Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xxcgsA16mSolx7356vY8w4ast_o.roa
File: xxcgsA16mSolx7356vY8w4ast_o.roa (raw, json)
Hash identifier: sXXr0dXwqXtQNm4hIg452sQqhHSNrF27GdELuOufszg=
Subject key identifier: C7:17:20:B0:0D:7A:99:2A:25:C7:BD:F9:EA:F6:3C:C3:86:AC:B7:FA
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xxcgsA16mSolx7356vY8w4ast_o.roa
Signing time: Thu 15 Sep 2022 02:46:08 +0000
ROA not before: Thu 15 Sep 2022 02:46:08 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.176.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:08 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C71720B00D7A992A25C7BDF9EAF63CC386ACB7FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:35:52:65:d7:d1:3e:a9:94:60:39:e8:ac:f9:
ee:0e:c7:ce:95:00:34:88:b1:76:99:4b:09:e2:65:
b2:06:00:ee:8d:0e:d8:30:06:44:78:23:15:d2:bc:
be:7c:a3:0f:89:c3:7c:ca:4f:86:55:cf:37:fd:24:
a4:74:10:01:45:82:15:8c:97:95:3a:f5:3b:19:8a:
41:0a:ce:cd:e8:bf:25:79:23:b1:ae:6c:43:36:74:
ed:5d:24:35:61:a9:78:5c:ed:64:9c:4f:37:d4:44:
c5:ef:dd:f0:3e:fd:77:a5:32:35:cc:5d:63:98:ff:
e5:e8:7c:ae:9f:84:c3:cb:dd:a5:01:81:b4:a2:9e:
2b:b2:b7:b5:56:fa:c1:f9:c2:1b:71:33:a8:86:84:
94:d9:ef:1b:89:12:05:7c:92:17:6c:32:74:e7:30:
e3:9c:9e:7f:be:73:a8:05:ba:de:37:9b:f2:66:8a:
fc:15:33:c9:0d:66:7d:90:d3:49:57:da:48:f8:24:
06:3f:b8:92:f5:f9:28:ee:83:02:6f:93:76:6c:87:
0f:53:55:de:81:ec:42:09:e0:9e:9a:e2:35:a0:41:
6d:23:57:12:52:44:eb:48:e2:67:28:18:ac:25:02:
ab:b5:59:15:3f:72:da:39:33:9b:fe:1b:ea:88:12:
b6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:17:20:B0:0D:7A:99:2A:25:C7:BD:F9:EA:F6:3C:C3:86:AC:B7:FA
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xxcgsA16mSolx7356vY8w4ast_o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.176.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:9e:26:40:51:01:3e:de:89:0b:01:93:e9:5c:d0:7a:c8:56:
36:8e:39:9a:71:6a:de:50:5f:e2:b4:c4:bf:b6:0f:3c:9b:87:
44:d3:b4:7f:0a:02:94:8b:f3:b8:bb:6f:a7:39:01:13:22:5a:
67:2f:e0:18:e7:88:a6:aa:ef:be:fb:b7:48:9e:b4:d0:d5:8e:
e0:ee:75:61:11:c3:c5:58:88:2e:97:25:1b:08:e7:ce:8e:6b:
2e:5b:32:10:9c:b5:76:2e:6a:00:3d:50:34:54:c4:87:be:1b:
03:cd:1d:c9:a8:1e:4f:41:c1:57:e0:24:da:44:0e:36:9d:37:
b0:68:5f:f9:d9:96:fa:1b:89:b0:05:9f:2a:c0:4f:b1:a5:86:
de:2e:e4:18:fa:1d:d2:35:3c:11:ad:47:20:62:bb:bf:d3:12:
2f:5e:f8:af:2e:53:a6:b7:30:33:5a:62:b6:09:d1:2b:8f:c0:
ed:bf:81:29:7f:8a:3e:d8:e0:3f:a6:f8:e4:15:17:4e:b7:59:
8b:9b:60:4e:78:34:89:12:d1:92:04:7e:3a:d8:88:c9:d9:01:
9a:4e:6d:9c:4e:0c:fd:3a:19:cd:30:d6:98:18:57:52:3d:e9:
ef:cd:83:37:50:0c:79:ff:58:92:2a:48:c5:9d:6e:f3:e6:24:
98:89:5a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:43 2024 by rpki-client on console-ams.rpki-client.org