Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DWPgaPhj8tYvI1xsjxjcROid134.roa
File: DWPgaPhj8tYvI1xsjxjcROid134.roa (raw, json)
Hash identifier: vRsy+T/BGlPlaf+HgTmg0WwL06a8cfSSuzo0xNqsnos=
Subject key identifier: 0D:63:E0:68:F8:63:F2:D6:2F:23:5C:6C:8F:18:DC:44:E8:9D:D7:7E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DWPgaPhj8tYvI1xsjxjcROid134.roa
Signing time: Thu 15 Sep 2022 02:46:30 +0000
ROA not before: Thu 15 Sep 2022 02:46:30 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.188.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:30 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0D63E068F863F2D62F235C6C8F18DC44E89DD77E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ae:f0:8b:28:a3:25:79:de:6b:18:cc:33:dd:
75:80:f3:db:b5:0b:db:95:7f:f5:c5:a1:48:a1:f3:
80:5c:9d:a1:18:95:fe:86:15:a0:0d:e2:74:38:dc:
71:6e:72:59:08:de:01:72:cb:78:76:15:34:d2:6e:
d7:37:e8:cf:ca:c3:b8:78:7a:20:30:43:2f:90:79:
07:0f:b5:49:05:f3:c2:89:c9:d8:7f:8f:85:65:8e:
37:97:37:f9:33:30:5e:4b:ef:a1:67:4b:34:99:f0:
b7:47:8b:2e:f1:24:00:dc:42:e1:e1:56:a6:3a:78:
1e:42:89:7a:33:04:a4:b0:20:e6:4a:45:7b:e4:a8:
bb:9c:55:a9:bb:46:e5:77:c1:8a:30:d0:40:34:4e:
70:8c:df:e6:5f:40:19:54:a8:2d:af:7f:3c:b8:0c:
97:cd:06:f3:4d:44:86:60:66:82:d5:a8:80:68:0c:
41:1a:21:50:a9:68:d2:6f:95:ea:6f:cc:2f:3b:20:
4c:c2:74:a0:62:9d:da:e9:88:0e:69:8e:6d:f8:87:
a7:a8:17:09:b3:f8:33:6d:e8:0e:c7:5a:47:60:5e:
21:88:9c:08:d0:be:9f:6d:44:c0:cf:98:c7:ce:c3:
e9:4b:ad:86:ed:69:80:23:7e:f8:91:0b:4a:5b:a6:
ce:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:63:E0:68:F8:63:F2:D6:2F:23:5C:6C:8F:18:DC:44:E8:9D:D7:7E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DWPgaPhj8tYvI1xsjxjcROid134.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.188.0/22
Signature Algorithm: sha256WithRSAEncryption
99:66:61:e9:d9:d7:a4:89:01:4a:11:ce:09:3d:21:15:15:b5:
c5:ec:0f:65:a7:b0:b2:c2:a8:87:eb:fb:c3:40:3e:92:65:fb:
c8:9a:a0:27:fe:7c:a6:7a:5b:b2:bf:60:e3:32:90:ad:92:05:
d7:65:83:20:fb:6a:aa:88:69:89:19:0a:a3:82:ad:12:e9:c0:
d0:8f:bd:05:68:4a:53:b4:0a:fc:77:79:7d:9c:aa:1e:e1:00:
1b:5b:4f:e7:4d:c1:37:dc:44:2d:98:b1:24:95:ba:0a:e3:8e:
77:24:71:c2:0c:ac:1a:bf:16:de:2e:88:f8:82:e2:61:b1:42:
2e:05:9a:f2:3d:0b:28:8f:32:cf:bb:02:95:89:91:e4:09:dc:
8c:d4:06:05:f1:6d:65:52:a6:4a:25:af:bc:e0:41:e3:2a:8f:
af:37:17:19:cb:a2:d6:ff:a6:c2:60:58:8e:b0:19:96:89:e5:
38:92:a3:20:08:12:5c:ec:b4:bd:d1:79:ef:cd:49:91:c7:36:
2a:c1:24:19:49:4e:37:7c:5c:cf:d4:94:af:fc:91:54:38:30:
36:aa:d6:45:90:3a:6d:74:53:ee:b4:95:5f:8c:2b:03:ff:0e:
7b:0b:77:83:45:a0:8b:22:03:59:90:03:0f:31:12:58:5f:c3:
e6:6d:0a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:26 2024 by rpki-client on console-ams.rpki-client.org