Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/B5hqkhn2EFjTfn-Z-czUv6LgyAg.roa
File: B5hqkhn2EFjTfn-Z-czUv6LgyAg.roa (raw, json)
Hash identifier: XcHeaYc/GYDdIBvUr+yz/XsGP916JvU/mvshhtFdzi8=
Subject key identifier: 07:98:6A:92:19:F6:10:58:D3:7E:7F:99:F9:CC:D4:BF:A2:E0:C8:08
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2032
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/B5hqkhn2EFjTfn-Z-czUv6LgyAg.roa
Signing time: Fri 25 Nov 2022 04:38:26 +0000
ROA not before: Fri 25 Nov 2022 04:38:26 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8242 (0x2032)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:26 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=07986A9219F61058D37E7F99F9CCD4BFA2E0C808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:22:15:49:c1:dc:e9:85:e9:88:59:05:c3:07:
f2:ac:61:25:54:03:a7:64:da:19:8c:5d:b7:73:d3:
12:f5:12:cc:51:90:82:f4:4d:36:de:46:60:f3:32:
57:65:c3:51:9a:be:17:85:73:ff:6a:f5:9e:39:22:
d3:2d:1d:07:22:75:4b:fc:5d:5b:f6:b1:14:c1:2a:
08:ee:c4:e0:48:8c:ec:11:28:74:66:c2:cc:49:85:
5c:d3:02:47:a7:78:1d:c0:5c:5a:85:34:7e:4a:2b:
88:89:7a:5f:ec:6d:9f:cb:5c:c0:e5:03:f7:f0:d1:
b9:c2:51:1c:58:a5:e7:1f:2e:89:4e:38:93:12:36:
e3:ac:40:a4:17:d4:1a:f0:f4:d3:d1:2b:54:95:b2:
44:f0:7d:0a:a9:d9:66:23:05:58:7d:82:f0:f1:a4:
0a:00:f7:74:b2:28:17:e9:33:a9:10:70:b4:7d:06:
cc:57:aa:05:26:da:a0:e4:1d:f4:32:63:f0:9c:5e:
d7:c9:6b:35:a8:b0:ec:fc:26:f3:1c:03:75:1a:d0:
87:a1:bb:ba:52:2f:9c:d1:ba:7b:29:7d:46:ee:28:
61:c0:29:58:45:51:9c:3b:aa:69:ed:e0:77:d9:0b:
80:8e:60:fb:a1:93:cc:d7:88:81:03:df:0c:9e:8f:
8d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:98:6A:92:19:F6:10:58:D3:7E:7F:99:F9:CC:D4:BF:A2:E0:C8:08
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/B5hqkhn2EFjTfn-Z-czUv6LgyAg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.75.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:e1:9d:6c:38:e4:9a:ce:ca:4d:a3:20:01:6d:cd:16:49:17:
ad:13:e3:f5:34:58:52:ac:86:31:8d:31:e9:33:f5:43:cc:7b:
24:ca:b9:0d:9d:52:fa:eb:c7:f7:69:ba:c6:e0:a3:e5:7e:08:
5e:a5:c9:43:bf:07:08:d1:6b:28:a2:15:00:27:dc:1f:48:77:
78:44:05:74:cc:4f:c3:49:fc:b1:07:74:5b:4d:a1:42:23:72:
9f:09:da:fa:ed:f3:7d:1f:67:db:38:59:87:11:f0:48:c4:d0:
4d:84:09:ee:79:8a:56:f9:f0:48:20:ec:32:a3:83:69:3a:af:
80:5a:7f:dd:7e:7c:30:54:c7:5b:f1:61:33:50:95:40:7a:d0:
a2:fa:e0:06:c7:82:2f:77:96:36:a7:a2:de:db:18:b6:2c:35:
66:4a:3c:4d:d4:a1:33:b4:16:34:ad:8d:0d:9c:30:a8:80:bc:
82:19:81:73:98:b8:1c:ff:c8:39:e0:59:89:84:6c:e4:f2:b1:
b9:e5:b0:f1:7f:f9:41:ad:03:f5:fd:30:0e:b1:27:f5:95:a8:
a9:1e:db:1e:24:f0:b5:00:bd:a2:4c:07:9f:85:e8:dd:77:0c:
e2:7b:ff:2a:e3:36:45:f7:97:3b:f4:06:41:0e:ff:90:2b:dc:
f5:2f:de:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:25 2024 by rpki-client on console-ams.rpki-client.org