Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9_LS1NSmdl-xc3ySXMyoSkopexk.roa
File: 9_LS1NSmdl-xc3ySXMyoSkopexk.roa (raw, json)
Hash identifier: 6kZPcKTu+qJfjKOEZaAeX3Slb/MJ+adA+O1bJYdNH+U=
Subject key identifier: F7:F2:D2:D4:D4:A6:76:5F:B1:73:7C:92:5C:CC:A8:4A:4A:29:7B:19
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2160
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9_LS1NSmdl-xc3ySXMyoSkopexk.roa
Signing time: Fri 25 Nov 2022 04:39:51 +0000
ROA not before: Fri 25 Nov 2022 04:39:51 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8544 (0x2160)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:51 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F7F2D2D4D4A6765FB1737C925CCCA84A4A297B19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:32:0f:bf:d8:3c:92:8c:61:d1:38:43:4e:f7:
24:27:88:18:ef:e5:40:4b:ce:9e:75:8e:18:fa:42:
dd:a7:ee:2b:a0:de:41:28:57:01:d4:03:2c:bc:10:
10:9e:d8:1c:21:58:52:bd:f7:9d:c7:66:79:be:a9:
07:1d:89:2b:95:eb:5f:34:6d:60:ad:99:61:32:d5:
cb:c2:97:88:0f:a2:f5:d6:f5:12:f1:0a:01:ab:f7:
66:0d:03:5e:66:82:51:05:b8:9b:f1:67:4d:5e:b7:
d0:be:4a:11:3b:e5:bb:7c:60:4f:9a:b1:e8:ba:e6:
12:a2:ad:6f:7c:50:49:a2:48:ea:59:ad:68:93:8a:
72:8f:80:64:e0:89:78:ca:32:99:1e:bb:b5:42:42:
84:19:53:8c:0f:93:2d:3c:b1:db:f9:59:aa:9d:6f:
f8:e3:43:e9:20:62:8c:74:2d:cc:df:96:1c:0b:cf:
be:60:c3:75:a8:be:2a:95:93:a9:32:14:ba:21:04:
d6:2d:8f:12:f4:7e:83:82:8b:70:22:f3:56:5f:91:
3d:ed:23:93:d1:9d:55:c7:7b:05:e3:3c:14:37:9b:
21:01:12:2a:f6:20:54:66:d0:7d:fc:1d:7a:64:b6:
2f:ff:7d:cf:49:1c:f2:e9:a5:c3:08:ac:33:12:ae:
64:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F2:D2:D4:D4:A6:76:5F:B1:73:7C:92:5C:CC:A8:4A:4A:29:7B:19
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9_LS1NSmdl-xc3ySXMyoSkopexk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.144.0/20
Signature Algorithm: sha256WithRSAEncryption
43:e6:7a:be:79:bd:be:bb:5c:87:d4:e6:0c:0a:ea:2a:41:3d:
61:53:9a:5a:0b:13:fc:9b:b9:9a:76:3f:b6:89:a2:74:45:c2:
86:7c:03:69:b4:be:3c:c6:bc:01:a8:ec:4e:5f:9f:fe:e9:bf:
8a:46:99:ee:b7:9f:e9:19:28:97:9e:d6:32:b9:b0:a4:39:3c:
c9:33:e2:aa:49:a8:81:b5:b9:29:57:49:03:c7:b6:6a:1e:f6:
7e:e9:9f:2f:3e:4f:ef:df:c3:a7:4b:e3:7a:ff:f4:ba:78:43:
8e:14:9e:83:5b:39:fd:b5:4d:7a:08:cf:85:1e:84:f8:7f:72:
5c:55:49:f7:d6:84:79:bd:ec:65:6c:da:03:4d:a9:2a:80:f6:
0d:fa:be:29:1f:07:a3:2f:55:61:ab:71:81:5a:5e:a0:c1:e6:
e6:29:60:3d:8c:61:29:90:bc:08:60:a9:bf:a7:67:19:95:e7:
d6:92:18:a8:d0:8b:b5:85:a8:79:be:b3:43:a1:c3:cd:ef:96:
35:66:ac:d7:ec:d4:8b:b2:18:72:56:c0:86:b8:95:7d:93:ed:
d3:45:10:82:0c:98:94:e5:06:26:0d:96:71:33:9b:a0:68:29:
e2:f5:7f:09:c6:4c:e4:19:52:47:e4:d4:a6:99:90:af:9d:68:
99:c5:aa:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:48 2024 by rpki-client on console-fra.rpki-client.org