Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/38Q_G76JI1DBwB31uafYIKcZPxM.roa
File: 38Q_G76JI1DBwB31uafYIKcZPxM.roa (raw, json)
Hash identifier: 59Nm283mg6+94waNEAsvedWzgsgHmz58FAQJocxUml0=
Subject key identifier: DF:C4:3F:1B:BE:89:23:50:C1:C0:1D:F5:B9:A7:D8:20:A7:19:3F:13
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2062
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/38Q_G76JI1DBwB31uafYIKcZPxM.roa
Signing time: Fri 25 Nov 2022 04:38:38 +0000
ROA not before: Fri 25 Nov 2022 04:38:38 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.223.64/26 maxlen: 26
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8290 (0x2062)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:38 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=DFC43F1BBE892350C1C01DF5B9A7D820A7193F13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:45:5c:3c:70:35:8e:8c:88:ae:7d:06:ad:fe:
a2:af:fb:c4:bf:c3:2b:a6:75:44:99:78:47:05:4a:
43:8b:9c:01:ba:9a:68:ce:16:dd:3d:da:59:b1:5d:
c2:ce:79:87:fc:a3:a4:dd:2c:e6:6c:c9:3f:6a:f8:
04:e3:17:2c:1c:b0:d7:95:94:7d:ec:77:54:93:ed:
ab:0c:87:71:64:19:56:22:0a:32:68:e1:c0:3b:14:
da:19:0e:c9:86:8b:44:97:56:eb:1d:51:4c:cf:10:
54:89:9f:63:27:1f:e9:11:c4:46:af:f7:8b:8d:7c:
73:bc:ee:4b:2b:6d:15:54:fa:45:68:f4:15:84:06:
db:d8:d8:d7:38:c9:7f:89:0a:05:e1:cf:a6:cd:52:
c4:cd:5e:9a:a4:af:90:33:37:2b:e9:3b:22:d2:13:
20:44:6c:e1:a3:78:9a:14:5f:af:b9:70:a1:77:bb:
00:ad:f2:52:93:64:66:68:c3:3f:c6:32:99:d3:8c:
a7:ed:fa:86:ab:ba:7c:aa:b5:aa:d0:54:b7:49:eb:
ff:09:f1:8a:ef:4c:26:97:5f:e9:71:d9:ae:e3:4f:
29:de:5d:29:85:13:ba:75:7a:2e:fb:58:34:54:e7:
58:dd:d9:4c:bc:ee:2a:1a:29:38:f9:d6:d0:0c:3c:
3c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C4:3F:1B:BE:89:23:50:C1:C0:1D:F5:B9:A7:D8:20:A7:19:3F:13
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/38Q_G76JI1DBwB31uafYIKcZPxM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.223.64/26
Signature Algorithm: sha256WithRSAEncryption
99:1b:82:bb:53:cb:35:3c:db:96:83:2d:84:48:f1:f4:61:37:
e0:6d:70:63:79:6f:76:b7:25:0e:d9:b9:8a:82:a0:8b:07:40:
b3:3b:9b:3e:03:19:7d:82:7a:78:42:e9:ef:80:98:b0:21:16:
0a:6d:81:16:52:4d:60:43:bd:27:44:44:2c:30:32:0e:af:ef:
c4:a3:0a:60:02:be:90:4c:bf:c1:93:8c:42:d8:d0:bf:7b:04:
10:0b:a1:49:36:60:51:32:3f:e1:eb:dc:51:9f:85:52:3d:5e:
7e:5a:54:ba:f9:0d:e3:d0:91:c3:ad:66:32:8a:b3:36:be:d7:
99:5a:96:7b:5d:75:2d:67:b8:b0:da:c2:2c:9d:25:9d:be:6f:
5d:20:51:7d:ba:9f:ee:52:9f:d0:40:ba:51:e8:1c:a7:ba:57:
0e:15:dc:c9:65:e0:d3:f8:ab:f8:d7:36:1b:75:87:1b:79:6a:
ab:75:05:b7:d3:b9:12:87:7a:a0:9a:c3:32:ea:e7:15:e7:c4:
07:07:c2:b2:68:3b:4a:0a:7d:38:78:29:29:2d:b3:22:70:4b:
fb:c9:e6:78:8b:c0:a7:c3:ea:a9:42:5c:40:13:ee:7a:40:f6:
73:14:c7:c4:76:eb:db:8c:9f:f0:6f:52:b3:ef:fd:ff:93:2a:
bd:c4:7b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:47 2024 by rpki-client on console-fra.rpki-client.org