Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8knMxQJ-Z5HKw3FeO3Zqljtj0N0.roa
File: 8knMxQJ-Z5HKw3FeO3Zqljtj0N0.roa (raw, json)
Hash identifier: EHmVl7h//tGxGPw3hQMiSZP5e4u9RKs9iEdKFVr96ks=
Subject key identifier: F2:49:CC:C5:02:7E:67:91:CA:C3:71:5E:3B:76:6A:96:3B:63:D0:DD
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8knMxQJ-Z5HKw3FeO3Zqljtj0N0.roa
Signing time: Thu 15 Sep 2022 02:44:50 +0000
ROA not before: Thu 15 Sep 2022 02:44:50 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.84.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:44:50 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F249CCC5027E6791CAC3715E3B766A963B63D0DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e0:42:7a:4e:f9:61:34:de:99:d2:8e:26:a8:
81:38:3e:c3:f1:05:7c:32:19:e2:23:66:36:18:06:
f9:a3:b4:9f:02:39:54:f0:22:49:d1:2d:ec:b6:3b:
47:d5:a6:98:04:5f:70:57:ff:09:a6:9a:1f:e6:ba:
5a:a6:de:4c:69:9c:71:65:0e:4e:db:63:ce:52:cd:
6d:37:4b:22:6d:31:6f:4f:d2:4b:d7:db:d4:87:9e:
1a:0a:60:fd:c8:42:60:ed:73:a4:e6:21:ad:29:01:
51:3a:9f:4b:df:46:f7:11:d8:ce:4b:16:ca:97:b6:
2c:72:f4:8d:53:68:7c:ef:66:87:6d:28:d9:b0:42:
2f:89:ef:cf:40:69:9c:26:26:5d:96:a7:47:cc:be:
63:4f:4a:a7:ae:fd:57:96:7f:c4:10:d5:c6:98:2e:
35:8f:d4:2e:69:47:89:df:59:18:25:08:ae:e7:d4:
82:16:5c:36:2d:f5:31:96:63:4a:46:d4:52:bc:ca:
49:a2:2b:21:98:53:89:9c:ea:e0:cb:76:3d:df:9c:
11:76:5b:ac:54:7f:27:5d:2c:81:51:ec:a0:d4:bd:
90:83:0d:bf:7c:71:7a:37:70:6b:7d:90:94:2f:b4:
7f:9d:57:79:6e:e6:0b:34:89:16:7c:be:07:26:8d:
cf:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:49:CC:C5:02:7E:67:91:CA:C3:71:5E:3B:76:6A:96:3B:63:D0:DD
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8knMxQJ-Z5HKw3FeO3Zqljtj0N0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.84.0/22
Signature Algorithm: sha256WithRSAEncryption
83:c6:79:a8:44:5f:5f:dd:fa:3b:35:9f:28:b8:04:30:2e:29:
e8:e6:04:6d:a5:3d:e4:fb:32:db:68:2e:38:03:18:6d:24:6d:
2c:a6:65:26:ae:54:33:25:13:51:b6:5e:97:57:63:d6:fd:11:
19:e2:79:a6:e2:6d:fd:6e:f4:01:b1:b0:5f:3c:e8:22:c1:4f:
9f:fc:06:47:34:79:f0:cc:07:1c:7a:89:69:ae:7e:4d:b8:76:
c4:d3:d7:c2:8c:b5:bd:75:8a:a4:c3:7c:27:bb:5b:d5:8f:fa:
16:42:b6:d7:88:07:0d:62:fa:bd:3c:4c:5d:89:e1:dc:54:c3:
fb:80:8a:19:fe:4d:b9:29:c0:1a:e3:57:96:49:6c:73:a5:e3:
b2:96:fa:15:a3:7a:24:1b:e8:cd:55:ac:db:86:af:47:0e:c9:
d7:c6:fe:62:57:03:36:be:77:ba:49:a3:99:c0:df:da:51:c3:
b6:96:ef:00:a7:ad:e5:36:ca:24:02:6b:29:fa:de:6e:97:37:
05:76:90:0d:52:52:4a:54:4a:d5:6b:0a:d7:d0:9a:cc:c2:ba:
58:ea:25:c7:ca:19:95:5c:12:f4:7f:ef:de:39:ed:ce:9a:dd:
e8:94:d9:4d:7a:74:04:b7:65:4d:93:60:e6:29:4a:87:67:d7:
a1:83:6d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:24 2024 by rpki-client on console-ams.rpki-client.org