Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wyN5Ael2mRtYnXtEj_pw_j76zng.roa
File: wyN5Ael2mRtYnXtEj_pw_j76zng.roa (raw, json)
Hash identifier: 3tYbIlFo5VoBtF/vDrZtN4ltl+e2iNrLkaRVfIqy9EI=
Subject key identifier: C3:23:79:01:E9:76:99:1B:58:9D:7B:44:8F:FA:70:FE:3E:FA:CE:78
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 140B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wyN5Ael2mRtYnXtEj_pw_j76zng.roa
Signing time: Sun 07 Feb 2021 11:57:12 +0000
ROA not before: Sun 07 Feb 2021 11:57:12 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.192.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5131 (0x140b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:57:12 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C3237901E976991B589D7B448FFA70FE3EFACE78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a6:91:d6:28:c1:5f:c5:2a:75:f8:14:81:84:
fc:6c:13:68:29:21:4f:5c:88:da:ad:24:0e:5e:c4:
aa:92:16:9a:9b:c9:a4:8d:23:32:b2:df:01:90:e4:
0d:ad:ac:73:de:7a:37:2a:43:a0:28:b8:f2:d1:75:
92:fb:3b:7d:9e:ed:32:23:a5:ee:2c:7e:3b:2b:90:
c6:c0:6b:2a:b2:cf:e9:4f:48:17:1e:20:08:6c:5a:
ea:5c:0d:ea:1f:2e:a4:8a:a0:e0:aa:fc:89:d1:1c:
fc:96:56:29:08:7c:46:c7:9f:aa:46:07:f2:70:f7:
47:6e:69:c0:11:63:8e:aa:c4:c6:88:99:f7:d2:5d:
e6:88:48:75:b4:50:a2:ff:96:89:e6:b9:7d:ab:0d:
2c:ee:74:2e:bc:cf:19:bc:5e:fc:f4:07:01:eb:31:
62:04:4d:01:3c:f7:b1:a4:ea:52:71:da:59:e3:a2:
99:b2:45:d5:59:db:4f:e1:4e:66:51:da:0b:42:9e:
3e:10:3e:92:ad:75:fc:a7:0c:6f:95:6a:ab:8f:6c:
1b:08:76:ba:f9:fc:c5:c2:bc:02:26:02:ff:28:4e:
76:dd:7e:bd:cd:49:6b:df:e3:1b:3e:10:58:fa:db:
bd:f6:66:91:99:f6:9a:5e:d2:79:82:50:f6:ee:fd:
ed:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:23:79:01:E9:76:99:1B:58:9D:7B:44:8F:FA:70:FE:3E:FA:CE:78
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wyN5Ael2mRtYnXtEj_pw_j76zng.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.96.0/20
Signature Algorithm: sha256WithRSAEncryption
73:40:16:1a:8a:de:de:50:a5:ad:d7:bd:f1:08:ea:df:2c:61:
d4:57:0b:60:30:3d:99:ab:50:e9:94:4f:c6:05:46:c0:9f:76:
fd:ea:38:d5:33:fa:58:b2:99:45:64:0a:5e:77:4f:9e:61:8d:
6d:05:9c:d2:3e:d3:61:57:b9:9b:13:d4:f9:ac:99:84:e0:e2:
7d:b3:49:6f:88:58:73:7a:96:fd:30:2b:29:55:ff:19:13:aa:
fe:02:59:d7:d3:b6:0a:4d:7f:1a:fd:2d:89:de:fe:87:c9:6f:
ea:21:d5:de:53:9d:ce:67:de:3a:b9:ec:58:78:bc:34:17:26:
86:4b:7a:cf:9e:3d:ec:b5:0f:72:09:4f:7b:0e:32:d3:39:44:
e6:88:c7:06:1a:9a:3c:2a:cc:a0:65:40:92:88:0d:f1:a2:34:
94:90:73:9e:5c:ef:33:57:c5:f8:a0:ba:bc:d9:cb:ac:28:e7:
05:f5:b5:46:4b:b4:4a:91:63:e5:44:36:de:63:3c:14:97:fb:
68:84:5b:03:77:b0:3b:ab:7a:4f:45:67:84:b9:43:92:54:df:
83:c1:d1:bc:b4:1c:4d:0c:2a:86:62:e6:6e:8b:c0:c9:df:47:
64:09:f5:98:0d:1f:ef:a6:07:c6:27:75:97:cb:ac:0e:01:f8:
49:34:51:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:00 2024 by rpki-client on console-fra.rpki-client.org