Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8mrPw-mUWgJXzolMxKRSbysMdZY.roa
File: 8mrPw-mUWgJXzolMxKRSbysMdZY.roa (raw, json)
Hash identifier: +DMWa3h3dNvt3NsIZ5UcOS1wt4jnn0Y4Lsbw0WkcNho=
Subject key identifier: F2:6A:CF:C3:E9:94:5A:02:57:CE:89:4C:C4:A4:52:6F:2B:0C:75:96
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8mrPw-mUWgJXzolMxKRSbysMdZY.roa
Signing time: Thu 15 Sep 2022 02:45:40 +0000
ROA not before: Thu 15 Sep 2022 02:45:40 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:40 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F26ACFC3E9945A0257CE894CC4A4526F2B0C7596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a4:7f:1d:a6:59:eb:f8:0a:9a:0a:92:9f:ab:
17:c8:23:c6:51:cb:75:f4:9c:87:7b:0a:af:f8:40:
63:48:78:1e:2d:e8:1d:33:c1:0c:a9:57:ae:9f:be:
73:11:14:1f:8c:34:08:2c:38:07:e4:fb:fd:98:a0:
6e:70:07:6f:be:d9:b7:96:d2:43:98:86:b0:a4:1d:
41:0c:71:e3:ed:fe:74:01:c8:19:5d:f9:2a:3c:ec:
35:93:8f:ac:d6:71:dc:b1:8d:b6:cc:eb:78:75:c0:
db:e1:52:b8:11:df:de:f3:02:6a:08:fc:b5:02:28:
0b:f8:b6:3d:e8:38:e7:97:e1:4b:27:a8:d9:c3:68:
fe:63:37:2f:bf:a6:6c:6b:4d:76:b4:54:d0:38:57:
3c:f8:dd:16:19:0b:c0:47:56:86:cc:10:ed:0d:ec:
89:88:7b:46:67:fa:ad:37:57:90:3f:c2:d2:b5:2d:
a2:96:ae:21:09:af:15:6f:d4:14:b6:d0:95:97:0d:
e7:01:1c:68:34:a4:ae:24:7d:5b:0c:0f:1f:dd:fa:
d7:a2:03:1d:27:b1:f6:c1:41:0c:72:33:7c:7a:6b:
f7:67:1e:13:84:8c:39:8a:8f:9f:be:df:f1:33:99:
ba:92:ec:c4:81:48:3a:d7:e3:e0:d7:9f:83:9c:8f:
0a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6A:CF:C3:E9:94:5A:02:57:CE:89:4C:C4:A4:52:6F:2B:0C:75:96
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8mrPw-mUWgJXzolMxKRSbysMdZY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.32.0/20
Signature Algorithm: sha256WithRSAEncryption
58:79:49:1c:f3:21:65:c3:1a:47:56:e3:bf:c4:49:a0:15:78:
8d:bc:57:f7:88:a9:b7:17:e0:bc:13:e9:e6:d1:3b:d3:77:10:
94:d5:84:82:79:6d:6e:fe:41:95:0d:f8:46:d3:7a:69:20:1f:
ed:56:71:48:69:49:de:94:8e:ef:11:16:17:4c:e9:20:1e:a3:
07:6e:96:48:ea:ec:8a:81:6c:4c:64:63:d9:62:7f:f8:d9:80:
e7:7a:23:09:16:d1:ab:7a:97:7d:9c:9e:6f:dc:79:e6:68:b9:
f8:65:34:dd:15:e4:71:8c:96:da:89:43:10:bd:ff:bb:ab:8c:
55:77:b2:77:29:55:16:03:c5:d7:a9:72:bc:83:f7:f0:54:2d:
c6:9d:89:1b:20:47:33:3e:a4:8b:0b:76:55:7f:3b:1a:17:87:
6e:92:16:10:5c:f1:44:8c:48:f7:6d:74:9c:b1:59:4b:ef:30:
b9:16:45:d0:bf:65:d3:ee:9d:fc:a9:20:1f:ad:25:15:98:9b:
dd:ba:ea:4e:c3:7f:b6:8e:fb:fd:33:4b:8e:12:1d:b0:01:f5:
bc:fa:f9:69:7f:05:3d:74:42:54:6a:d6:96:dc:44:4f:eb:6e:
1b:7c:b1:94:9b:dc:44:25:33:17:a2:79:22:e6:94:f7:f9:24:
b9:72:ed:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:24 2024 by rpki-client on console-ams.rpki-client.org