Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DWw_vQu35cPAvxZf1G8XE2Q2z-k.roa
File: DWw_vQu35cPAvxZf1G8XE2Q2z-k.roa (raw, json)
Hash identifier: ro/bNe4wIYcfZ1lr4dm42DgrfX+G/Ggg1CWpPy0ImSo=
Subject key identifier: 0D:6C:3F:BD:0B:B7:E5:C3:C0:BF:16:5F:D4:6F:17:13:64:36:CF:E9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2257
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DWw_vQu35cPAvxZf1G8XE2Q2z-k.roa
Signing time: Fri 25 Nov 2022 04:41:03 +0000
ROA not before: Fri 25 Nov 2022 04:41:03 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 123.193.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8791 (0x2257)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:03 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0D6C3FBD0BB7E5C3C0BF165FD46F17136436CFE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:90:2a:3f:ce:95:7c:cd:6c:f5:cf:03:75:20:
05:1c:74:c5:8c:5b:c6:f9:90:25:38:7b:5d:6a:e5:
d3:02:a1:42:a9:e2:66:b4:84:13:fe:c1:d7:0a:26:
10:67:46:c7:cc:89:0b:88:9e:1c:3a:3d:8a:31:77:
9c:44:8c:e7:c8:c3:a9:1c:ae:ff:e6:1f:c9:db:40:
4e:e6:d0:7e:46:a9:7a:4e:02:a9:68:34:13:6c:51:
6a:8e:e5:a1:59:c8:a8:60:5b:48:35:f8:fe:29:91:
fc:40:96:3b:98:c5:46:eb:bc:cf:0f:e7:43:7b:2f:
f9:dc:ba:3a:ff:e0:5a:ad:55:fe:d8:23:6f:67:0e:
2a:dd:ae:ed:bb:52:8c:aa:d9:6d:3a:2a:6a:d7:4b:
16:7c:0d:84:67:f0:c7:74:da:b3:e6:57:5f:e8:52:
4a:01:56:b7:d2:b5:3b:ff:12:b1:53:7a:05:b6:1b:
ce:ee:b4:d0:ed:5d:6c:73:86:77:f3:a0:ad:d9:3f:
82:fa:23:ac:3b:85:ca:72:a5:38:31:17:6e:01:56:
59:91:97:f5:0d:ca:85:41:40:13:71:5b:af:0d:88:
d8:48:19:d8:8b:44:af:50:d9:60:49:cd:3f:52:52:
a3:28:cc:f0:23:59:5a:54:ef:c3:43:c2:45:d6:9f:
70:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6C:3F:BD:0B:B7:E5:C3:C0:BF:16:5F:D4:6F:17:13:64:36:CF:E9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DWw_vQu35cPAvxZf1G8XE2Q2z-k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.125.0/24
Signature Algorithm: sha256WithRSAEncryption
07:a3:c2:08:63:c4:45:27:05:2b:5d:ea:1b:0a:67:bf:90:fc:
dd:05:79:e1:01:a9:d7:68:61:61:35:ac:8d:34:e6:dd:de:fa:
c2:9f:b5:e3:cd:72:c2:d9:ad:92:ac:58:5c:1e:36:ae:cc:8d:
ac:dc:e3:5c:58:f1:b7:5b:1f:c4:6c:a4:ef:68:cd:d8:98:11:
b4:99:18:1d:05:b0:f5:21:f4:4c:e4:4c:79:1f:71:42:75:e5:
2f:de:05:f0:eb:08:20:56:0a:c8:60:28:a1:5b:04:fc:2d:db:
63:7c:20:80:9d:cf:21:f6:68:b6:5d:2a:55:3b:a4:ec:85:d9:
94:db:33:bd:80:fc:1a:0a:2e:7b:c1:47:39:ea:64:3f:b6:6a:
9e:ab:bb:9c:a2:a9:8f:a3:d2:7d:5e:97:ba:a9:58:78:8f:66:
4b:6d:79:de:da:14:50:b0:66:b2:8b:18:5e:35:ab:3d:36:f4:
72:a1:df:69:83:ad:02:71:a6:5a:a3:78:58:01:84:6c:f1:d0:
7a:65:02:dd:16:86:82:09:37:f9:3c:a7:73:cd:e6:0e:cf:07:
12:7a:90:3d:61:32:0c:59:d2:24:1f:7f:9b:b1:22:27:9a:65:
2e:1c:26:29:23:d2:35:7e:fd:d6:b1:66:94:df:86:39:2b:08:
8a:39:0a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-fra.rpki-client.org