Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tMgvOCfHZfFs2qCcslyPifeRNLk.roa
File: tMgvOCfHZfFs2qCcslyPifeRNLk.roa (raw, json)
Hash identifier: VUBBT9IEAhPsWNoBfL3cv8nCwRaZMZrjWFGjxpopltQ=
Subject key identifier: B4:C8:2F:38:27:C7:65:F1:6C:DA:A0:9C:B2:5C:8F:89:F7:91:34:B9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1A75
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tMgvOCfHZfFs2qCcslyPifeRNLk.roa
Signing time: Wed 29 Sep 2021 02:45:22 +0000
ROA not before: Wed 29 Sep 2021 02:45:22 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.195.36.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6773 (0x1a75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:45:22 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=B4C82F3827C765F16CDAA09CB25C8F89F79134B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:de:1d:4d:66:43:c8:4c:3b:11:6b:d1:f8:54:
40:41:60:65:34:85:42:69:69:29:2d:f9:65:5d:58:
ff:4b:62:2f:1f:13:bd:88:04:0a:9b:c4:1e:9e:4a:
b0:99:1c:de:ba:78:e7:a1:37:e0:de:0a:bb:1d:8e:
81:65:87:45:d0:01:52:2a:a8:8c:91:89:e4:0b:ed:
bf:40:32:88:80:ff:63:02:53:8e:3c:fa:be:8d:12:
dc:77:ff:18:4e:15:52:2d:5b:b4:6e:40:df:2a:fb:
93:19:66:33:da:b7:8e:7e:bc:9e:7c:e8:fe:72:ee:
1c:65:2a:20:71:a6:88:ba:5f:4d:e1:10:8e:d2:81:
5d:86:ee:41:28:5c:2e:b7:8a:b0:11:35:5a:3d:aa:
c9:7f:a3:c3:05:eb:b4:ea:c7:d5:06:d0:4d:83:f0:
89:d7:06:45:ac:28:61:47:dd:25:88:1b:e9:6e:63:
05:dc:f6:d1:02:6c:20:79:ef:42:64:ca:24:19:d9:
63:19:f1:7c:50:b7:ca:da:64:56:5b:4a:19:17:97:
68:b8:0d:a8:04:62:e6:ec:bb:53:e3:b1:66:97:78:
bc:be:10:4c:4f:b5:9d:e6:79:f2:f6:9b:ae:a6:ff:
50:47:5e:a8:40:18:d9:e7:39:20:1a:75:6e:3b:4d:
d8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C8:2F:38:27:C7:65:F1:6C:DA:A0:9C:B2:5C:8F:89:F7:91:34:B9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tMgvOCfHZfFs2qCcslyPifeRNLk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.36.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:d3:62:e4:92:39:97:79:e1:f6:3e:48:0d:ac:08:52:fa:51:
bf:b1:4c:04:7a:79:0d:9d:b2:24:fe:ae:9f:25:bb:d8:bf:d1:
58:3f:cb:95:71:2d:8b:9f:35:1d:d9:a8:4e:9f:e4:02:d4:54:
e1:50:d3:6f:50:f5:52:2d:aa:1f:58:37:1a:1b:09:94:7b:fd:
9d:a2:68:35:61:a5:0e:56:0d:b0:12:5d:82:09:86:64:8c:d6:
db:7c:a9:62:c9:53:26:ed:a1:7c:2a:61:85:0d:50:b2:d0:e1:
59:ec:3b:82:3f:e7:10:45:5d:fe:31:ee:d2:a9:fe:df:8a:ec:
c1:b7:9a:73:64:ff:5d:af:d6:be:9d:d1:66:c9:6d:96:de:57:
f2:22:29:b0:eb:44:c6:8b:ab:c4:f9:ec:1b:d0:24:6f:4d:4a:
b6:b0:fa:26:cb:9f:7f:e9:31:22:72:32:85:79:86:db:d7:3c:
93:0e:a1:9f:66:c8:00:30:51:2b:30:26:07:ab:b2:a0:30:d7:
08:8e:97:cd:13:b7:0c:69:96:45:36:d1:15:ff:f2:be:62:2a:
2f:cf:ad:0a:d9:ef:d5:25:14:c4:b3:bc:1f:90:a1:b2:e4:f7:
ff:f7:54:44:b6:36:87:5c:0a:29:1f:4e:26:4d:04:8e:96:fd:
a0:39:79:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:59 2024 by rpki-client on console-fra.rpki-client.org