Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yut_sPmp8aV0f4gndSHR0ngRi0Q.roa
File: yut_sPmp8aV0f4gndSHR0ngRi0Q.roa (raw, json)
Hash identifier: K61UuE8EFL9e3PMlPeUZAfsLYsKyOro63JNXmWu+CNI=
Subject key identifier: CA:EB:7F:B0:F9:A9:F1:A5:74:7F:88:27:75:21:D1:D2:78:11:8B:44
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 21AC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yut_sPmp8aV0f4gndSHR0ngRi0Q.roa
Signing time: Fri 25 Nov 2022 04:40:11 +0000
ROA not before: Fri 25 Nov 2022 04:40:11 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8620 (0x21ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:11 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=CAEB7FB0F9A9F1A5747F88277521D1D278118B44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1e:24:0d:b4:04:d4:a2:89:e2:93:33:dd:2e:
03:e0:3d:29:9a:3d:57:59:57:06:43:33:7c:76:bf:
03:8e:4b:33:16:4d:b9:26:c9:7f:62:f9:6b:30:c9:
e0:80:cc:92:a5:bb:b9:15:25:20:86:c7:33:cc:df:
91:f2:39:21:ff:ea:9f:dc:0f:70:fc:1f:6b:74:ca:
e0:1d:fb:27:9f:98:7e:7f:3c:fe:a7:a9:69:cd:76:
b7:90:97:cb:0a:3e:b4:4b:25:2a:d7:40:af:f0:57:
01:a1:83:e6:46:00:45:ed:82:30:93:d5:d9:98:88:
62:e7:a1:04:7e:a6:ba:b6:1a:7d:7d:7f:09:02:6e:
46:3c:1f:32:0b:ca:05:9f:ed:30:1a:7b:eb:91:52:
55:72:be:10:e9:9e:7c:34:7c:91:a7:63:73:e2:64:
c0:ea:33:9c:5b:8b:14:e2:44:3f:70:fb:e5:d3:3f:
d0:6f:e7:90:48:3b:8e:29:c3:80:48:82:55:56:6b:
34:24:be:0f:95:01:af:0e:72:2a:29:f6:37:04:36:
45:e4:80:a8:54:30:2e:90:88:79:a5:b4:69:6f:7d:
92:c0:2d:f6:27:a4:f5:32:49:44:be:68:50:71:d4:
e3:8b:f1:a3:0f:f4:2e:0e:16:5d:07:0f:5a:a0:a6:
a8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:EB:7F:B0:F9:A9:F1:A5:74:7F:88:27:75:21:D1:D2:78:11:8B:44
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yut_sPmp8aV0f4gndSHR0ngRi0Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.96.0/20
Signature Algorithm: sha256WithRSAEncryption
9b:17:cd:7b:18:be:34:17:e7:b5:f2:b8:63:b4:7f:9d:7e:5e:
f5:e5:6e:d8:2d:89:36:b1:4e:65:c4:c6:0e:9e:7d:05:ec:2f:
db:ae:22:37:11:5b:8c:28:bb:96:1a:8b:6d:ce:29:df:b1:58:
d0:b4:ec:55:0a:10:19:4b:de:d9:dd:af:06:ff:68:b1:d6:60:
bb:16:a6:2e:bf:e5:ee:f9:b2:a7:21:43:70:7c:84:f7:77:df:
8d:5c:9b:4a:1d:81:24:05:ac:e2:75:3b:c3:78:e6:ab:77:dc:
61:bc:fe:bb:4b:b8:d4:1e:f6:ba:5b:01:40:ba:57:57:ee:f5:
c6:04:1c:97:55:0a:aa:fa:93:4d:4b:a5:08:5a:dc:7c:f6:85:
ae:5c:a6:a0:ce:4c:49:71:34:70:b7:64:d6:99:d2:8e:e2:2b:
d6:50:96:80:50:5e:fc:62:a4:26:57:26:d7:0c:93:6c:3f:bd:
60:64:bd:cf:a6:36:d2:33:16:3c:51:99:63:f6:38:86:82:db:
2f:61:7b:94:4c:7d:64:90:3c:02:bc:1e:f8:95:fc:dc:48:09:
6c:3e:f7:aa:64:e7:d6:10:5f:2e:8a:50:26:9a:19:f7:69:dc:
f0:6e:62:26:9e:6d:fd:3f:7d:06:a6:26:c2:83:6b:8d:d7:6b:
08:8d:85:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:43 2024 by rpki-client on console-ams.rpki-client.org