Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1ifqkd0HwQFWHG5k8YuT-Cg3H_s.roa
File: 1ifqkd0HwQFWHG5k8YuT-Cg3H_s.roa (raw, json)
Hash identifier: F5ePqJkrl56iaetaxkxT27lvPOW3H6orYCg2OLrr2Yk=
Subject key identifier: D6:27:EA:91:DD:07:C1:01:56:1C:6E:64:F1:8B:93:F8:28:37:1F:FB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1ifqkd0HwQFWHG5k8YuT-Cg3H_s.roa
Signing time: Thu 15 Sep 2022 02:53:20 +0000
ROA not before: Thu 15 Sep 2022 02:53:20 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:20 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D627EA91DD07C101561C6E64F18B93F828371FFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cb:18:5d:c2:4b:f3:86:de:fb:53:69:b1:de:
42:01:62:14:9f:f0:f4:c3:56:3c:80:77:89:6a:42:
c3:59:cd:fe:03:82:0b:61:55:08:4d:b0:d8:df:1a:
42:11:ae:98:71:4e:77:a8:22:2a:52:20:a0:fd:1b:
ef:26:4d:9e:83:52:ec:33:f2:fe:b2:db:58:94:31:
db:74:57:9b:46:46:27:1a:26:06:21:ab:ad:f2:11:
f0:73:6f:69:90:2a:db:d5:2c:53:d0:80:c8:3a:67:
cb:4c:df:4e:08:e5:b7:2c:b8:14:e3:a9:e1:4e:4f:
4b:5a:f9:c9:88:2a:65:4c:97:c8:dd:82:d0:ac:1c:
df:18:0f:8b:d7:12:39:0d:14:3c:31:23:35:d9:af:
c9:53:26:d4:3f:a9:23:ab:2d:fd:24:ec:11:c1:1a:
8b:ae:77:ab:90:67:70:7d:66:6f:5e:59:90:fb:8b:
da:25:95:59:69:d4:81:e1:f4:56:7a:46:c6:00:e0:
1f:a5:41:f8:28:f9:30:22:4b:b5:28:fd:d9:34:5d:
b0:51:39:c1:c8:77:5f:ca:e8:2e:89:c4:7b:df:33:
e5:79:e5:9d:01:d4:06:67:2d:e2:cd:db:b0:04:9b:
d4:03:d9:b9:30:f3:01:37:61:04:1b:e6:2e:4e:bb:
18:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:27:EA:91:DD:07:C1:01:56:1C:6E:64:F1:8B:93:F8:28:37:1F:FB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1ifqkd0HwQFWHG5k8YuT-Cg3H_s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.0.0/20
Signature Algorithm: sha256WithRSAEncryption
23:10:f6:af:98:0a:b6:f4:14:5c:3f:07:8d:52:fa:fb:18:a4:
a3:d8:39:bd:dc:50:dd:0e:60:90:50:9a:5e:93:14:d9:2f:99:
83:63:1b:73:a0:dd:83:09:70:a1:de:87:01:d0:29:c6:a5:e8:
13:2d:63:c6:71:c4:c8:1f:5a:66:f5:5c:4b:88:b8:b7:e2:8e:
24:3e:72:0f:73:64:4b:08:16:9b:17:37:17:9b:92:8a:0c:f9:
f3:86:8e:55:92:50:1d:fd:a0:d3:67:a4:82:01:14:2b:15:b5:
e9:1c:39:bc:b8:82:48:3e:34:38:87:bc:64:62:f7:6e:91:98:
a4:b0:f3:20:ee:67:50:3b:04:f6:54:5d:67:7f:95:f5:df:13:
1a:1e:ea:dd:5b:4a:bb:31:bc:63:ec:71:bf:32:d8:7d:84:35:
be:62:5c:e9:b3:a5:41:8b:70:ee:15:a0:e4:6a:3f:9c:fd:7a:
12:da:c0:2f:a3:22:bf:f8:12:ac:d6:89:fb:c2:fa:b2:e8:52:
24:ea:75:89:ad:f2:55:20:c0:09:4c:89:20:78:8e:41:50:08:
95:e0:39:06:1f:5b:b1:d2:67:e8:3f:de:f0:70:a2:1b:99:30:
98:51:55:1b:99:1e:aa:a1:8e:e1:30:e5:40:2b:53:65:fc:48:
0a:5d:12:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:46 2024 by rpki-client on console-fra.rpki-client.org