Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wmA6EdseBPmAwEyj7oDHgWlKxTE.roa
File: wmA6EdseBPmAwEyj7oDHgWlKxTE.roa (raw, json)
Hash identifier: QZDFvFDRYAdw5BtIZNOaJsO/j7CTk73K7cTHapYXJIM=
Subject key identifier: C2:60:3A:11:DB:1E:04:F9:80:C0:4C:A3:EE:80:C7:81:69:4A:C5:31
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wmA6EdseBPmAwEyj7oDHgWlKxTE.roa
Signing time: Thu 15 Sep 2022 02:45:32 +0000
ROA not before: Thu 15 Sep 2022 02:45:32 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.112.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:32 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C2603A11DB1E04F980C04CA3EE80C781694AC531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e4:b3:59:25:96:06:8d:55:8b:26:82:22:86:
14:4b:89:ee:25:43:e5:b9:79:80:da:99:97:3e:88:
23:48:ff:f3:51:37:3b:f9:01:e4:41:13:b7:3f:0b:
46:25:ed:ec:b2:fe:c1:ed:14:fb:86:ee:6d:dc:cf:
cb:86:b3:d9:a9:8d:11:b8:85:13:a8:7d:9c:77:97:
c9:af:7e:ee:17:67:15:6e:05:58:25:27:1f:d8:d7:
77:62:ab:15:f0:1f:11:55:1c:9f:46:37:c5:36:27:
65:fa:2d:1e:81:37:15:59:d4:ac:1a:63:50:fb:a7:
b1:19:90:60:cb:0e:3d:1b:aa:a1:d9:74:92:42:88:
54:37:1c:4f:b3:ef:29:a8:4e:89:a7:ef:9b:82:b0:
d0:f2:3e:f1:f5:85:19:b6:de:d7:9b:09:e8:b2:ec:
15:4d:3d:e3:6f:2c:f0:17:e3:46:d3:c0:d2:16:a0:
cd:69:5a:86:ca:2d:49:de:af:01:f4:a6:ab:59:86:
c6:fd:c6:75:3b:3c:2d:a4:36:80:fd:21:87:a0:fd:
ed:ec:df:68:47:1b:de:0d:c8:a1:0e:21:cf:c3:93:
b5:41:ac:d0:2f:9b:ae:2c:40:ac:29:79:6d:46:86:
9f:0e:26:54:93:cd:96:2d:fb:db:a4:40:0c:d8:19:
b1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:60:3A:11:DB:1E:04:F9:80:C0:4C:A3:EE:80:C7:81:69:4A:C5:31
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wmA6EdseBPmAwEyj7oDHgWlKxTE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.112.0/21
Signature Algorithm: sha256WithRSAEncryption
20:e5:21:0c:3b:c8:d0:34:00:35:02:25:01:c1:ac:c7:00:96:
3b:81:ba:7f:d0:f3:29:52:8f:14:3f:7e:5d:6d:73:10:89:c8:
59:b2:4d:e2:dc:bf:3e:94:22:40:22:36:45:41:2e:39:14:08:
f7:88:a1:4a:84:00:46:6c:10:90:ee:b0:a3:30:6b:57:93:45:
a4:25:1f:cb:4c:4d:c9:3c:e3:98:e4:ba:19:69:b5:3b:3e:d9:
c4:59:20:fe:eb:51:3b:59:e5:cd:d5:8f:98:8f:dc:26:90:4f:
2a:c1:15:c3:1c:cd:5e:fb:14:95:b2:4b:10:e1:25:9f:61:f8:
19:4b:d7:a3:89:07:7f:c6:78:7b:d6:fe:b5:90:5c:5f:85:c2:
42:c7:8a:15:6c:1b:cb:81:53:ec:b9:91:33:b7:7d:a0:5a:a3:
13:ad:a8:80:d6:3b:c0:b9:c6:7e:80:ef:9e:f8:d7:b2:64:a2:
a3:7e:40:66:c3:8e:7e:06:46:38:b6:b6:11:b0:be:2a:5e:28:
ef:0a:d7:04:fb:54:65:5a:48:e8:dd:ef:26:2d:e9:de:e4:73:
6d:5f:2e:2e:e1:a8:c4:8a:cb:1a:44:7b:7e:c7:6f:35:e5:74:
59:49:1a:2c:61:fb:ae:46:d7:85:83:e7:ed:7f:94:c8:a9:57:
9b:0e:ff:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:42 2024 by rpki-client on console-ams.rpki-client.org