Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6jsm8vIfdDlg4MGaJWpMrjT3C1o.roa
File: 6jsm8vIfdDlg4MGaJWpMrjT3C1o.roa (raw, json)
Hash identifier: XdT74aha+UAOiCrNVVApSZ85HdVTjLOc7aLnbrugDmc=
Subject key identifier: EA:3B:26:F2:F2:1F:74:39:60:E0:C1:9A:25:6A:4C:AE:34:F7:0B:5A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6jsm8vIfdDlg4MGaJWpMrjT3C1o.roa
Signing time: Thu 15 Sep 2022 02:46:27 +0000
ROA not before: Thu 15 Sep 2022 02:46:27 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.156.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:27 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=EA3B26F2F21F743960E0C19A256A4CAE34F70B5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c6:c0:61:fa:26:ec:dc:39:4e:ef:e1:3b:42:
63:e4:34:1f:1e:3b:5b:e6:9e:58:1b:82:01:ae:5e:
dc:32:38:62:9f:2c:87:94:e2:28:d7:1e:a3:48:a7:
b6:74:7e:68:14:48:ea:c7:63:0d:7e:30:93:26:c3:
c7:f3:53:09:a0:47:1e:93:fb:4d:94:8b:fc:b2:76:
34:fc:49:6f:e9:d1:e6:5f:a6:67:f9:2c:d6:c5:f9:
6e:bd:82:8a:ca:cb:f5:25:f0:09:c1:9a:d1:f5:c8:
1a:d2:83:bc:24:f7:8f:b1:bb:15:99:0d:a6:6b:81:
f1:02:01:d2:d4:35:e4:e4:de:23:71:d9:1c:26:a2:
26:70:e2:cd:24:e9:62:c6:14:68:ba:eb:90:64:c8:
51:fe:6f:e2:e4:47:83:89:25:8d:a6:59:be:a9:64:
cf:d5:45:f9:9f:59:40:3a:c7:c8:f1:17:cc:60:ec:
3a:6a:35:7c:60:cc:75:2b:6d:30:be:6c:a5:93:58:
97:6e:3c:2b:28:8c:f9:31:a9:c0:0f:aa:c3:af:7c:
4f:7a:f2:ef:f3:ae:25:53:74:09:54:25:28:1c:fe:
92:7e:52:a6:9e:f1:0e:26:01:5e:01:97:a3:0f:f9:
76:e4:86:d5:05:55:ec:ce:cd:e9:5f:ab:db:aa:30:
ac:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:3B:26:F2:F2:1F:74:39:60:E0:C1:9A:25:6A:4C:AE:34:F7:0B:5A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6jsm8vIfdDlg4MGaJWpMrjT3C1o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.156.0/22
Signature Algorithm: sha256WithRSAEncryption
38:cf:18:7b:cc:28:f3:bb:8c:94:d3:41:2c:07:50:c6:8b:d7:
04:99:00:32:13:11:1b:c1:3d:e5:fa:f3:33:92:b9:ac:0c:e4:
40:e8:af:aa:ac:5d:f3:bc:dc:a3:a7:1b:44:b3:68:af:9a:59:
10:13:60:33:da:cb:ae:95:ab:b1:69:88:5c:ac:21:70:98:b0:
da:fb:82:31:47:69:46:bd:15:74:6f:b6:27:4c:70:f2:5a:11:
96:89:bc:d6:13:cf:80:d6:55:dc:47:d0:86:43:e3:29:dd:95:
b2:04:9f:ea:94:64:61:a7:62:72:7b:15:a2:87:49:1d:b5:fc:
96:bd:c3:02:1f:82:2a:96:d0:b5:f8:66:4f:76:30:3c:66:3e:
e6:88:34:51:71:17:3c:8d:f6:94:ef:62:2c:1e:bb:30:78:1a:
81:75:53:e4:15:ba:27:92:83:86:f7:af:05:d6:3f:b0:8b:8e:
04:bc:9f:05:17:6b:ca:d0:52:a4:2f:fb:4d:41:ff:32:1d:99:
01:47:61:a0:33:cc:f0:8a:b7:1c:89:b9:7d:43:9d:66:c2:a6:
53:1c:16:48:4b:6f:10:7d:87:c9:6e:e7:7b:3f:df:18:cd:7b:
f1:38:ed:7c:d1:30:88:01:98:55:e2:e6:18:ab:3d:7d:2e:77:
7b:eb:d7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:47 2024 by rpki-client on console-fra.rpki-client.org