Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sglRAQFwyW6EZyWK_n02fnK9ju8.roa
File: sglRAQFwyW6EZyWK_n02fnK9ju8.roa (raw, json)
Hash identifier: +BXjvj9HZs4+9JlBtRwx/DWnUkYrVx5ahPFxcGPl7fU=
Subject key identifier: B2:09:51:01:01:70:C9:6E:84:67:25:8A:FE:7D:36:7E:72:BD:8E:EF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1B30
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sglRAQFwyW6EZyWK_n02fnK9ju8.roa
Signing time: Wed 29 Sep 2021 02:46:16 +0000
ROA not before: Wed 29 Sep 2021 02:46:16 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.193.60.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6960 (0x1b30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:16 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=B20951010170C96E8467258AFE7D367E72BD8EEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:91:6c:fd:9a:06:7c:17:97:cc:5a:06:31:6f:
21:f4:c1:70:a0:fd:67:c0:92:57:e5:9d:61:8c:82:
60:93:1b:6f:1c:a9:ce:da:3f:58:91:2a:b0:4c:60:
19:e4:b6:cd:8a:11:b2:95:67:e5:84:7f:ac:ab:26:
e4:1b:20:2b:94:1f:da:46:0d:95:36:f4:5d:09:d2:
21:a1:95:1b:b8:2f:05:73:88:0a:2d:96:b1:d6:75:
53:e8:ef:8b:c5:e1:8e:9a:32:12:f2:c2:15:a3:15:
fb:0c:58:ad:e7:e5:81:88:82:b4:d8:1a:c5:92:79:
ca:57:64:0b:c6:bc:f6:b2:39:b9:f6:24:28:b6:4b:
1d:51:e8:de:f2:6b:74:bf:4f:f8:c8:21:da:df:2b:
c8:04:1a:d8:91:f7:62:00:09:8a:68:95:74:0c:88:
87:a4:89:c0:97:cb:68:79:7c:fa:45:0a:6b:51:19:
26:aa:4e:32:45:99:5b:f7:21:6f:68:dc:50:5d:ae:
26:86:1c:0e:f6:b6:1c:0c:96:7b:b2:7e:b9:24:09:
70:1b:ed:cf:eb:ee:a4:84:57:23:80:c4:1a:e8:82:
6e:c6:bc:09:a4:2e:8d:69:85:2d:74:d5:dd:fc:77:
cc:cb:b1:a3:37:f9:a8:b2:5c:76:5b:2a:ac:71:61:
d7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:09:51:01:01:70:C9:6E:84:67:25:8A:FE:7D:36:7E:72:BD:8E:EF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sglRAQFwyW6EZyWK_n02fnK9ju8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.60.0/22
Signature Algorithm: sha256WithRSAEncryption
24:41:8b:80:cd:41:fe:bc:80:d7:2c:10:d5:c4:45:1d:82:1b:
c7:f5:24:2c:ac:6f:ca:a1:2e:d7:fd:15:d0:4e:f7:9f:dd:e2:
3b:d4:d5:bf:f7:6b:23:1f:f7:7c:33:df:a8:49:e0:39:77:34:
f5:9f:4e:b9:b6:91:b3:5e:6c:73:b0:38:6d:2b:81:7a:55:7a:
5b:a3:d7:a2:f0:da:65:8c:8e:ba:17:c0:87:00:ab:7f:85:d5:
bd:b5:b1:ae:86:23:e4:3c:88:a3:d1:6b:3f:89:34:dd:7c:9c:
6e:fd:77:7e:58:73:d2:28:23:7a:ab:80:46:40:fb:68:c6:59:
16:71:f5:20:dd:09:f6:5b:c5:ec:93:3c:c9:14:ab:33:d3:cb:
79:07:4e:78:90:5a:ca:04:c7:7d:2a:fa:81:b4:a6:aa:08:5a:
5d:4f:79:aa:d3:6e:07:cd:f5:dc:6f:53:e0:ad:b4:55:d9:87:
b6:21:43:65:9d:ae:ac:68:ce:b0:62:98:27:5f:6b:e6:e1:d6:
5a:4a:ec:2b:b2:27:64:fb:db:ca:ca:3c:2f:c3:d1:50:9c:4e:
36:15:66:ab:55:6b:ba:53:40:6c:df:08:2d:8a:87:2b:44:4b:
66:bb:25:3e:ba:3d:bb:5c:c4:49:5d:d3:bf:b5:1d:5a:e9:ca:
70:4a:f3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:41 2024 by rpki-client on console-ams.rpki-client.org