Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CfPt7YgULWpUKTdM6bKYBDozPVc.roa
File: CfPt7YgULWpUKTdM6bKYBDozPVc.roa (raw, json)
Hash identifier: +rmZ01CTOLnDuWies/9LtUSUdSLiMWIDktd9BYbYbYk=
Subject key identifier: 09:F3:ED:ED:88:14:2D:6A:54:29:37:4C:E9:B2:98:04:3A:33:3D:57
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1A6F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CfPt7YgULWpUKTdM6bKYBDozPVc.roa
Signing time: Wed 29 Sep 2021 02:45:20 +0000
ROA not before: Wed 29 Sep 2021 02:45:20 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.195.200.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6767 (0x1a6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:45:20 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=09F3EDED88142D6A5429374CE9B298043A333D57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:79:1d:a0:f2:7c:da:20:ca:d9:d2:d1:ee:a2:
b0:01:33:11:56:f2:48:76:07:12:25:02:50:74:1f:
ab:a0:9d:32:8a:0e:24:d8:29:bf:9c:a4:60:47:5c:
38:3f:ec:a0:0d:27:11:79:8e:e1:82:9d:b7:ae:6a:
9b:c5:f6:d2:bb:c0:01:5f:67:ff:67:78:81:5d:3c:
12:54:0f:43:8b:67:6a:5d:85:5d:43:a7:21:d3:9f:
96:54:70:37:1f:b0:27:d1:02:4f:0e:c1:45:a2:b4:
0b:c6:f7:37:ad:41:58:c7:e1:68:87:fa:07:c8:83:
e6:1b:65:c0:81:07:19:0c:44:0f:58:dd:b3:94:6d:
f6:1c:f0:f4:35:65:a7:fa:9e:f6:4b:9b:68:ff:a9:
f8:5f:38:56:21:fe:b9:cc:07:4e:a3:76:a6:c1:06:
42:6b:e2:84:57:32:18:a6:3b:92:a7:2c:73:11:70:
ae:19:b6:4a:66:0b:f1:81:c6:d0:c9:95:0f:d5:0a:
81:dd:e3:34:3e:df:92:34:86:b3:19:a7:5a:27:28:
35:48:ed:2d:d6:62:63:2e:e0:27:fd:78:a7:26:f7:
ca:6a:6c:09:53:3f:28:83:15:4e:ff:01:be:0a:02:
36:9a:54:77:18:d5:74:c1:c6:5a:04:b4:91:5b:f1:
ee:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F3:ED:ED:88:14:2D:6A:54:29:37:4C:E9:B2:98:04:3A:33:3D:57
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CfPt7YgULWpUKTdM6bKYBDozPVc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.200.0/22
Signature Algorithm: sha256WithRSAEncryption
90:94:d8:24:44:e7:33:8f:5c:2c:47:62:93:50:f7:ec:1d:e2:
56:32:3c:60:52:78:07:e5:8e:1f:76:4f:cc:8b:10:7e:2b:b9:
88:53:e2:ce:cb:86:1f:ab:9c:ff:e1:5e:77:c5:c2:fa:b9:ee:
62:34:0b:a9:57:c4:ab:87:2b:7c:16:1c:51:33:89:33:2a:97:
45:7f:b0:bb:fb:ac:ab:19:71:e6:41:d7:19:90:84:b1:8e:f8:
ad:9f:49:09:22:7b:f8:8e:c5:00:52:51:33:a5:18:b4:ff:77:
2e:69:36:4e:78:60:f5:5f:50:4b:fb:2a:b8:f1:ef:14:1b:14:
8b:55:35:ba:69:b2:a6:fe:57:04:a9:84:e6:cc:07:24:95:97:
b5:ad:9f:c3:a1:e7:ee:7e:54:c6:33:e2:12:ae:1e:ad:8d:e0:
55:80:57:b7:6d:9f:b0:89:ac:8c:b7:cd:23:5d:f9:6c:16:7d:
98:bb:00:56:f5:ed:9e:bc:15:7d:64:c1:49:00:c7:3c:74:05:
8e:97:5e:c4:c6:83:6a:0a:b7:a4:20:da:cd:02:ee:da:8e:cd:
e8:39:d6:60:04:3f:64:80:73:80:fd:47:15:ab:cc:65:8b:37:
be:c4:03:e9:1f:6a:8f:0a:49:2e:5f:09:e7:f7:03:2c:91:15:
ec:cd:40:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:26 2024 by rpki-client on console-ams.rpki-client.org