Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6linGAlBiL2q8-TZJhO4DQhKnXs.roa
File: 6linGAlBiL2q8-TZJhO4DQhKnXs.roa (raw, json)
Hash identifier: Aw6vADy6lxf+/K0FyWzovJfJzSyUVu6f+nAsLuF7j00=
Subject key identifier: EA:58:A7:18:09:41:88:BD:AA:F3:E4:D9:26:13:B8:0D:08:4A:9D:7B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2043
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6linGAlBiL2q8-TZJhO4DQhKnXs.roa
Signing time: Fri 25 Nov 2022 04:38:30 +0000
ROA not before: Fri 25 Nov 2022 04:38:30 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.32.0/21 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8259 (0x2043)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:30 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=EA58A718094188BDAAF3E4D92613B80D084A9D7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b4:ec:c5:fc:9f:db:2d:8d:7f:01:b3:97:de:
bd:45:71:b5:40:9c:7e:b5:4d:fa:17:e7:dc:2f:71:
96:50:c5:b0:76:16:c9:b2:c2:5b:f9:fd:9b:92:a1:
ca:4f:43:61:e8:e3:49:07:53:79:f4:10:cd:c1:a3:
46:fc:25:66:ac:ee:e9:73:d4:e3:d5:22:b0:a1:9e:
ef:cb:83:ce:6a:0d:b5:1b:7b:c2:e6:e2:94:08:2d:
3f:0d:c1:99:76:86:f1:d9:02:74:5d:1b:ae:8e:fe:
ad:6a:02:b4:0d:63:98:95:e9:82:93:ed:79:f5:8d:
e0:5d:92:f0:14:08:5e:21:1c:cf:24:d8:40:a1:63:
4b:48:1f:a1:52:d3:78:52:f7:9d:7e:a8:e6:0b:18:
55:ed:cd:12:91:31:a8:4c:a8:0f:e9:1e:c7:8f:3f:
ca:b0:b4:d0:d9:7b:22:fa:df:05:fc:14:7a:22:cf:
06:a3:51:b6:17:47:48:b0:fc:60:2e:64:a9:8d:5f:
ad:e5:13:d6:de:24:50:a9:a6:c3:75:3f:5d:85:41:
9f:5b:c9:29:da:62:49:3e:83:aa:fd:ae:94:67:ec:
c0:86:7f:f1:5f:77:e4:d3:a9:25:20:77:a6:9a:ed:
7c:89:eb:7e:2d:ee:0e:af:d5:6c:25:3e:c2:73:f8:
1d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:58:A7:18:09:41:88:BD:AA:F3:E4:D9:26:13:B8:0D:08:4A:9D:7B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6linGAlBiL2q8-TZJhO4DQhKnXs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.32.0/21
Signature Algorithm: sha256WithRSAEncryption
41:34:48:dc:f1:0f:13:fb:e6:ad:17:2a:98:74:5d:a8:4a:1d:
1b:c0:73:b4:4b:68:c7:a1:a3:98:e7:9c:f9:96:8e:ba:0a:a2:
20:35:b2:2d:92:fd:bf:39:ee:2a:95:61:39:e1:62:0b:7b:fc:
93:da:dd:46:f3:38:91:87:96:92:83:07:31:82:1e:2e:41:29:
2a:05:40:2c:55:fb:5c:8a:b9:ad:0e:ad:dc:3f:95:00:ab:42:
f3:13:07:a9:68:cc:8a:6c:c4:4e:dc:2f:72:35:48:38:08:d9:
f0:6e:d7:20:82:3f:19:36:e1:29:47:9d:41:dc:d2:be:72:73:
93:0d:a4:23:2a:4d:d4:22:fb:42:11:2a:c6:2e:04:90:1a:04:
14:48:38:c7:02:24:f0:f6:30:c4:93:14:25:51:5f:9f:1c:84:
b8:36:0b:b5:dd:83:1f:bb:13:02:7c:39:2f:3a:28:a7:e9:db:
61:cb:16:eb:3f:a9:11:43:c9:da:a5:3b:3e:41:c2:8a:1a:5a:
5e:08:59:26:4c:5e:1e:25:1a:b3:d2:c9:9e:75:1c:e0:35:c0:
62:d0:ac:b0:c6:16:68:bd:83:b5:51:46:e8:b9:60:b6:eb:84:
47:d6:5e:ab:60:ef:63:c2:b4:8f:80:62:3d:5a:d2:2b:69:c4:
f3:82:ec:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:24 2024 by rpki-client on console-ams.rpki-client.org