef:b8:15:4a:cf:bd:59:be:62:26:c1:
19:eb:2c:ba:6a:32:7d:61:d7:e2:3b:f9:d5:86:a4:
7a:ea:20:a3:dd:ac:29:fa:d1:c9:47:c6:e4:71:c9:
4a:ca:c6:fd:0c:63:c0:15:5c:67:06:1c:ff:75:c9:
7f:06:68:a2:8a:d5:72:b3:0a:39:d0:4a:c9:b2:62:
ff:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CA:83:21:5C:54:D4:AB:DF:EF:8D:3F:C4:BF:29:F1:8E:72:B6:7D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/scqDIVxU1Kvf740_xL8p8Y5ytn0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.144.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:af:18:04:25:cd:9c:1d:48:32:79:9c:bb:51:9a:62:b5:c1:
79:49:cb:17:80:1f:7d:16:40:c9:02:2f:a0:09:59:11:23:8c:
72:bd:9b:42:a6:df:9b:5c:c0:67:40:5e:cd:e5:8d:fe:18:c9:
3c:88:71:82:7a:21:db:a7:f4:20:9d:97:64:3e:f1:2b:2e:64:
33:07:f5:9d:21:39:51:ba:6b:4f:e1:0e:a7:0a:a6:8a:d4:20:
97:2c:40:78:ee:6a:0f:05:79:5a:e3:5c:bd:3c:25:c5:61:e8:
65:d4:f6:88:a5:60:18:1c:30:93:92:b4:c2:ed:c1:b0:9d:15:
db:bd:12:36:f9:45:e5:7f:b8:cf:02:2c:6a:b9:a1:58:54:38:
ac:ec:0f:87:6d:42:8d:d6:3d:9f:dd:9f:54:43:f2:25:7e:2f:
3d:40:75:b2:a8:9a:b4:69:e9:e2:2e:31:28:ad:9f:01:01:30:
ae:66:b9:af:0c:a6:b3:6b:91:95:13:e8:94:bc:fc:e9:f2:2b:
0d:c2:b8:3a:7c:10:9c:4b:54:4d:aa:22:e4:96:54:e9:42:40:
29:91:4f:d5:9a:4f:00:f6:fb:62:f7:88:b9:70:7a:1f:c8:39:
86:20:e5:37:b7:df:6d:7e:45:a6:eb:6e:a6:a9:0a:cc:af:36:
0d:c0:f9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:59 2024 by rpki-client on console-fra.rpki-client.org