Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zvS7aU6wu7uo95ff32F-dJX_eZk.roa
File: zvS7aU6wu7uo95ff32F-dJX_eZk.roa (raw, json)
Hash identifier: 6hLhBTefvxZVfGwOenP+7QV641td61z+2Dvzg76WMSg=
Subject key identifier: CE:F4:BB:69:4E:B0:BB:BB:A8:F7:97:DF:DF:61:7E:74:95:FF:79:99
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zvS7aU6wu7uo95ff32F-dJX_eZk.roa
Signing time: Thu 15 Sep 2022 02:46:12 +0000
ROA not before: Thu 15 Sep 2022 02:46:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:12 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=CEF4BB694EB0BBBBA8F797DFDF617E7495FF7999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3d:57:e6:00:36:fa:7a:e1:99:2f:67:98:7d:
d0:cc:5f:1a:4c:22:b5:d8:2f:c2:3f:14:09:92:74:
50:0c:10:0d:a9:e3:e8:d8:46:ef:55:b9:83:10:41:
64:19:05:3e:6f:10:96:88:38:38:e7:7e:62:1d:79:
60:66:b3:8c:a0:a6:82:03:6d:e2:a7:ae:cd:e2:61:
9f:c6:c3:4d:3d:34:e0:c8:ca:93:96:45:d5:2a:50:
f0:6a:cf:8b:aa:77:bb:7e:88:37:c1:3d:63:c6:92:
5a:69:41:96:c2:49:6e:d5:14:fe:eb:b8:ae:b3:bc:
a3:36:80:14:cf:06:03:44:9a:44:09:ef:83:f8:b3:
ef:48:7e:18:ae:4d:c5:f4:8b:e8:8b:ef:4c:07:a1:
8b:22:1c:f5:62:68:2d:e4:1c:56:50:2e:8c:51:2a:
ab:b5:63:2b:03:f2:a3:45:b6:5d:3e:d3:a2:d1:5f:
54:27:b8:5d:18:b8:a6:85:06:c4:16:d8:86:5c:ce:
3f:b4:47:17:53:0a:d1:92:68:e4:47:96:7b:e9:b8:
96:7c:ba:e0:2f:41:53:92:2e:9c:36:42:89:d9:20:
3b:30:ce:04:13:fb:d2:bc:28:9e:4b:f5:68:80:ca:
23:f3:54:d7:4c:9c:5a:44:c8:0b:0f:36:b9:cf:4c:
be:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F4:BB:69:4E:B0:BB:BB:A8:F7:97:DF:DF:61:7E:74:95:FF:79:99
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zvS7aU6wu7uo95ff32F-dJX_eZk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.144.0/20
Signature Algorithm: sha256WithRSAEncryption
80:9c:db:b5:b6:31:58:cd:18:0e:db:ba:ef:7d:5d:62:57:af:
1b:05:1c:89:bd:56:f0:15:37:5b:f8:b0:bc:e5:d3:be:f1:5e:
00:e1:e8:4f:a7:73:19:4c:a3:61:35:f7:fc:32:b4:6c:b9:e9:
61:1a:7c:82:c1:0d:42:7e:7b:58:d4:c4:a2:08:06:2e:6c:57:
7e:14:cd:c4:79:4b:6c:32:59:6f:b6:d0:b3:c7:a9:9f:d3:21:
c5:d8:22:b8:df:f9:bc:19:22:64:18:4a:9e:21:1a:c0:30:7d:
e6:cc:96:00:bd:98:76:a0:c9:a1:c6:87:98:e1:cb:ca:ae:9d:
9c:e2:b7:14:2d:89:58:21:84:c0:c4:09:61:04:28:33:8e:a0:
67:72:7c:b5:57:91:c0:06:d6:71:21:e1:ef:25:3a:57:2c:6e:
8d:63:7b:be:c1:6b:f2:db:14:cb:32:26:20:af:37:c6:06:21:
37:f3:04:12:58:39:87:ff:00:a1:b1:07:f3:1f:32:40:94:42:
b9:98:9e:41:ef:21:b5:15:f9:94:cc:91:49:e0:cb:b2:c4:88:
78:ea:91:e7:e9:23:73:52:34:e6:5b:97:b0:5c:4d:cf:db:2f:
7a:95:8a:78:06:f6:b8:cc:e8:f0:bd:4e:72:97:2b:99:69:0b:
b5:e2:d6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:43 2024 by rpki-client on console-ams.rpki-client.org