Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w0KjJ67yuAD_OtQEOsS-aCJ-b-s.roa
File: w0KjJ67yuAD_OtQEOsS-aCJ-b-s.roa (raw, json)
Hash identifier: 0exqSFimJ3irD4RQHWeUC+5x+tzKG/NShEstx+zGOz8=
Subject key identifier: C3:42:A3:27:AE:F2:B8:00:FF:3A:D4:04:3A:C4:BE:68:22:7E:6F:EB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w0KjJ67yuAD_OtQEOsS-aCJ-b-s.roa
Signing time: Thu 15 Sep 2022 02:53:12 +0000
ROA not before: Thu 15 Sep 2022 02:53:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.4.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:12 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C342A327AEF2B800FF3AD4043AC4BE68227E6FEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4c:1d:a9:ca:50:09:c3:eb:77:5e:c1:ed:93:
4b:6c:fe:bc:35:36:c3:ac:f1:de:a5:c4:45:5f:48:
16:02:9b:ba:f9:7c:49:be:71:e4:a4:e9:0f:a3:81:
85:cc:e8:d1:ad:ea:e7:7c:d5:f1:56:c1:21:b8:42:
37:3e:59:88:ea:c4:15:d0:cf:88:58:66:f2:f1:ca:
cf:d8:22:9a:e0:ba:8c:8c:fd:74:d4:5d:8c:1d:cd:
7c:c4:5f:77:e4:fd:43:ac:e4:4f:85:a4:94:30:b5:
c9:2d:fb:a7:3a:ec:86:8b:9e:eb:5a:4b:e5:70:43:
09:b9:dd:b9:2a:9a:66:41:d9:f1:68:82:ea:2a:ca:
35:92:f0:d7:a3:71:90:ed:bb:ab:a5:ae:a6:9a:0b:
a4:94:0c:ff:4a:13:37:8c:45:b8:f2:15:04:b9:8f:
a8:00:c0:65:9f:71:41:aa:77:0d:17:7b:bf:16:ee:
d5:90:20:0d:a0:df:57:85:76:92:84:5c:e6:8c:69:
0f:9a:99:16:4c:f0:d9:4d:6f:bf:fd:2a:28:03:db:
28:4d:d8:7a:3a:92:be:e4:06:b1:90:e8:aa:85:6e:
e6:6b:4b:9d:e4:c9:e9:07:f6:78:5a:87:4f:0c:03:
5e:25:86:e0:25:c5:02:6a:5c:3d:5d:aa:31:8e:3f:
ec:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:42:A3:27:AE:F2:B8:00:FF:3A:D4:04:3A:C4:BE:68:22:7E:6F:EB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w0KjJ67yuAD_OtQEOsS-aCJ-b-s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.4.0/22
Signature Algorithm: sha256WithRSAEncryption
82:3d:8d:57:aa:eb:f0:7a:e3:43:be:1e:45:e8:27:36:ea:30:
c0:68:c4:7f:a5:fd:d3:e5:63:19:6a:6c:e9:f6:3f:3b:13:6a:
5f:79:01:94:1b:56:89:4b:e5:4c:1f:67:12:88:50:38:e7:89:
96:14:5e:fb:89:ac:0c:dd:63:4f:40:82:02:f0:88:9d:db:dc:
b8:ed:15:2c:6d:a3:a9:ec:ff:fa:50:de:cb:1a:1d:bb:8c:db:
46:15:0f:81:6b:8e:ac:e5:ed:1c:b7:71:75:96:1e:8d:51:aa:
52:a7:aa:a8:c0:c1:2c:f5:38:02:af:dd:d6:bb:a6:19:aa:05:
88:c9:fe:01:7f:9b:7a:87:34:92:3b:46:c5:e1:8c:7c:41:eb:
d0:24:5d:f0:02:7d:9f:f8:65:c1:b4:02:0c:e3:aa:5f:8b:bd:
bf:c1:ef:0a:7b:34:c8:d1:17:65:ad:a5:e3:b9:43:5e:e7:b4:
ea:a7:e6:bc:cf:fb:da:7f:be:ad:a8:f0:6f:a7:c6:38:15:82:
1d:77:11:e7:1f:51:ab:7c:28:16:4e:bd:7e:4c:32:af:ab:15:
a4:fd:c7:25:02:8e:af:25:cb:78:cb:f7:89:a3:ec:59:39:f9:
ee:0f:d5:a4:37:6f:f5:f0:25:77:a2:05:b2:45:f3:f3:97:60:
83:56:c5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:42 2024 by rpki-client on console-ams.rpki-client.org