Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CZiL_ndt1O3zyfzBmbaAgAzUhrY.roa
File: CZiL_ndt1O3zyfzBmbaAgAzUhrY.roa (raw, json)
Hash identifier: ag+hJR2lRDYH1+hDQrrHFjpiLrRkzIXjWnf5MxUN2dM=
Subject key identifier: 09:98:8B:FE:77:6D:D4:ED:F3:C9:FC:C1:99:B6:80:80:0C:D4:86:B6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 222E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CZiL_ndt1O3zyfzBmbaAgAzUhrY.roa
Signing time: Fri 25 Nov 2022 04:40:52 +0000
ROA not before: Fri 25 Nov 2022 04:40:52 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.204.64/27 maxlen: 27
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8750 (0x222e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:52 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=09988BFE776DD4EDF3C9FCC199B680800CD486B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:88:71:5a:63:66:5d:dd:e0:b5:c1:2f:8c:a8:
3f:4c:eb:86:ce:53:d3:d9:43:fa:96:4a:15:93:69:
f9:46:9d:20:12:4d:ac:f0:47:70:15:82:2a:c2:2f:
dd:85:2e:40:31:af:ba:eb:22:27:da:66:91:e4:f3:
69:4b:4c:67:a7:89:49:47:5b:04:ee:b1:bf:0f:94:
be:39:4f:1d:fb:77:19:cf:d2:81:5c:82:65:db:6d:
6e:91:de:bd:e5:cd:bb:28:36:c9:c3:3b:88:1e:d6:
08:ed:8b:07:1f:c2:ab:55:65:2c:c9:8e:60:d9:ad:
3b:0b:8e:af:7f:aa:39:19:21:3f:39:f9:d1:d5:dd:
16:86:e9:8f:f9:1f:ac:87:dc:66:0d:30:5c:c8:50:
0b:23:e1:e1:d2:86:30:e3:1a:81:d6:3e:76:0a:45:
d5:24:e1:bf:63:64:05:ac:1d:d5:9d:1c:5b:aa:c8:
8a:13:72:a6:9c:7c:57:8b:c2:3f:66:9b:cb:c3:ef:
07:71:ea:26:11:7c:0a:f9:a9:8c:58:14:98:b3:86:
61:00:c3:e0:f9:98:36:91:dd:ac:58:7e:b1:52:6f:
92:9c:7f:3f:70:d2:a2:9d:ab:fd:e4:75:69:69:2e:
74:37:a4:8d:f8:e4:19:bf:bd:91:7b:02:35:a9:dd:
c2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:98:8B:FE:77:6D:D4:ED:F3:C9:FC:C1:99:B6:80:80:0C:D4:86:B6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CZiL_ndt1O3zyfzBmbaAgAzUhrY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.204.64/27
Signature Algorithm: sha256WithRSAEncryption
b5:bb:21:73:58:c8:b0:5f:90:4e:f3:23:91:c2:18:dd:53:da:
44:39:f7:7c:a2:04:0f:b6:76:4b:59:f2:4a:96:b8:2e:19:0a:
f5:ac:c1:12:3e:c9:76:b0:e8:8c:32:3b:a6:7c:da:6f:4b:4c:
ce:43:35:7e:42:6a:67:59:f2:6d:5e:7f:47:3c:57:32:68:82:
8a:9f:8c:8a:d6:17:77:b0:6e:88:e1:0d:78:83:47:07:ff:3e:
ea:f9:ff:c4:f1:8e:01:59:61:7e:2b:0b:a1:b7:7d:e9:e9:06:
f3:9a:c6:62:b2:69:c9:0f:09:8a:f3:be:72:3f:6f:45:f9:9f:
17:b9:32:6d:6b:90:30:eb:c5:32:c4:e2:ff:40:4a:c9:cb:2b:
e3:15:fe:bc:88:73:63:a8:f7:e2:bb:b5:91:65:05:50:de:ae:
00:a1:ea:24:aa:ce:11:ff:09:6d:26:77:05:08:14:a2:f7:6a:
dc:bc:e6:c8:f2:cc:92:39:a4:e6:e6:f6:3a:3b:c2:52:37:96:
36:38:ac:0f:01:8a:8a:32:7d:b4:39:ff:88:68:7a:72:c3:11:
8c:52:e2:30:52:16:75:8c:e0:97:81:ae:a9:45:b0:2c:00:f4:
ab:8a:03:62:15:b9:c9:c7:a2:c8:9e:ef:e7:d9:5d:48:52:63:
71:70:dc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-fra.rpki-client.org