Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4iARW3jbs66cjHk175x-tSYxmBU.roa
File: 4iARW3jbs66cjHk175x-tSYxmBU.roa (raw, json)
Hash identifier: PWO1jiZPWsY1LPcphQsmvGwLunPmCPQAehHCLrz49xA=
Subject key identifier: E2:20:11:5B:78:DB:B3:AE:9C:8C:79:35:EF:9C:7E:B5:26:31:98:15
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2063
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4iARW3jbs66cjHk175x-tSYxmBU.roa
Signing time: Fri 25 Nov 2022 04:38:39 +0000
ROA not before: Fri 25 Nov 2022 04:38:39 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.232.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8291 (0x2063)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:39 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E220115B78DBB3AE9C8C7935EF9C7EB526319815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5e:ce:41:2e:fb:61:e4:f3:02:d8:c2:ff:69:
58:41:a7:8d:db:25:ed:f6:c8:7e:a6:02:10:57:fb:
f3:39:25:c2:d8:c9:a1:65:c3:6c:af:4f:30:c6:ff:
98:df:3a:ca:0c:0e:2b:ac:9a:12:86:69:5a:61:17:
e9:0c:6b:a6:b7:4e:73:e8:56:eb:f9:78:0c:6c:49:
f5:00:37:19:0c:b6:22:b9:af:f0:6d:98:15:42:e3:
7e:c1:63:af:a1:18:cb:90:d3:06:b0:88:8e:51:97:
45:10:75:ca:0a:25:00:65:91:98:f7:eb:1f:d6:80:
17:c3:8d:ef:41:58:f8:fd:b7:c8:a7:e5:0b:1d:3f:
41:66:f0:19:ba:26:d3:07:f7:b4:65:a7:8e:39:71:
4e:1d:cc:17:54:45:a3:40:03:89:a2:1b:b7:40:3a:
23:93:3b:95:6f:6e:de:c5:0a:14:61:b6:d8:6a:77:
cb:55:53:c4:5f:ee:8b:fc:49:b8:c3:9f:98:b8:7d:
28:9b:15:69:ac:b8:c1:4e:e8:c9:66:fc:9d:7d:3d:
8b:47:4c:d5:5e:41:b8:09:ba:96:b2:e7:3f:b0:51:
00:6c:03:eb:71:f8:14:e8:b9:73:f4:be:63:22:0e:
ce:83:bd:3c:0b:a8:31:79:3e:ea:b3:96:e2:88:dd:
2f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:20:11:5B:78:DB:B3:AE:9C:8C:79:35:EF:9C:7E:B5:26:31:98:15
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4iARW3jbs66cjHk175x-tSYxmBU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.232.0/22
Signature Algorithm: sha256WithRSAEncryption
38:f5:c9:b8:23:cb:e0:c6:42:80:ee:b3:8c:90:33:e9:c4:43:
8e:26:8b:44:e5:86:4f:d1:86:73:7a:c2:bd:7c:69:6e:da:21:
b4:fd:85:5f:99:be:e3:0d:9c:cc:2b:05:45:53:4b:20:a7:8e:
2b:68:bf:e0:3b:d9:22:00:2d:8b:9a:01:b4:52:f1:f2:85:fb:
54:4d:d9:85:09:43:c0:b7:5f:93:62:91:b8:ec:bb:80:c8:92:
0b:79:5f:d6:fd:bc:6c:b1:25:c0:7c:22:66:e2:2b:53:a6:0c:
b5:30:5a:22:b9:0a:b4:4d:f4:bb:09:6b:4d:e2:5d:26:6a:a1:
0c:9f:b1:e7:fc:d1:b1:5c:54:4b:33:40:94:5f:f8:4b:d5:ee:
92:54:da:3b:85:7a:0b:56:34:08:00:32:fb:5b:5c:35:7d:21:
2c:89:8c:90:1b:cb:fc:cb:c2:71:11:e9:f5:3c:e2:31:4b:a8:
15:84:9a:b1:35:f9:c9:b5:4d:07:7b:bf:84:30:29:c0:1a:e9:
fe:cd:0b:e0:90:99:41:2d:63:bf:bb:4d:aa:b5:5a:b2:d3:8e:
e3:84:b1:d7:7c:d7:29:c7:ee:e9:bc:ce:92:82:2e:cc:a1:97:
df:0c:aa:8f:02:b7:88:48:8f:f1:db:b0:3b:c4:08:75:f1:5f:
ed:57:c9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:47 2024 by rpki-client on console-fra.rpki-client.org