Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7OEsiye19v_NTT1RaHefzAfQ0Dg.roa
File: 7OEsiye19v_NTT1RaHefzAfQ0Dg.roa (raw, json)
Hash identifier: vF72TZCr5AOTxbrstELV0lXGcAxBO83tan4HsNYdfY0=
Subject key identifier: EC:E1:2C:8B:27:B5:F6:FF:CD:4D:3D:51:68:77:9F:CC:07:D0:D0:38
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 224E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7OEsiye19v_NTT1RaHefzAfQ0Dg.roa
Signing time: Fri 25 Nov 2022 04:41:01 +0000
ROA not before: Fri 25 Nov 2022 04:41:01 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.164.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8782 (0x224e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:01 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=ECE12C8B27B5F6FFCD4D3D5168779FCC07D0D038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:38:fb:da:10:e0:b6:db:f8:d6:d8:a2:3d:1b:
04:be:b4:59:d1:b5:56:65:5f:c4:68:76:d6:78:68:
5e:b6:15:0e:a1:13:1c:44:d8:ab:ec:af:da:c5:60:
a7:4e:ed:a2:ea:3f:11:3a:2b:20:bc:96:af:6e:58:
63:23:fc:c4:d4:fe:b5:94:85:5a:7e:13:19:6e:10:
c9:5d:06:b3:12:00:90:c0:d2:39:f3:9b:f7:fd:d8:
a2:55:a3:84:37:27:29:51:8c:6e:46:50:ea:ec:34:
69:5d:29:fe:b0:0c:c6:6b:f8:f3:fd:81:9b:5e:6d:
b4:86:b3:3c:d2:19:b9:a5:c7:a7:2d:8f:03:fe:25:
f1:aa:62:5e:18:dc:92:fb:07:e8:e0:ad:aa:e7:97:
04:1c:69:6b:48:9f:28:b4:89:30:50:45:bd:0b:17:
d4:18:09:ae:2c:4d:56:58:63:bb:a9:40:58:ac:c4:
53:c5:b1:55:d7:73:d6:26:0c:40:72:81:f5:e5:a8:
a9:c3:75:34:bc:87:ca:97:b4:01:0b:1a:92:5f:af:
6c:23:17:bd:0c:3e:9a:23:10:d1:42:2b:c8:30:e9:
c6:e3:82:a4:c8:14:27:54:0a:72:e2:a2:e0:69:b7:
9f:53:04:21:77:d9:03:99:51:9b:9f:07:8b:98:75:
b1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E1:2C:8B:27:B5:F6:FF:CD:4D:3D:51:68:77:9F:CC:07:D0:D0:38
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7OEsiye19v_NTT1RaHefzAfQ0Dg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.164.0/22
Signature Algorithm: sha256WithRSAEncryption
36:40:a6:8b:d2:35:c4:a9:e8:f8:01:48:45:7d:fa:6c:af:77:
e3:10:7c:54:1e:7f:9c:4c:db:79:c6:35:aa:8c:30:22:d3:54:
83:38:48:f9:51:58:dd:df:02:9d:fd:34:3d:f7:4c:23:b4:15:
8b:62:a1:af:98:b0:3d:b7:cf:ac:d4:82:40:1e:44:e0:13:bf:
1f:ed:3c:8a:73:78:d2:fa:62:6c:0f:fd:b7:84:e2:22:12:0d:
5d:52:3f:35:57:52:de:24:cf:11:f3:6e:37:87:4c:e3:46:4d:
97:fd:d3:02:d8:18:ee:89:ef:d7:20:98:51:17:b2:f7:f5:3b:
49:61:72:f5:85:1c:1d:22:39:30:05:ed:41:a3:61:11:88:da:
d0:a9:71:c9:41:2f:46:d8:71:93:44:b8:57:22:b8:45:bb:7b:
dd:29:f0:9b:c8:9d:db:1f:3a:25:06:c5:35:23:a2:c7:33:26:
e8:88:4e:e0:10:5a:d1:2c:53:98:12:9d:f9:30:95:f3:71:8d:
ae:76:66:e1:b2:10:51:18:bf:d1:ee:6e:d6:82:cf:8c:b5:c7:
9c:cb:f6:3a:83:05:9a:ce:98:6a:16:e8:df:f3:f4:a2:40:8a:
b7:ec:0b:db:6c:14:82:61:cb:49:56:c4:8b:b5:f0:c4:27:d5:
ef:26:0b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:24 2024 by rpki-client on console-ams.rpki-client.org