Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xvLDCNygIheCBPo_xgXKp0kRyHA.roa
File: xvLDCNygIheCBPo_xgXKp0kRyHA.roa (raw, json)
Hash identifier: nodda/2777AlqodSQXDozPR5xxcg4h8d3DHixCnv53E=
Subject key identifier: C6:F2:C3:08:DC:A0:22:17:82:04:FA:3F:C6:05:CA:A7:49:11:C8:70
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 15C1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xvLDCNygIheCBPo_xgXKp0kRyHA.roa
Signing time: Sun 07 Feb 2021 12:06:21 +0000
ROA not before: Sun 07 Feb 2021 12:06:21 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.72.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5569 (0x15c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:06:21 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C6F2C308DCA022178204FA3FC605CAA74911C870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9a:de:56:67:c3:c5:f6:90:bf:f0:3b:15:ba:
7a:5f:d0:98:ec:3f:0e:d6:50:59:92:fd:67:e7:6b:
c9:a3:fe:02:c8:0a:d8:19:2a:49:b2:c0:c8:39:43:
0b:33:f8:d0:b7:0a:74:a6:fe:7a:d6:8d:8a:5c:d8:
58:d9:69:17:82:fe:08:8b:0f:97:ea:1b:0f:53:40:
83:b9:2b:59:8e:ca:61:26:15:90:cf:13:3b:69:35:
b7:69:4c:0c:6d:22:b4:df:c5:52:0a:59:00:f1:d8:
84:11:f8:58:f8:d2:11:fe:e8:bf:24:70:4a:50:ee:
ea:46:92:d8:f1:92:c5:ad:aa:1d:25:13:6c:ce:1f:
e3:fc:df:b9:ab:35:33:1c:31:a4:16:c1:5f:9f:ed:
f0:69:dd:75:3d:4a:82:1b:e0:80:75:ef:7b:03:59:
f2:25:4d:20:64:ac:6e:ff:ae:7c:61:04:de:aa:38:
9e:8a:18:c9:73:7d:59:82:6b:d6:bd:e0:83:01:f3:
03:5a:be:c3:65:f5:e7:e2:eb:ac:8e:3b:2f:f5:3e:
f7:d1:25:9c:64:87:a3:75:c5:0c:42:78:6e:29:c2:
af:73:33:83:ae:03:d5:32:6b:5a:9e:6e:92:eb:0c:
69:a7:aa:cd:6f:d4:9c:58:57:e6:51:28:c4:08:ae:
96:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F2:C3:08:DC:A0:22:17:82:04:FA:3F:C6:05:CA:A7:49:11:C8:70
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xvLDCNygIheCBPo_xgXKp0kRyHA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.72.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:d8:f9:41:79:6b:bc:c5:df:36:fe:5c:67:ad:a3:ce:41:b3:
70:1a:59:c6:df:38:e7:3d:f3:e2:f3:1b:ba:83:9e:3e:43:ba:
5f:95:b3:fb:4d:fa:fa:de:27:e7:5d:b0:c5:a8:f9:9a:dc:eb:
01:24:a2:2f:28:37:ea:b8:ef:b7:17:1b:f8:42:13:11:2b:68:
e6:a5:ae:6d:71:29:86:c7:2b:02:42:f6:da:6f:fd:2a:5c:0a:
69:1a:b3:e5:c5:4e:47:7a:4d:db:17:e6:62:63:db:47:46:9e:
9e:78:d8:f2:d8:f9:ef:c9:12:59:ad:53:20:15:4f:06:4b:f0:
97:30:b6:e8:1a:9b:11:44:d5:6a:7f:43:62:f9:e8:23:79:38:
61:5f:ba:46:f6:45:8f:01:02:5c:c7:6c:4a:a2:91:70:c2:cb:
28:04:11:19:dc:a4:87:79:65:16:26:43:70:b8:0b:b5:78:a9:
5c:5a:40:4a:09:7f:8b:ae:86:42:3f:e7:09:69:58:c4:57:f0:
f7:0b:37:58:f5:0d:59:b6:b5:f8:fe:9b:e5:52:f1:9d:3f:75:
3b:75:66:e8:72:34:7c:b8:54:46:58:94:58:a7:5f:31:02:cb:
a7:a5:42:0c:d9:29:18:f4:4e:1a:3d:6e:d0:5e:34:31:48:19:
41:98:1d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:00 2024 by rpki-client on console-fra.rpki-client.org