Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DLuUW6BlnoqLuVrFvlR9o_Yl74Q.roa
File: DLuUW6BlnoqLuVrFvlR9o_Yl74Q.roa (raw, json)
Hash identifier: ldPu2ajQ/2mXSWbDVrOkiknxR1R2yfpME+Y04XSh5kE=
Subject key identifier: 0C:BB:94:5B:A0:65:9E:8A:8B:B9:5A:C5:BE:54:7D:A3:F6:25:EF:84
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DLuUW6BlnoqLuVrFvlR9o_Yl74Q.roa
Signing time: Thu 15 Sep 2022 02:52:49 +0000
ROA not before: Thu 15 Sep 2022 02:52:49 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.109.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:49 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0CBB945BA0659E8A8BB95AC5BE547DA3F625EF84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:66:75:83:9c:dc:52:2f:7b:42:7c:ff:58:24:
3d:5b:d9:bb:87:fa:14:34:e9:26:1e:f0:f9:ea:30:
a1:b3:c5:09:ca:d4:48:82:cc:c0:7e:b7:bb:c2:ff:
4e:4e:24:1b:c2:1e:b4:84:fd:a3:9a:46:60:06:96:
9b:a1:bb:d9:79:bb:7f:fa:08:fd:e1:21:1b:a8:fd:
24:76:fc:da:27:3d:4d:42:9e:bf:18:57:03:a3:6d:
f8:d4:31:cb:32:00:58:30:88:0f:36:4d:b4:56:4f:
98:a1:bd:1d:c6:4b:b8:ab:5a:49:9e:82:cc:c9:d5:
d3:27:60:99:c6:bd:87:fd:cb:ed:e1:bb:76:8e:0d:
04:e2:41:48:90:63:c8:3e:f5:73:74:13:f6:98:36:
f4:77:39:85:b7:35:75:b2:55:5f:16:04:db:bd:10:
3b:90:01:1e:39:02:07:85:f0:44:48:6c:c1:e5:a6:
e0:e0:ad:11:a7:9f:0c:ec:e4:18:d8:d4:d3:74:02:
ab:1d:10:a2:f3:e2:50:c9:53:4e:b4:cc:09:1f:e5:
21:be:7e:d8:7c:ca:c0:ff:08:23:45:6b:7c:60:6b:
b1:b8:86:a3:d3:07:4c:1f:4b:29:e9:95:7e:6d:7d:
dd:b4:18:8a:12:44:3a:a3:d3:59:06:97:84:d4:3b:
9b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BB:94:5B:A0:65:9E:8A:8B:B9:5A:C5:BE:54:7D:A3:F6:25:EF:84
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DLuUW6BlnoqLuVrFvlR9o_Yl74Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.109.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:aa:4a:a6:68:29:e6:79:46:0e:cb:45:cb:9d:12:9c:21:f8:
c3:3b:e0:17:36:89:03:10:47:60:e0:62:56:e3:f1:be:07:be:
ca:9c:51:a2:5d:7b:5e:0d:76:5e:34:e5:27:71:c9:95:25:e8:
ac:3c:0b:e4:cf:f1:1a:29:e1:bc:73:3b:fa:fd:f1:46:92:44:
4d:8d:8c:a2:22:5a:2f:40:48:91:fd:2c:2e:22:69:a3:a6:7f:
0a:9a:02:c6:25:1d:aa:07:60:0b:c5:c3:4c:6c:2e:bd:25:ae:
9c:98:b9:43:07:8a:54:cf:cd:bc:04:91:e8:22:8d:94:ed:09:
97:81:d4:37:95:03:87:0e:04:11:78:b3:a1:f0:a7:e8:40:ef:
2e:3c:cd:c0:63:2c:70:49:9a:54:e5:ee:06:7c:33:ed:aa:41:
39:15:8f:3f:b9:c7:78:3d:25:cb:1e:b5:5d:13:f2:71:97:26:
08:ae:77:de:cf:85:81:b0:98:3f:92:7a:44:62:f6:2b:65:b6:
f2:6c:8d:db:74:c6:60:38:8d:6e:37:1f:bb:43:99:c1:97:6f:
64:c6:3c:c1:1a:45:bb:9d:d4:d8:0d:f5:dc:25:a6:51:b4:d7:
0a:f0:e5:da:69:26:8c:54:f2:c8:c6:b3:e3:59:95:6d:0b:db:
76:9f:b9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:26 2024 by rpki-client on console-ams.rpki-client.org