Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9AuW9OuzncZbZt034G1Eg6rOQQg.roa
File: 9AuW9OuzncZbZt034G1Eg6rOQQg.roa (raw, json)
Hash identifier: uker8ZkIohiSqWJ1Y0I05HfkPZyDZpgKmfIJBh51hP4=
Subject key identifier: F4:0B:96:F4:EB:B3:9D:C6:5B:66:DD:37:E0:6D:44:83:AA:CE:41:08
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 232E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9AuW9OuzncZbZt034G1Eg6rOQQg.roa
Signing time: Fri 25 Nov 2022 04:42:10 +0000
ROA not before: Fri 25 Nov 2022 04:42:10 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.248.0/21 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9006 (0x232e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:42:10 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F40B96F4EBB39DC65B66DD37E06D4483AACE4108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3e:55:8b:5d:36:93:6c:ea:32:50:2b:5f:06:
70:ae:4f:5d:af:38:f9:10:5f:8f:89:7f:f3:05:f9:
f2:4a:53:3f:dd:79:86:5b:0f:ed:e9:94:1e:37:59:
e4:ca:d5:17:f2:34:c9:c5:0c:7f:04:74:b5:9d:e8:
e2:cf:90:1a:2c:a1:93:a7:05:66:d9:f8:76:ec:31:
23:3c:6f:57:39:9e:51:83:78:35:e5:ac:5e:2d:25:
28:d4:17:85:ce:a5:fb:6e:fc:9e:5c:be:a3:ca:7a:
8c:04:2c:7f:6e:74:cc:b8:91:ea:0f:db:c0:5b:83:
af:e1:76:d0:f0:00:07:5f:6d:a1:9e:70:40:e1:30:
33:32:6c:d7:b7:e7:15:33:78:92:9e:26:f1:fe:0b:
d8:64:21:56:70:6e:17:3d:31:68:cb:4b:d3:2b:7f:
1e:d9:5f:c1:6c:ba:40:61:c1:e4:9f:0f:d9:51:6c:
8a:6b:67:fb:bc:03:6b:0b:f0:60:76:cc:5d:5e:12:
bf:14:4a:ae:2f:73:2b:54:e7:43:2b:24:39:21:7a:
1a:31:e6:e9:fb:30:b0:66:0a:9b:61:6b:d8:66:38:
94:e0:49:60:e0:35:55:75:ca:ac:0c:6b:26:f7:76:
4f:d8:6b:cb:0a:a3:69:ea:bb:ac:27:fb:42:0b:d0:
ff:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:0B:96:F4:EB:B3:9D:C6:5B:66:DD:37:E0:6D:44:83:AA:CE:41:08
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9AuW9OuzncZbZt034G1Eg6rOQQg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.248.0/21
Signature Algorithm: sha256WithRSAEncryption
18:b6:f1:9c:4d:4a:c2:24:3b:99:78:d3:89:9d:83:1c:92:c9:
89:1f:e3:9f:05:39:a0:4c:96:24:c4:36:86:ac:4d:f9:2c:4d:
3b:7d:8b:b0:ad:ee:cc:2a:32:33:c1:d3:45:2c:6a:d2:2c:1e:
16:68:a0:71:bc:71:71:98:65:75:cb:7c:35:d6:c0:23:ff:50:
9b:13:91:22:ce:eb:32:c8:d6:c5:93:b5:89:bc:06:1a:0f:8e:
85:14:a6:bc:1c:d0:42:97:08:e6:03:95:03:5b:a9:fa:9c:cc:
fc:c3:6e:7e:a0:a3:d1:96:46:7d:95:26:2c:31:f0:d0:df:41:
f4:5f:52:9c:8e:ee:79:66:1c:97:a5:69:45:91:15:76:d6:39:
da:3c:76:b6:41:f0:75:7b:44:72:59:e9:58:a3:2c:10:20:fb:
4f:ab:c0:c8:0d:61:6f:30:60:3b:77:43:d1:fd:32:6f:1a:d4:
c9:49:e7:e1:c7:ad:8a:5a:e2:4f:85:86:eb:ee:18:e8:ba:d1:
da:c6:1a:d7:27:8b:c4:76:67:20:85:65:78:14:25:08:c1:7f:
91:bb:e6:14:62:c8:c0:64:a8:29:f4:34:0a:79:2e:0c:83:4f:
7f:2b:9e:f5:ec:7b:f2:e6:b3:f2:c7:42:31:15:79:04:25:4e:
04:7c:5d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:25 2024 by rpki-client on console-ams.rpki-client.org