Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2C3H8SfOOc4_qC1MV2rwraPriGI.roa
File: 2C3H8SfOOc4_qC1MV2rwraPriGI.roa (raw, json)
Hash identifier: JyF0QRJ4BRxDTFUPHfLe+TRy5bKNdRctgikkL/EYAc0=
Subject key identifier: D8:2D:C7:F1:27:CE:39:CE:3F:A8:2D:4C:57:6A:F0:AD:A3:EB:88:62
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2C3H8SfOOc4_qC1MV2rwraPriGI.roa
Signing time: Thu 15 Sep 2022 02:53:28 +0000
ROA not before: Thu 15 Sep 2022 02:53:28 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.64.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:28 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D82DC7F127CE39CE3FA82D4C576AF0ADA3EB8862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5f:d8:60:18:a0:14:db:47:10:d0:62:d3:07:
3d:b0:67:39:7f:50:81:85:12:d9:d1:09:9e:6e:c6:
a1:21:1d:2e:a1:d8:02:f8:68:5e:b1:e0:d9:e4:45:
55:4a:3c:48:e7:d0:ef:5d:b4:05:dc:86:e0:03:20:
84:ee:21:e7:14:e3:39:ee:42:82:87:dc:0c:c3:09:
73:f1:c1:7d:fa:21:8f:0c:45:dc:94:e3:4c:7c:25:
63:ee:10:f0:81:98:7f:18:d0:2c:bc:09:5d:fa:c0:
24:24:5c:13:d0:6e:d7:7c:48:99:1e:62:b0:99:4f:
18:dc:43:f5:53:a9:65:be:dc:b0:14:99:c5:02:0f:
70:9e:ff:92:66:59:cf:f4:86:54:d6:95:96:31:73:
54:b3:4b:13:6c:ec:a4:2e:25:9f:79:56:e4:58:82:
07:6c:df:31:e6:ea:83:45:e2:d6:fb:68:9b:98:e2:
bf:63:3a:86:0a:72:22:95:1b:f2:2a:85:dc:7c:ba:
74:c8:05:ac:96:49:17:60:23:fb:ff:c4:53:88:6b:
75:df:dc:79:a8:9c:86:f6:aa:27:6c:32:08:2b:3d:
81:f3:8c:78:12:c0:fe:53:6a:06:9d:ba:cf:e6:a9:
f5:48:13:7a:3b:8b:c1:20:4a:3e:08:b0:bf:d9:4d:
70:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:2D:C7:F1:27:CE:39:CE:3F:A8:2D:4C:57:6A:F0:AD:A3:EB:88:62
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2C3H8SfOOc4_qC1MV2rwraPriGI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.64.0/21
Signature Algorithm: sha256WithRSAEncryption
3f:2a:d1:2e:4b:f0:4c:85:44:5a:34:91:a1:53:91:00:2b:ea:
80:77:9a:ef:29:59:c2:b7:cf:16:b3:98:d3:e9:c3:6e:16:a8:
7b:a9:69:3d:3a:8e:53:e2:96:2a:02:c1:b8:8e:d2:e2:9c:b6:
54:f1:4b:ba:f7:40:af:bc:bf:22:6b:31:8b:c1:6b:4a:a6:ee:
2a:ac:33:0a:53:47:9a:d4:d5:b4:93:77:d6:9c:63:e7:37:b5:
ee:c0:20:56:96:88:eb:2a:eb:e9:57:cc:07:2e:5f:b4:6a:d8:
f2:b1:80:36:ab:f7:1e:2e:98:c3:b8:53:da:58:91:26:ca:18:
23:5c:80:1d:8d:c7:76:ed:7b:4b:c9:87:35:fd:13:7b:c0:dc:
a6:68:2a:4f:f4:66:91:68:9f:38:ec:89:19:3b:13:48:97:f4:
fa:d5:e4:00:8d:2f:30:3a:b4:cc:56:5c:96:05:80:1c:18:f4:
da:ed:d4:40:40:3f:ae:91:51:68:10:4a:ac:bb:21:37:cd:9c:
64:4c:6b:dc:04:b5:37:42:07:a1:d8:7c:2a:9a:c8:f1:79:0d:
05:aa:3c:20:1b:b8:82:ff:1f:08:15:d6:1d:7d:4e:e7:16:bb:
a8:94:30:8d:19:01:fc:96:e0:84:7a:6f:33:4e:15:28:73:58:
84:9e:68:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:46 2024 by rpki-client on console-fra.rpki-client.org