Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AG2YPqtXfMpoEL6g_wY8NKq3rs0.roa
File: AG2YPqtXfMpoEL6g_wY8NKq3rs0.roa (raw, json)
Hash identifier: g0EhX2cTvRldHjFwPgbzFPmGKVMJHsjftRLCRmyiuiw=
Subject key identifier: 00:6D:98:3E:AB:57:7C:CA:68:10:BE:A0:FF:06:3C:34:AA:B7:AE:CD
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1AA4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AG2YPqtXfMpoEL6g_wY8NKq3rs0.roa
Signing time: Wed 29 Sep 2021 02:45:35 +0000
ROA not before: Wed 29 Sep 2021 02:45:35 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.192.44.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6820 (0x1aa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:45:35 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=006D983EAB577CCA6810BEA0FF063C34AAB7AECD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:36:70:98:11:d1:13:bb:76:7b:48:d9:55:2d:
54:76:5d:88:3f:fb:7e:31:f9:e0:9b:f4:98:5a:a4:
75:79:4a:1c:50:7c:cc:a0:5a:c2:9a:bb:df:35:bb:
94:54:bf:f6:a4:f8:68:88:8c:16:c9:ab:2d:24:41:
a4:95:da:30:f9:ab:f6:eb:73:25:2e:ab:4c:3b:22:
e2:27:c8:cd:78:4e:57:0b:5e:22:2f:66:d8:de:0a:
0a:62:d5:e0:30:e0:eb:0a:39:e3:ab:f3:fe:61:a7:
df:1a:e6:28:90:92:5c:93:80:aa:11:ab:b5:30:85:
93:9a:37:86:31:76:fc:ed:62:b6:94:dd:4d:36:b1:
27:ec:a2:b4:1b:db:1f:3c:59:56:11:b6:5e:05:3f:
d3:7b:69:95:5e:41:c3:f2:82:d7:cc:17:a2:d4:73:
31:9c:a1:4e:dd:1b:45:9d:89:ac:83:41:d1:12:41:
6a:d8:a8:87:21:2b:02:86:20:b9:d0:90:a6:7f:db:
3c:82:eb:a5:22:52:b8:16:c5:92:bc:8e:a9:af:9a:
d6:38:8c:ff:d1:ec:3f:e8:c0:61:11:24:26:a8:78:
98:e4:33:ae:af:00:8a:9d:e5:e7:a1:b0:15:e2:27:
77:fc:6c:87:86:ef:e3:7d:26:a1:d8:50:03:e8:5d:
64:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6D:98:3E:AB:57:7C:CA:68:10:BE:A0:FF:06:3C:34:AA:B7:AE:CD
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AG2YPqtXfMpoEL6g_wY8NKq3rs0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.44.0/22
Signature Algorithm: sha256WithRSAEncryption
72:c1:e1:28:99:16:be:52:c4:9a:1c:e5:2e:c4:b7:b6:5d:e4:
fd:77:69:4c:80:ad:b6:2e:52:5f:c0:e8:b6:c5:a2:81:99:7d:
f5:7d:15:d8:52:29:10:ad:89:91:ca:40:23:20:6f:c9:cd:b3:
64:8b:ef:fe:91:91:79:6c:70:8e:7b:15:22:90:50:69:db:7a:
50:79:dd:d8:ab:7a:e3:1e:ca:cd:b8:15:cd:8e:c7:81:e5:22:
24:d0:83:fa:b9:0e:18:d8:42:e4:bb:b1:bf:1d:dc:36:a7:a2:
c8:9c:e5:51:f9:76:51:46:b8:97:33:cf:6c:ed:c0:40:f5:0f:
9f:48:24:54:8e:55:99:37:d2:ec:d2:13:e6:7b:67:29:87:18:
08:48:54:5c:c9:aa:29:e4:90:a5:bb:0d:a4:db:9d:5f:ee:0e:
a9:2d:07:e0:08:31:ec:5a:9d:3f:87:78:c1:25:02:63:5a:65:
b6:c2:d6:14:ab:92:4f:2f:72:48:0c:b9:db:4f:4d:ec:88:a4:
55:ef:72:fa:1c:9c:5e:6e:dd:53:4f:70:94:69:5e:22:65:64:
0e:ad:f3:b7:53:3f:9f:73:0c:b4:67:90:00:cd:ab:31:7d:05:
3f:f7:66:d9:27:39:22:ef:b8:b3:63:9c:68:c3:da:d9:4c:30:
a2:a5:c9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:11 2023 by rpki-client on console-ams.rpki-client.org