Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CT_n3FRFKRYSGIlweB1dtWd8t_I.roa
File: CT_n3FRFKRYSGIlweB1dtWd8t_I.roa (raw, json)
Hash identifier: 0jrMVnWe+XhibCxkBethOkLbYCOlr1drqCCVJT5MYBY=
Subject key identifier: 09:3F:E7:DC:54:45:29:16:12:18:89:70:78:1D:5D:B5:67:7C:B7:F2
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 224D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CT_n3FRFKRYSGIlweB1dtWd8t_I.roa
Signing time: Fri 25 Nov 2022 04:41:00 +0000
ROA not before: Fri 25 Nov 2022 04:41:00 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.72.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8781 (0x224d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:00 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=093FE7DC5445291612188970781D5DB5677CB7F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4e:73:1a:8e:fe:dd:b4:0e:51:f7:ad:ad:2b:
04:7a:62:35:17:0a:de:26:5b:3a:f5:9b:5b:d3:55:
16:fc:66:13:cb:ad:71:e0:c3:3b:24:2f:ad:b0:76:
b9:d9:a7:53:a4:ef:f0:96:87:d5:52:46:ca:ed:bd:
3f:c7:42:ce:de:0d:36:71:65:e1:55:68:cb:7e:20:
85:13:2b:ae:d3:66:4f:22:a5:e3:21:14:36:74:a9:
c8:c7:6e:d2:89:3f:25:83:29:9e:71:c7:4b:15:a4:
c6:4d:72:69:43:cf:0e:42:5f:4c:8e:d1:93:9a:f5:
02:4c:69:9c:20:28:04:e6:f5:0a:c4:80:c7:b6:5c:
02:73:2f:d5:b1:e1:a4:76:5b:b8:37:c5:f8:e8:38:
74:94:93:5e:5a:cc:43:8f:bf:59:fb:ea:67:b1:da:
a2:4e:d8:30:b2:8f:ae:12:4d:0d:f0:0b:85:1d:4c:
64:c3:c7:bf:f6:22:cb:e6:ed:fc:da:98:36:86:84:
c4:9f:18:73:3a:85:cf:93:3a:87:00:8a:7e:76:15:
34:39:c3:04:b0:92:bc:49:e8:97:24:40:86:69:c8:
85:7e:9d:bc:b1:a0:b7:46:7e:e6:e8:79:2c:1d:3a:
d7:cd:f9:f2:e0:aa:b3:11:4f:e1:75:96:02:8c:df:
d6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3F:E7:DC:54:45:29:16:12:18:89:70:78:1D:5D:B5:67:7C:B7:F2
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CT_n3FRFKRYSGIlweB1dtWd8t_I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.72.0/21
Signature Algorithm: sha256WithRSAEncryption
3b:f4:0c:6e:7a:0f:93:d1:0e:17:f8:58:f4:9d:1a:1d:3e:32:
24:c9:a9:8a:8e:a1:7b:ac:8e:08:87:4a:c7:ff:61:28:63:3e:
d1:d8:12:88:c2:8e:66:b2:17:04:c4:7e:73:66:12:b6:a8:f3:
9e:1a:a8:2b:0d:f1:07:5b:71:2b:6c:1c:7f:33:9b:5f:a7:82:
9a:5f:a1:c3:73:f6:30:89:c2:21:0d:73:2b:80:7b:d1:82:09:
ba:b2:b5:28:95:01:9c:6a:93:fd:66:94:49:51:2e:c7:60:eb:
de:ee:16:fb:ef:60:32:19:59:ed:ee:d1:38:8e:9b:6a:64:78:
16:83:aa:41:81:42:46:3a:4d:9f:73:95:20:b0:e2:c8:c9:ea:
68:84:68:c3:04:d7:f0:ce:96:b1:09:c1:0e:74:3e:b0:30:d8:
0f:2a:06:45:34:55:74:90:5a:47:e5:a0:50:c8:f4:47:88:fc:
07:82:57:97:d3:18:36:10:fb:0b:6f:34:4c:bf:78:9f:eb:5e:
c1:f9:76:42:d5:38:6e:8f:7a:7a:ac:11:31:60:18:07:ab:78:
a6:64:16:9d:cf:1c:6a:d6:20:9f:99:29:b8:22:e9:5b:1f:8c:
a4:c5:01:9a:19:29:8f:95:f9:44:20:d6:f8:a8:86:76:f0:df:
24:7c:b6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-fra.rpki-client.org