Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5-IXZQE7UUuaDcB6zo-TKl6TJqU.roa
File: 5-IXZQE7UUuaDcB6zo-TKl6TJqU.roa (raw, json)
Hash identifier: 0b5hcJwA9UrA3gRxDg42HYtUo7pfcYebtuIfsm/z9MU=
Subject key identifier: E7:E2:17:65:01:3B:51:4B:9A:0D:C0:7A:CE:8F:93:2A:5E:93:26:A5
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1B0C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5-IXZQE7UUuaDcB6zo-TKl6TJqU.roa
Signing time: Wed 29 Sep 2021 02:46:04 +0000
ROA not before: Wed 29 Sep 2021 02:46:04 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.194.160.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6924 (0x1b0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:04 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=E7E21765013B514B9A0DC07ACE8F932A5E9326A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:de:eb:2a:b1:ea:46:45:0a:4c:96:2e:4a:b1:
1e:34:20:a5:42:83:5c:ba:69:c2:b3:54:7e:f4:59:
38:8d:22:2a:ef:67:35:fb:ea:62:a3:f1:07:8a:90:
a5:08:41:96:b8:c5:57:bb:6c:ca:ca:72:16:d1:03:
fc:58:03:2e:c3:ea:ed:2d:a9:fe:6f:04:f8:4d:fe:
62:af:7a:c6:02:6b:e1:e0:ec:d2:59:60:63:6c:07:
09:6f:8b:4d:31:f9:eb:5f:06:e7:a0:c7:00:c9:42:
c7:20:74:69:22:90:51:e2:f4:a4:83:c3:52:3d:45:
44:51:16:19:53:15:d2:94:22:64:f6:c0:09:3a:7e:
e3:54:8c:87:d0:4f:0c:93:10:23:75:9b:4b:0f:a6:
37:1c:fc:53:36:e7:57:75:a2:0b:54:15:f5:6e:ab:
2e:83:c6:0c:3b:c4:77:f8:d3:10:23:db:23:2c:95:
47:3a:8e:fb:b6:a9:10:37:0f:1c:62:7d:5c:d5:4b:
f8:91:d6:11:9a:d3:47:73:4c:9a:e9:0c:a4:8a:9d:
9a:72:8c:87:9d:4b:7c:1d:71:85:27:73:4a:a7:36:
65:4d:cc:90:28:2d:8e:de:61:72:36:5e:42:a0:a2:
98:2c:4b:54:f8:c6:3e:a5:31:c3:65:20:be:47:82:
f2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E2:17:65:01:3B:51:4B:9A:0D:C0:7A:CE:8F:93:2A:5E:93:26:A5
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5-IXZQE7UUuaDcB6zo-TKl6TJqU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.160.0/22
Signature Algorithm: sha256WithRSAEncryption
24:61:af:09:a8:a6:9b:82:89:cd:5f:3c:84:b6:4a:4d:69:7c:
2e:c5:68:77:29:2f:57:58:b4:32:95:c6:ca:8d:dd:01:a6:62:
52:f7:95:32:d8:65:f0:c5:83:54:9e:ab:75:29:9a:97:07:35:
ae:2b:dc:fc:d9:97:36:28:a8:f4:13:20:6e:28:f5:7f:bc:3e:
a0:be:61:85:ff:fc:5b:d0:0f:20:fb:55:e2:06:e5:36:b1:a0:
30:42:8a:7d:88:76:09:b8:6b:48:dd:f7:47:1d:25:eb:ce:77:
4c:16:fc:29:88:c0:0c:fc:95:55:b0:b0:95:38:b0:c4:00:d7:
99:ca:3a:3a:6f:dc:03:00:fa:27:d2:94:e5:0a:85:f1:c8:ac:
16:de:8d:9e:e8:85:89:e8:2e:f1:88:2c:a2:b2:7d:37:2f:fa:
0f:92:15:d0:52:74:2e:f4:58:b4:93:11:81:00:fd:06:f9:66:
e2:a0:27:54:7b:e5:09:d5:4f:8b:1b:f2:66:97:3b:af:c4:f9:
0a:76:1c:b4:5d:2c:c3:1f:69:c6:55:49:65:4b:bc:7a:a7:be:
4e:98:a9:70:82:d1:8b:85:c3:6f:74:dd:64:05:48:08:d1:5f:
a6:41:3e:a7:f0:ea:a2:1b:a2:74:ef:eb:3a:2a:55:57:88:58:
a5:4c:60:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:23 2024 by rpki-client on console-ams.rpki-client.org