Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4Bra27UcwbFbqoVh-Hrt4Qws6d8.roa
File: 4Bra27UcwbFbqoVh-Hrt4Qws6d8.roa (raw, json)
Hash identifier: mcIZkqubHnktYu1AUa7TrCs1hweCL0HJGCApeCUi8+U=
Subject key identifier: E0:1A:DA:DB:B5:1C:C1:B1:5B:AA:85:61:F8:7A:ED:E1:0C:2C:E9:DF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4Bra27UcwbFbqoVh-Hrt4Qws6d8.roa
Signing time: Thu 15 Sep 2022 02:54:03 +0000
ROA not before: Thu 15 Sep 2022 02:54:03 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.88.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:54:03 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E01ADADBB51CC1B15BAA8561F87AEDE10C2CE9DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:64:00:4b:dd:ee:ca:20:56:d9:e0:86:c9:89:
b7:be:2b:36:47:17:85:97:0e:1d:1c:25:8d:d1:02:
ea:b1:89:44:89:e7:59:89:fb:89:d8:ce:38:bb:0e:
d8:4c:91:13:f1:df:c3:9b:68:a6:d4:04:30:7b:80:
73:22:5f:13:20:6c:88:c6:e4:f2:16:15:20:31:f0:
a3:84:ed:2f:11:10:38:2a:4f:2a:dd:36:7e:51:08:
cc:7e:1d:4e:69:4a:69:bf:46:29:5a:23:51:be:18:
24:18:db:b2:d3:8d:ec:9e:b9:d4:1b:59:f6:41:f5:
fe:03:87:42:24:26:f2:88:d0:a2:00:7a:73:58:4d:
9a:04:74:cd:b8:bc:86:f8:d8:de:c7:d4:38:8c:58:
c5:40:16:00:6c:c3:2a:ce:22:9c:54:ac:d3:be:71:
25:ad:d7:f6:37:6e:63:cf:d2:9f:46:cc:22:d4:30:
64:95:2b:5b:b4:cf:b3:c8:d2:6b:77:65:e1:e8:9c:
ed:0d:c3:91:4b:05:76:02:98:c5:e8:56:b4:19:fb:
95:88:74:4e:bc:07:5f:49:66:95:f1:09:16:f3:3f:
ca:5e:f0:53:82:e8:39:a1:9a:b8:2d:0c:a1:f2:17:
75:99:1b:15:f4:58:09:59:f1:d3:23:45:5f:d2:bc:
8f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:1A:DA:DB:B5:1C:C1:B1:5B:AA:85:61:F8:7A:ED:E1:0C:2C:E9:DF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4Bra27UcwbFbqoVh-Hrt4Qws6d8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.88.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:07:fc:06:0c:ef:a2:81:0c:f6:c3:74:7e:c3:30:77:76:e0:
d0:fc:a8:74:6e:ca:04:63:75:ed:09:1c:7d:a4:d7:53:14:7e:
25:ed:21:50:2d:ea:89:8b:c4:a8:0b:59:56:f9:6e:62:25:b1:
e1:5d:ba:56:40:e4:a6:c6:89:73:f9:a4:85:2c:ab:30:fa:af:
2f:6e:ca:01:4f:02:56:19:44:0f:e4:c2:3d:ef:f9:0e:7f:e5:
1d:24:24:38:77:37:cc:4b:b3:5d:48:01:60:17:50:a9:e4:39:
ab:73:d5:5b:f4:05:69:5d:56:04:fb:b6:26:23:5f:9b:9d:26:
5a:ab:68:a8:65:5e:ea:2b:26:c8:f1:71:8e:9b:8f:5c:cc:8e:
50:74:47:bb:5e:ee:a1:58:e0:d9:ac:2d:e2:7c:fe:6b:24:8e:
89:65:40:7d:75:98:f4:d8:47:dd:58:fb:4b:cd:1b:dc:fa:3d:
60:9b:ee:ea:7f:20:50:1f:dc:c1:93:47:f8:57:c8:dc:33:ce:
c2:55:01:47:48:65:ba:98:bc:75:04:e5:6d:48:69:20:1d:d2:
1b:6c:ee:4f:5c:35:b9:9e:fa:dd:ec:bf:a3:75:38:57:6d:9d:
c0:91:fb:ce:86:dd:d1:c3:f2:9d:a1:19:96:12:bd:72:c2:a6:
93:5b:34:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:47 2024 by rpki-client on console-fra.rpki-client.org