Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4BjSPKhzHur_YiPVeKXw95iWtkU.roa
File: 4BjSPKhzHur_YiPVeKXw95iWtkU.roa (raw, json)
Hash identifier: I3b8QCRZRU2vYD/ykeqkp9CdmSZYyWpc98mcEmH2wc4=
Subject key identifier: E0:18:D2:3C:A8:73:1E:EA:FF:62:23:D5:78:A5:F0:F7:98:96:B6:45
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1715
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4BjSPKhzHur_YiPVeKXw95iWtkU.roa
Signing time: Sun 07 Feb 2021 12:16:31 +0000
ROA not before: Sun 07 Feb 2021 12:16:31 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.192.224.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5909 (0x1715)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:16:31 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=E018D23CA8731EEAFF6223D578A5F0F79896B645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:58:36:dc:e7:c9:a3:e8:fb:6a:4d:dc:ca:bb:
63:ef:a3:64:fb:60:0c:35:6e:6c:5a:45:48:c3:96:
de:23:9a:34:a9:02:53:b3:5c:b5:58:00:b4:82:3b:
44:f4:61:27:2f:d4:a3:a7:8d:48:f8:49:e1:3d:27:
a7:32:a0:4b:6e:40:94:ea:cc:88:89:b3:2f:75:8d:
d6:6d:10:62:6f:5e:4e:65:1a:7b:0a:52:c8:2b:f6:
9a:b4:21:93:4e:62:9a:c6:09:2a:a0:1e:0b:23:9a:
30:20:39:3d:3e:8e:77:c0:3b:64:70:ba:4b:7a:88:
12:7d:78:3c:38:a3:f1:c2:98:63:e6:68:fc:70:43:
c7:8b:36:4c:55:9c:61:21:34:64:a9:90:85:14:63:
e3:e3:bb:e0:f9:f8:45:88:0d:43:49:4c:f0:5b:05:
5c:58:23:83:92:ef:71:c6:81:f2:b9:0f:ba:0c:cb:
c4:ac:da:e8:db:a5:e3:46:c6:c0:c4:5b:2c:cc:d3:
18:2f:1f:85:b8:4a:47:b3:f8:bf:f6:83:9b:06:33:
fb:6f:2c:b6:33:67:b9:54:de:2c:4d:50:7a:6e:41:
88:20:5c:42:83:79:91:ee:37:32:1f:cc:66:73:ea:
f7:16:39:b4:48:c9:b0:9b:90:6c:39:52:cc:f5:a6:
c3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:18:D2:3C:A8:73:1E:EA:FF:62:23:D5:78:A5:F0:F7:98:96:B6:45
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4BjSPKhzHur_YiPVeKXw95iWtkU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.224.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:b7:95:06:95:8e:3e:a2:05:eb:75:77:69:ac:a6:81:16:2e:
57:f4:c2:34:77:f7:fb:9b:5b:56:69:6b:6d:9b:09:9b:ff:e3:
a1:8d:62:f6:b6:85:1a:c7:4b:1f:f7:c1:29:7e:aa:91:d1:02:
96:e8:d9:e5:e7:6e:78:8d:4f:aa:b5:61:64:72:dc:4e:c0:c4:
28:16:0f:0a:8d:1f:1c:20:7f:4d:b8:cb:d8:70:c2:f1:7c:43:
7b:a0:85:e4:58:4c:4f:db:cc:dc:51:59:e4:18:65:be:83:76:
b1:d8:38:48:e5:c9:c5:49:73:50:1a:ae:a8:f3:69:7d:75:02:
f2:0f:a7:5c:69:1d:c0:2f:d1:7e:d6:78:c0:17:73:54:79:fe:
8f:4a:1a:ad:d5:68:1c:0a:fa:52:0d:ea:4c:48:22:b3:2a:1e:
49:be:b5:fd:54:96:1c:98:e3:c4:e0:3f:3d:10:45:2e:00:64:
a4:b0:f3:0a:50:9e:1c:05:ef:7d:04:31:72:94:5c:5d:6f:65:
ec:22:52:09:52:43:1c:7f:2d:a8:87:ab:82:c1:be:4e:93:6b:
7d:de:69:40:a8:30:52:31:2d:1c:ca:64:ec:61:b1:34:8d:74:
21:42:7c:2c:19:b8:70:89:e8:74:0d:64:56:7d:da:f2:37:98:
50:13:3f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:08 2023 by rpki-client on console-ams.rpki-client.org