Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9dVRPlOlk3TIBRlltcyzJX733M0.roa
File: 9dVRPlOlk3TIBRlltcyzJX733M0.roa (raw, json)
Hash identifier: IbXcxrffEIPHJgm0iJrnQkAy0+V36hUM5V1ZWXPzm9A=
Subject key identifier: F5:D5:51:3E:53:A5:93:74:C8:05:19:65:B5:CC:B3:25:7E:F7:DC:CD
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 22E0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9dVRPlOlk3TIBRlltcyzJX733M0.roa
Signing time: Fri 25 Nov 2022 04:41:45 +0000
ROA not before: Fri 25 Nov 2022 04:41:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.16.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8928 (0x22e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:45 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F5D5513E53A59374C8051965B5CCB3257EF7DCCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6e:71:be:9c:39:d3:36:75:1a:d7:a6:9d:58:
f4:ec:75:34:e4:e4:3b:b3:a2:10:50:11:b6:45:90:
77:87:5d:be:04:a3:3b:8e:64:c7:52:fc:23:ce:91:
66:9d:f9:a1:a4:3f:83:8b:34:99:20:b2:a9:1b:4f:
3f:84:e3:3e:e8:69:6e:97:a6:d6:61:61:bf:e8:00:
d0:74:e6:10:aa:a9:e2:62:a4:fb:d3:31:c2:51:aa:
a3:ca:3c:47:29:96:68:04:4a:15:61:5c:bc:11:ac:
d7:11:e6:dc:e3:fc:d6:d6:36:8d:c4:02:9b:e2:29:
4e:9f:da:97:4d:d2:dd:60:8c:a8:37:c3:93:e2:0e:
8d:cc:97:92:f0:24:1a:46:b8:99:c4:ff:25:9a:78:
db:46:df:e7:7a:85:f3:5d:4c:e7:cf:17:db:64:3b:
78:b8:f1:59:fc:f8:5e:b1:d6:bc:b8:47:ff:1f:fa:
44:0b:0f:ff:f5:7e:9b:69:8b:2f:ab:c5:a1:53:5e:
55:fe:0c:05:33:9c:fa:6a:c6:ad:e9:cd:c2:06:d7:
53:86:e4:09:1f:3f:00:96:a5:76:d3:f9:2c:c4:f8:
57:22:a4:18:80:ce:08:74:b3:c7:59:f5:10:83:89:
46:16:c4:d5:30:3f:1a:83:26:8a:42:50:88:9e:58:
6f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D5:51:3E:53:A5:93:74:C8:05:19:65:B5:CC:B3:25:7E:F7:DC:CD
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9dVRPlOlk3TIBRlltcyzJX733M0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.16.0/22
Signature Algorithm: sha256WithRSAEncryption
11:f5:59:06:43:19:a1:a7:2c:fe:d7:bc:4f:18:27:ad:c5:b6:
63:5f:fe:72:58:ae:2d:b4:ae:3b:0d:61:77:08:9b:ad:4a:66:
40:92:d2:1b:f6:2c:47:e2:ea:79:74:00:db:39:08:16:b5:9d:
ae:d6:ff:ca:ae:85:05:02:ce:bd:d7:94:a9:76:26:0d:8b:b4:
90:b9:dc:bb:8c:26:0b:11:7c:0b:26:a1:d2:17:5c:dd:4c:83:
e3:3f:46:20:d3:72:e7:31:8a:e0:ad:5e:86:55:54:1c:b3:bb:
ed:c5:e6:91:91:00:6e:32:58:6f:84:2c:02:37:7a:36:65:1a:
8a:b2:71:d3:9a:da:cc:a3:65:86:38:51:b6:54:0c:17:59:d8:
53:70:7a:b1:d0:d7:d4:02:f9:65:9e:ff:b6:1e:b1:8d:ce:5e:
12:43:04:a0:9e:1a:d2:80:c5:34:89:94:57:c2:b0:49:76:33:
42:13:f7:92:88:17:ef:16:61:93:97:b2:26:7e:dd:0d:07:7a:
d1:8f:1e:68:41:5e:5a:3c:97:ad:6c:38:74:df:75:ff:77:a9:
d7:85:b2:39:67:8a:1c:b6:2d:ea:5a:72:a7:df:2c:0a:fa:bb:
e6:3c:35:87:f7:bf:c3:39:9a:6b:fa:c8:84:7e:db:7f:dd:91:
43:cf:4f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:48 2024 by rpki-client on console-fra.rpki-client.org