Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uMPz5ZlXvJz2mhNtx3tysPjJiqY.roa
File: uMPz5ZlXvJz2mhNtx3tysPjJiqY.roa (raw, json)
Hash identifier: N625cmWW7M4LFwqJvknAFT+pHzKSYb3LXNJvXJjKJ64=
Subject key identifier: B8:C3:F3:E5:99:57:BC:9C:F6:9A:13:6D:C7:7B:72:B0:F8:C9:8A:A6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uMPz5ZlXvJz2mhNtx3tysPjJiqY.roa
Signing time: Thu 15 Sep 2022 02:45:42 +0000
ROA not before: Thu 15 Sep 2022 02:45:42 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.232.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:42 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B8C3F3E59957BC9CF69A136DC77B72B0F8C98AA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:27:69:49:88:ce:61:73:5a:2f:c0:11:19:e7:
cd:fa:d4:7a:35:42:92:76:d2:c6:c4:da:46:04:1b:
1d:75:41:2f:de:a7:18:22:ed:5d:ca:61:b9:92:f2:
ec:b1:ab:5a:18:78:21:7f:fc:72:96:65:f5:a2:9d:
eb:93:e2:f0:77:3d:c4:0d:89:03:d6:39:4c:cd:35:
0d:e9:c1:6f:f9:db:42:c0:35:3a:c1:8c:6d:ff:2b:
37:2c:3f:c6:14:da:92:f0:e9:20:26:c4:b7:46:6e:
a2:af:24:ff:79:77:23:4c:80:ee:7e:db:44:8b:45:
da:2d:bd:50:68:b4:41:16:f3:b6:b9:da:fa:f1:ef:
af:74:80:c0:72:87:47:dc:3b:70:14:ed:fc:c6:fb:
0f:46:8c:52:d5:8d:41:0a:e8:6b:4f:3f:2b:4f:9b:
65:b9:0e:8e:37:80:37:9a:e3:56:84:b8:9f:90:97:
bb:b8:23:94:6e:78:2e:21:13:0f:d3:29:66:83:93:
c1:56:6a:ff:93:98:d4:01:69:02:12:22:cb:06:6d:
5f:18:c3:cc:d5:f3:74:d2:30:1c:07:57:5a:0f:63:
0c:2a:43:85:06:0d:7e:31:85:19:cb:56:b1:1f:12:
15:1e:3f:f4:e9:f8:a8:bc:07:00:07:bf:5f:d5:74:
d5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C3:F3:E5:99:57:BC:9C:F6:9A:13:6D:C7:7B:72:B0:F8:C9:8A:A6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uMPz5ZlXvJz2mhNtx3tysPjJiqY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.232.0/22
Signature Algorithm: sha256WithRSAEncryption
04:e7:d7:bd:f7:db:d4:60:d2:75:41:29:c7:ed:4f:13:4b:05:
61:9f:36:2e:25:61:09:33:49:46:55:fd:e3:83:5a:87:7f:7c:
30:f4:35:cd:33:a9:4f:dc:b0:b9:75:ce:83:66:5f:ec:3f:d1:
c3:a5:32:3d:a4:28:be:f0:69:50:bb:b4:99:4f:43:7b:a5:89:
b9:c0:50:7e:d1:34:10:60:8a:27:61:d4:06:f6:8e:75:31:fb:
a3:35:0a:24:ed:b5:0b:90:c4:38:54:96:aa:73:f3:79:45:d0:
23:24:fa:6b:75:f7:af:6d:48:42:69:5f:66:ba:ea:52:18:b2:
61:7e:5f:43:ed:7e:12:84:93:ab:36:ad:d3:de:05:c5:30:e9:
29:3b:ca:c0:7c:db:01:4e:d0:38:55:ea:95:f4:81:95:36:45:
8b:4e:ef:81:9c:77:31:18:73:17:8f:42:6f:3d:51:bf:e3:0e:
85:14:37:7a:26:45:96:2c:ce:3b:7b:8a:f0:62:64:48:82:c5:
16:87:64:4d:c7:c8:14:7e:ed:b4:1e:bc:16:b4:79:24:75:19:
5e:10:e9:bf:23:a5:ea:5c:e3:d5:b3:57:2e:a2:64:8e:0c:d0:
e9:0b:f5:9f:ba:9e:f5:fd:c1:08:5f:86:ae:47:34:49:87:66:
68:a0:aa:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:59 2024 by rpki-client on console-fra.rpki-client.org