Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Cii5aKFEM0w_GDiUEp2VX2nVqrc.roa
File: Cii5aKFEM0w_GDiUEp2VX2nVqrc.roa (raw, json)
Hash identifier: R2T1+T5kQIa1gLRdQByLCUe5KZQNgdvp0E1JToDHE1U=
Subject key identifier: 0A:28:B9:68:A1:44:33:4C:3F:18:38:94:12:9D:95:5F:69:D5:AA:B7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1B81
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Cii5aKFEM0w_GDiUEp2VX2nVqrc.roa
Signing time: Wed 29 Sep 2021 02:46:41 +0000
ROA not before: Wed 29 Sep 2021 02:46:41 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.194.108.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7041 (0x1b81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:41 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=0A28B968A144334C3F183894129D955F69D5AAB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:09:60:a7:ab:5b:8b:43:f8:7b:0b:c0:b2:cc:
59:08:79:51:3f:a9:02:32:a9:fe:cb:95:c1:a9:2c:
12:1c:49:33:cd:a4:cd:02:40:e1:2f:9e:e4:54:70:
e0:f8:1a:88:d5:38:e8:b1:0c:cc:66:89:7f:2b:5d:
75:98:51:07:69:01:19:90:5a:89:d6:7b:a5:f9:0a:
49:b9:f7:d7:ce:ee:14:eb:06:1a:00:9e:f3:91:34:
98:ae:ca:30:30:7c:4f:b4:7c:22:91:2e:9f:48:11:
4e:46:ed:d5:04:2b:37:1a:f9:88:3f:f8:28:a9:1f:
28:a1:4c:72:85:5e:30:69:1d:6f:e4:65:d9:0d:64:
60:bd:7c:18:70:bd:9f:00:f3:e2:97:96:d1:07:a8:
ac:1b:23:a9:87:56:22:5e:72:5c:7f:71:97:64:7f:
ff:e2:95:ff:59:97:03:e8:7e:d2:51:e2:e1:15:d3:
3b:ec:57:11:de:3f:c6:a7:63:f8:66:6e:26:0c:17:
46:81:20:d6:d9:92:2c:7c:52:9e:76:96:14:40:f7:
31:58:5a:27:12:dd:e0:82:bc:b8:cf:7e:9f:43:ec:
62:01:b4:be:58:86:f6:13:16:05:49:37:23:0d:33:
d1:6d:d7:75:c6:90:8c:e7:a1:37:5e:53:43:44:9e:
49:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:28:B9:68:A1:44:33:4C:3F:18:38:94:12:9D:95:5F:69:D5:AA:B7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Cii5aKFEM0w_GDiUEp2VX2nVqrc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.108.0/22
Signature Algorithm: sha256WithRSAEncryption
21:cd:75:54:59:91:64:b6:0d:1b:3a:68:c6:4a:06:3d:e9:ce:
58:6e:75:01:e5:7f:f2:9a:c0:8e:6b:39:1f:2f:a8:f0:1f:19:
49:d6:65:a0:bd:15:0e:09:ef:31:26:f7:eb:22:10:92:1f:7a:
52:7f:cb:65:51:24:6a:cc:a2:e8:0c:f3:01:df:e7:d8:8b:6a:
08:25:8b:d0:75:f7:62:96:23:a4:da:88:87:c3:b9:7d:51:0d:
65:8e:c9:e4:58:84:af:c2:0d:52:08:43:47:7a:20:06:81:99:
18:12:94:34:b6:9f:c3:21:65:6f:f8:7b:8d:aa:91:e6:01:7e:
f7:a7:16:69:04:0b:26:db:86:1f:28:08:be:17:3b:9f:ad:a2:
40:1f:bd:a8:72:64:be:34:4c:fa:fd:24:fa:c5:cd:9d:32:72:
c0:19:6f:f7:a1:09:eb:bd:17:1f:7d:68:7d:af:eb:a3:f3:87:
a6:bc:99:1a:41:ab:a5:f9:24:61:0a:ac:ff:69:e3:26:87:21:
2d:ad:09:a9:b1:5a:35:96:e2:8e:dd:1f:55:70:ca:30:bd:a2:
c3:0c:fa:9a:ef:99:58:a6:f0:70:66:3a:cc:29:65:e8:03:e6:
d7:15:0e:13:d9:1f:fa:34:41:39:ad:4f:5f:9a:25:70:95:3f:
a8:0f:7a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-fra.rpki-client.org