Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xA6hu5M1lVHDo1MwIT6UDi3wbOI.roa
File: xA6hu5M1lVHDo1MwIT6UDi3wbOI.roa (raw, json)
Hash identifier: ve602g/L3R4hO7/5cnhduM70e3vqPifB7NtQMbL2lY0=
Subject key identifier: C4:0E:A1:BB:93:35:95:51:C3:A3:53:30:21:3E:94:0E:2D:F0:6C:E2
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xA6hu5M1lVHDo1MwIT6UDi3wbOI.roa
Signing time: Thu 15 Sep 2022 02:45:50 +0000
ROA not before: Thu 15 Sep 2022 02:45:50 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.204.0/26 maxlen: 26
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:50 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C40EA1BB93359551C3A35330213E940E2DF06CE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:24:67:59:24:42:70:05:56:6a:be:b3:1e:a7:
73:a4:bd:31:f4:77:4a:41:6e:1e:ba:77:fa:19:61:
c1:b0:6b:04:fc:82:be:4f:2f:12:7f:e9:61:d1:d7:
7c:40:9f:a5:85:3b:6f:7c:83:9e:01:ec:fd:5b:1b:
c7:46:45:53:d4:02:48:cf:e4:a3:c9:d1:1f:e4:44:
d5:62:06:70:a7:49:40:c8:15:bb:31:e6:e0:94:f9:
4e:a1:70:65:e8:7b:38:57:55:15:0c:58:79:d2:fc:
a9:b5:91:9f:d6:7c:e2:86:a5:85:c8:f4:6f:6d:b0:
10:0f:ee:d9:1b:fd:f3:67:34:c8:7f:38:d9:42:02:
f1:39:72:77:5f:e9:ac:0d:3f:e2:af:be:13:fa:f6:
87:1a:ec:d0:80:55:1b:bd:7b:8b:a4:13:60:5e:26:
87:e4:6c:97:84:28:ca:af:53:b1:39:60:50:0f:83:
5a:e9:84:6a:9d:bb:d3:ce:fe:b0:f6:0b:5e:d0:97:
9b:e4:d9:83:19:36:54:42:16:55:64:2d:b0:e0:a8:
ae:42:ce:d4:a5:9a:a8:c6:b4:40:fc:70:aa:ad:ee:
c2:b1:fe:50:76:6e:cf:38:67:4b:c2:40:50:73:4b:
d6:63:0d:e8:d0:a0:95:03:1e:99:1b:f0:00:b4:0d:
1c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0E:A1:BB:93:35:95:51:C3:A3:53:30:21:3E:94:0E:2D:F0:6C:E2
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xA6hu5M1lVHDo1MwIT6UDi3wbOI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.204.0/26
Signature Algorithm: sha256WithRSAEncryption
1c:aa:81:0f:b6:3d:8d:ef:1d:f2:4d:e0:9c:cd:a3:e9:b3:7e:
bc:9a:93:be:c5:ce:96:ca:f0:ea:b7:8e:47:96:c4:ca:2f:3f:
f0:d5:f0:a4:aa:34:7e:8b:7b:2e:3b:d3:c7:32:eb:e1:d9:ba:
d1:c3:d4:6c:d6:6a:4b:eb:95:cc:99:21:3c:e9:32:a1:68:79:
78:d9:9b:f5:12:7e:ae:b0:a4:44:82:16:62:3d:0c:f1:42:1c:
ce:23:ec:a0:4a:7b:ea:4b:63:3c:0e:cc:e7:29:9d:3b:af:c0:
80:4e:69:2c:16:07:bf:b6:1a:d7:fa:68:c8:3a:ba:cf:a0:09:
38:45:e6:1d:a3:a7:07:47:b7:e7:d1:9a:97:6f:a2:cf:84:2c:
56:58:7e:a3:20:6e:19:d5:13:9a:ed:47:00:d6:50:17:25:3b:
68:2f:c9:60:ec:33:a4:d3:98:53:42:3a:0f:65:6d:c1:12:9e:
b5:15:61:7d:c5:3e:30:cf:44:3f:73:23:88:1b:35:25:11:fa:
b6:86:ed:29:eb:8a:ca:c5:46:26:3e:e0:97:c9:b0:fc:55:96:
3b:02:eb:a8:b7:c5:1c:61:1f:cc:b2:c7:67:2f:53:81:dd:7a:
dd:c4:46:a8:0a:32:89:59:21:9c:dd:94:6f:e7:a9:52:b1:7f:
07:15:2c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:00 2024 by rpki-client on console-fra.rpki-client.org