Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8MGeZTJk73me3wQKgkbY0jKzIOc.roa
File: 8MGeZTJk73me3wQKgkbY0jKzIOc.roa (raw, json)
Hash identifier: 1n6n1tkjqSjA2Dy3bCxbNnkzayQcckV0O4NLk3M2gXw=
Subject key identifier: F0:C1:9E:65:32:64:EF:79:9E:DF:04:0A:82:46:D8:D2:32:B3:20:E7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8MGeZTJk73me3wQKgkbY0jKzIOc.roa
Signing time: Thu 15 Sep 2022 02:45:54 +0000
ROA not before: Thu 15 Sep 2022 02:45:54 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.0.0/17 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:54 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F0C19E653264EF799EDF040A8246D8D232B320E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a2:25:db:ac:b8:a6:df:12:f2:0f:91:98:68:
6c:38:52:b1:7f:83:57:33:2b:89:e8:06:d8:2b:8f:
6f:85:a1:28:d4:55:01:1b:b7:55:05:b5:ce:40:22:
cf:3a:00:58:60:c9:f0:43:14:ca:82:7e:c0:25:1d:
08:df:bb:ba:89:c5:92:80:ad:1b:a1:c6:f7:76:fa:
6d:7c:09:e2:25:23:2b:b4:4f:44:86:cd:1f:38:06:
86:df:70:77:28:97:32:7c:e8:ed:e4:27:57:59:32:
89:36:02:9c:cb:30:7b:59:a0:ff:bc:80:69:b7:87:
db:fe:52:e2:a2:41:72:ac:83:e3:de:f6:66:d3:22:
8e:bd:c9:9d:83:53:3a:73:c6:e2:3e:31:39:d7:54:
2f:2e:98:12:77:c9:eb:8a:78:f7:2b:4a:85:e0:48:
e1:b4:21:c7:74:0b:a2:e1:74:2f:7a:28:5a:cb:5d:
9e:92:0b:17:6b:f5:38:75:3d:c9:f7:15:dd:22:4a:
22:02:4e:8b:47:fb:9c:66:eb:88:1b:66:95:64:6b:
c5:bd:f2:59:53:67:0e:06:66:db:d0:f3:b0:21:71:
8e:80:b1:2d:c5:6a:06:52:69:a1:29:5d:08:9e:2f:
74:86:52:ca:bb:05:87:43:47:12:16:46:39:74:12:
a7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C1:9E:65:32:64:EF:79:9E:DF:04:0A:82:46:D8:D2:32:B3:20:E7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8MGeZTJk73me3wQKgkbY0jKzIOc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.0.0/17
Signature Algorithm: sha256WithRSAEncryption
41:1c:be:52:7d:6d:0d:bb:63:b7:e5:01:6d:c4:36:0e:dd:8d:
77:d2:fe:a9:b7:3b:ea:b2:fb:0b:cb:cc:80:31:df:da:d0:23:
6e:af:47:95:6f:2c:75:95:62:a1:07:13:b0:e4:e4:1c:15:55:
ce:b6:74:16:ef:3a:0a:4e:c3:e3:74:be:b1:c4:14:ec:57:e9:
d8:77:a8:94:be:88:ed:7f:8b:e4:47:5d:f9:09:a8:6a:e4:42:
1d:f4:aa:8d:6b:60:e0:d1:92:fd:28:f2:8f:65:24:6d:c4:9d:
71:7c:d1:5c:01:0f:0e:24:09:b6:30:1e:a9:a4:56:4b:d4:02:
d9:50:c3:00:3f:59:b5:aa:f3:7c:7d:f2:bc:52:82:26:10:a2:
f7:dc:07:46:0e:ce:34:ac:c4:37:f7:f7:82:a8:e3:91:8e:17:
04:f9:d2:4c:d6:47:61:6e:15:a0:3d:88:5c:df:98:dc:74:d5:
19:b5:20:3a:2d:6f:e2:68:58:ac:28:12:22:7a:34:3a:bf:ae:
eb:48:0a:33:aa:5b:ad:4a:91:af:5d:2a:42:ec:8e:88:a2:43:
ba:86:c9:0b:88:0a:39:16:d3:17:47:04:44:06:ef:d1:a8:2a:
08:49:51:ca:36:d6:3c:6d:b7:a2:45:84:d6:57:34:6a:73:ee:
3f:f7:7f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:24 2024 by rpki-client on console-ams.rpki-client.org