Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6XSLpJH99izn5bvvPP6R8nOj2Og.roa
File: 6XSLpJH99izn5bvvPP6R8nOj2Og.roa (raw, json)
Hash identifier: YZM1rFWUpyD9SriwPTO+MJ74qgh1/1c4JKQJSeuybH0=
Subject key identifier: E9:74:8B:A4:91:FD:F6:2C:E7:E5:BB:EF:3C:FE:91:F2:73:A3:D8:E8
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6XSLpJH99izn5bvvPP6R8nOj2Og.roa
Signing time: Thu 15 Sep 2022 02:46:04 +0000
ROA not before: Thu 15 Sep 2022 02:46:04 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.205.0/28 maxlen: 28
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:04 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E9748BA491FDF62CE7E5BBEF3CFE91F273A3D8E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d4:7d:c4:78:a9:1b:32:6b:93:b2:bb:2b:61:
42:07:08:85:73:6a:4e:57:a9:0b:ec:8c:60:2e:ac:
41:5c:b3:7a:f6:e9:5c:a6:78:0e:84:e8:1e:19:b5:
d9:69:fe:d3:e1:6a:7e:18:21:e9:6b:c4:2c:c6:a3:
74:09:aa:27:15:50:fb:2b:3b:66:8b:df:d8:88:63:
1c:71:60:b3:4e:d9:2b:94:cc:3b:44:6f:1c:92:d8:
d9:cd:67:c7:6b:fc:42:e6:bd:fa:71:a8:b7:e9:e9:
9c:cc:3b:92:18:62:a3:5e:f2:5c:70:e1:3f:80:ff:
a3:36:88:ea:f0:1b:f2:53:f1:fc:b4:9e:d6:8e:bf:
26:6a:c5:d3:61:9f:c1:d0:6c:5d:56:74:65:6a:10:
ab:a3:a0:f8:88:cb:18:9b:43:57:85:aa:c4:08:c6:
64:7f:33:b1:4a:94:8c:ce:9e:bd:04:6d:88:68:32:
cc:c9:b4:27:fb:45:fe:f6:24:f6:d0:50:e4:fd:79:
cd:23:56:ca:12:b6:b7:f7:14:91:5d:8d:a0:f1:46:
16:39:ab:a6:87:73:a7:c4:31:8a:54:09:86:84:b0:
9c:53:88:ae:87:86:a1:05:a7:df:c1:61:2c:ee:a0:
81:67:5b:d5:7d:d1:07:43:d0:4e:63:1a:92:c9:10:
8c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:74:8B:A4:91:FD:F6:2C:E7:E5:BB:EF:3C:FE:91:F2:73:A3:D8:E8
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6XSLpJH99izn5bvvPP6R8nOj2Og.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.205.0/28
Signature Algorithm: sha256WithRSAEncryption
6a:c9:41:e2:ac:cc:3b:7a:fb:46:d2:76:b7:f2:50:61:30:44:
30:e2:d8:53:42:5a:10:67:5d:7a:5d:b3:e8:7c:28:67:8b:54:
1c:f6:f7:28:b7:56:01:5e:73:e5:31:ee:08:98:ae:b1:87:d2:
4f:4b:dd:52:9e:a5:68:83:bc:60:ae:ce:7e:e0:5a:d5:5e:6f:
9a:4e:ec:b7:72:60:73:b0:5c:b7:cf:9b:7a:4f:18:45:41:d1:
28:cc:76:d1:6f:3c:a1:c0:c6:35:08:e6:6e:9a:48:df:d5:10:
91:1d:5a:f1:5b:6d:1e:33:d8:4d:b6:a3:1b:14:b3:a1:19:6e:
8f:b0:e4:34:7e:71:13:9a:e6:21:b4:4d:78:59:85:48:cb:35:
46:26:41:14:23:ad:d8:f9:ed:47:5b:56:87:44:a7:d9:68:45:
06:b9:ef:f5:02:c7:dd:96:a1:bd:cd:c7:a8:9b:21:a5:16:44:
48:0a:be:79:85:8a:93:8d:50:ad:0b:cc:84:00:5d:04:34:a5:
78:d8:f9:6a:f5:35:48:6f:51:a7:24:c5:c4:a9:16:34:7e:66:
9f:17:e8:fa:0c:8f:58:7f:af:88:1a:2e:3e:21:78:6d:04:66:
03:fc:c7:cc:a6:6c:44:78:29:d5:e2:c5:0b:47:7f:7c:2e:a8:
ab:f2:6f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:24 2024 by rpki-client on console-ams.rpki-client.org