Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/57iNdkP8uCQFqQRpDx2ZLuIiYwU.roa
File: 57iNdkP8uCQFqQRpDx2ZLuIiYwU.roa (raw, json)
Hash identifier: 6yVUm6dIe2BXOr3hDXYTW8Xt/dJu+lUaaE9TIADSejY=
Subject key identifier: E7:B8:8D:76:43:FC:B8:24:05:A9:04:69:0F:1D:99:2E:E2:22:63:05
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2137
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/57iNdkP8uCQFqQRpDx2ZLuIiYwU.roa
Signing time: Fri 25 Nov 2022 04:39:38 +0000
ROA not before: Fri 25 Nov 2022 04:39:38 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.205.128/28 maxlen: 28
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8503 (0x2137)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:38 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E7B88D7643FCB82405A904690F1D992EE2226305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:12:34:e5:73:4e:0b:f7:bd:03:76:f6:e1:12:
96:06:1f:d4:bb:1d:8c:40:1d:b3:ec:9b:3c:b3:d1:
45:31:73:85:2e:e4:aa:dd:9d:76:4d:d1:ee:6f:51:
74:5a:9c:e4:26:da:c9:71:70:15:a9:07:3b:3a:02:
bf:89:1e:7b:d8:6d:2b:fc:c2:da:84:57:df:2f:51:
a0:95:6b:0b:ea:0d:c7:18:b1:bc:7f:c4:d8:eb:6b:
2e:a6:89:6c:24:d0:b9:85:58:b2:92:c8:62:2f:60:
d4:87:0c:3e:4d:f1:10:d0:fd:c0:1e:1c:e3:97:97:
8a:98:39:c0:c2:f9:73:ec:6f:d4:4a:64:d0:31:ff:
2c:44:09:d7:a9:59:b5:ff:f7:4c:c8:9c:16:b5:e7:
fb:57:52:83:02:e4:53:71:af:32:e6:fa:e7:ac:32:
ff:34:e7:4b:4a:f4:ec:62:14:71:da:58:37:7c:93:
d4:5a:e5:65:8d:f9:47:ab:13:7c:22:05:b7:d1:6e:
f4:4f:a4:82:2d:4f:50:98:37:89:5b:62:98:c9:98:
71:ba:40:ad:36:56:25:99:c0:d0:83:ae:72:cc:8c:
1e:07:80:bc:7f:10:61:ff:35:c4:c8:c0:d8:70:00:
6d:97:d7:49:0b:f1:36:b8:87:48:1c:9e:66:a2:d2:
4a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B8:8D:76:43:FC:B8:24:05:A9:04:69:0F:1D:99:2E:E2:22:63:05
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/57iNdkP8uCQFqQRpDx2ZLuIiYwU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.205.128/28
Signature Algorithm: sha256WithRSAEncryption
07:23:b3:5f:fe:72:7e:ef:c2:8b:7d:03:b0:6b:d8:a2:43:f4:
8a:19:4a:06:3f:7a:b7:55:12:30:d3:63:59:52:31:63:9a:a5:
3b:f1:d7:05:f0:ed:67:3e:96:ca:dd:57:6b:8c:b9:fc:a7:9e:
79:05:0e:59:b6:62:00:a7:83:5b:83:9b:cf:40:30:c1:dc:f7:
70:2d:7b:01:1b:82:ce:9d:63:11:b3:2f:8e:0f:50:b8:00:06:
6d:11:60:81:56:88:3a:55:95:15:7d:e6:f0:71:03:62:fe:dc:
8a:c5:4f:93:a1:ac:1a:75:94:92:3f:83:cf:59:69:5f:22:7a:
3c:a6:31:6f:ee:65:ae:62:b5:03:c7:db:18:f0:24:fd:9b:70:
31:ca:28:ad:d4:89:bf:47:47:7d:74:7d:57:d2:73:9e:63:a1:
8c:ec:30:b3:48:28:27:ae:0d:61:ff:08:79:a7:c9:ef:1b:b3:
1d:28:8b:9e:52:1c:83:e9:b7:21:f8:ae:60:e4:ac:b3:36:bf:
ca:9a:aa:f9:27:83:0b:15:89:58:81:ce:1a:71:a5:68:af:5f:
79:13:10:65:e2:b7:6a:3d:90:27:b9:45:9d:56:27:6c:79:af:
a6:c5:5c:81:86:8b:72:f7:bb:d9:19:f6:c0:ef:cb:58:53:e9:
b4:ae:84:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:47 2024 by rpki-client on console-fra.rpki-client.org