Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/A9X4C3m5GsTUzSt9lxfC-N5-fDM.roa
File: A9X4C3m5GsTUzSt9lxfC-N5-fDM.roa (raw, json)
Hash identifier: JdBaygPXNOpLvHz3Xa/pkO0CvXpbJsfkDruH6VGlFDE=
Subject key identifier: 03:D5:F8:0B:79:B9:1A:C4:D4:CD:2B:7D:97:17:C2:F8:DE:7E:7C:33
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/A9X4C3m5GsTUzSt9lxfC-N5-fDM.roa
Signing time: Thu 15 Sep 2022 02:45:08 +0000
ROA not before: Thu 15 Sep 2022 02:45:08 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.128.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:08 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=03D5F80B79B91AC4D4CD2B7D9717C2F8DE7E7C33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1a:08:38:37:84:08:b6:7d:6f:e1:f6:7a:da:
9c:9f:d0:f5:c3:c0:33:20:c6:86:ec:c9:f6:0b:e6:
14:29:e3:09:64:4d:c7:d7:2a:bd:a5:fa:b2:b9:8a:
b9:07:3a:a0:79:73:b3:2b:2e:99:e8:65:f0:8f:6c:
a1:cb:83:88:f8:0b:07:e8:05:5f:20:95:f5:4d:9e:
11:a7:03:20:d1:73:6a:71:3a:7b:a7:ed:bc:a8:3d:
15:2b:4c:5c:ef:8e:2e:f3:91:c9:2b:3a:1f:7b:69:
18:6e:68:3e:f4:99:83:73:5b:55:79:0a:af:1f:0c:
78:a3:8c:a2:c7:6e:e7:17:5b:bf:0f:74:a2:2a:7a:
6c:10:71:62:15:31:4a:de:50:8c:fd:d3:5a:e8:87:
8a:26:ed:b1:90:76:85:8b:52:15:53:10:bf:23:30:
c4:28:e6:63:ea:a0:20:83:22:08:38:d8:d9:e5:7c:
f5:39:66:e6:a5:dc:46:54:41:d7:53:01:70:9d:51:
85:05:fa:85:ac:11:2a:57:c4:37:29:bd:59:2e:80:
57:74:6c:1f:45:04:49:11:e2:a1:6d:03:12:08:7f:
e3:3a:ac:6d:52:10:ed:8d:49:0f:3b:e9:d3:ae:6e:
b9:12:0b:f9:02:7e:10:5e:64:59:99:21:54:63:a7:
17:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D5:F8:0B:79:B9:1A:C4:D4:CD:2B:7D:97:17:C2:F8:DE:7E:7C:33
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/A9X4C3m5GsTUzSt9lxfC-N5-fDM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.128.0/21
Signature Algorithm: sha256WithRSAEncryption
a3:55:44:2c:ac:a8:06:47:fa:fe:f1:01:8f:b3:9b:c7:5b:31:
28:3c:19:8c:e1:d9:d7:0e:86:b9:81:3b:18:e4:47:54:ae:bf:
80:9a:98:74:4a:9a:b3:8c:b9:b4:36:39:d4:73:e1:43:4a:7c:
d4:3e:14:ce:38:22:5f:45:db:01:46:7d:4f:e4:44:93:a6:ab:
27:28:f3:e8:e3:fc:6a:e2:62:7b:0b:0e:3e:ae:57:09:98:4d:
21:27:51:85:2b:68:9d:0a:97:e8:ba:76:5a:a4:ee:47:0b:59:
ad:4b:5d:89:50:db:a1:99:d0:a2:be:e1:40:b4:14:5c:cd:22:
93:50:34:d4:98:b9:cc:84:64:88:af:5b:bd:fe:0e:4e:2b:b6:
e2:12:14:81:f7:8f:f2:37:70:67:0a:a0:53:79:ca:4a:2b:4d:
e5:fc:51:81:19:1c:82:c4:26:1e:20:63:94:ea:e2:3d:e3:e8:
b8:9b:37:24:fc:16:44:28:e4:f1:b7:7a:3a:2c:75:72:70:43:
76:bb:b4:68:ee:e0:b0:50:8f:6c:ae:00:ea:a6:ad:d0:b1:aa:
8b:e2:e9:2d:07:07:ba:0f:31:87:7b:3a:ff:23:5e:9c:f1:f7:
88:14:28:0f:e1:fd:c0:fc:4e:d2:1f:12:0e:a8:c4:02:89:cc:
dd:6d:ec:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:48 2024 by rpki-client on console-fra.rpki-client.org