Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/t30_9u10Iw87YJZjq6InUxlmdEg.roa
File: t30_9u10Iw87YJZjq6InUxlmdEg.roa (raw, json)
Hash identifier: sS9wdLnstrGvuKPsdATLdbkI1x7CjHKOxWRCverltxw=
Subject key identifier: B7:7D:3F:F6:ED:74:23:0F:3B:60:96:63:AB:A2:27:53:19:66:74:48
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/t30_9u10Iw87YJZjq6InUxlmdEg.roa
Signing time: Thu 15 Sep 2022 02:45:41 +0000
ROA not before: Thu 15 Sep 2022 02:45:41 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.64.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:41 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B77D3FF6ED74230F3B609663ABA2275319667448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:87:af:59:44:bc:7b:9f:e3:d0:ed:90:83:ce:
3d:99:b4:29:74:24:11:61:c6:28:1e:c3:2e:46:67:
ab:e8:a4:46:16:b1:ae:5c:c4:a2:bc:59:20:b0:d2:
70:50:4a:f3:59:f4:57:5b:a3:df:38:f5:99:30:d1:
ce:cc:99:6e:d9:68:61:d6:4f:b0:03:ff:1d:13:e3:
50:da:1a:d1:91:52:27:ca:cd:cf:27:94:67:42:44:
c4:dc:3a:99:30:17:56:87:d1:5d:30:af:5b:f5:e6:
2d:dd:a3:c0:4b:ca:ce:1e:6c:bd:ea:d4:d0:0a:4d:
e8:fc:1a:f7:2e:87:7d:8a:25:5a:4e:72:a3:06:4c:
5b:ed:7a:9b:60:d6:fe:9a:c9:c0:ec:92:e8:f1:11:
c9:0f:83:d8:42:e1:6c:da:89:90:a6:09:e6:8d:86:
6a:e9:e1:41:5b:73:95:3c:96:a0:c8:ef:0e:07:7d:
51:25:04:28:dc:f2:0e:e0:7e:54:5d:a4:dc:68:43:
03:9d:80:74:ec:04:33:d2:ef:82:9b:0c:9f:da:91:
f0:a9:78:14:00:92:23:ec:f2:9c:a6:fe:6d:e3:a1:
5f:9d:3f:cd:72:18:16:a5:52:c9:b2:8f:3d:11:d9:
1d:73:39:1a:82:eb:2c:5e:9f:cc:c1:df:aa:b5:99:
64:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:7D:3F:F6:ED:74:23:0F:3B:60:96:63:AB:A2:27:53:19:66:74:48
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/t30_9u10Iw87YJZjq6InUxlmdEg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.64.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:06:88:24:81:c8:26:c4:a8:19:10:c2:18:52:a0:4f:8f:f0:
87:f5:e1:31:5a:36:cb:4c:e5:a7:1f:ca:e2:60:be:da:5a:be:
2f:35:e1:73:c2:8b:24:c8:ec:ac:18:a4:3a:99:51:d1:87:bc:
8b:07:c7:f3:4d:21:a0:a4:a1:25:ff:2d:b5:0c:4e:c7:68:20:
79:f6:b9:83:f4:2e:9f:20:e0:ab:f5:58:c2:58:7b:2d:33:b1:
4c:42:10:6c:c5:13:12:f5:3b:9c:40:58:2f:01:fb:04:8e:17:
de:a6:76:40:37:b6:2b:f5:ff:9d:a7:e8:38:b1:8f:70:60:9f:
fc:d6:7f:5d:06:2a:7b:45:2c:7d:86:5f:e1:6c:bc:08:7a:d0:
d6:e0:0c:58:d8:31:61:90:42:65:41:a3:53:d8:eb:f8:4a:27:
fc:b3:d3:ca:e2:7b:86:e4:36:d2:8d:fb:27:5d:a0:68:93:c5:
91:ec:53:cb:05:dc:1d:8c:8a:fb:05:bc:87:24:5c:1c:0a:d4:
e3:a7:f6:b1:b8:57:38:f4:22:cc:41:14:56:f6:10:61:0b:64:
a9:59:90:21:a9:19:de:23:cd:e0:15:a6:0e:36:19:26:f5:02:
8b:ad:cc:d6:02:31:98:61:80:07:d7:5a:94:65:ae:de:3e:0b:
db:ae:b0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:59 2024 by rpki-client on console-fra.rpki-client.org