Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DX6AOvzczTN9behWwHicQrAw6zs.roa
File: DX6AOvzczTN9behWwHicQrAw6zs.roa (raw, json)
Hash identifier: e/SZwZ7CSgVv49DSm6jwwDfjXSBx8VQNqt7wqhCpjLk=
Subject key identifier: 0D:7E:80:3A:FC:DC:CD:33:7D:6D:E8:56:C0:78:9C:42:B0:30:EB:3B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DX6AOvzczTN9behWwHicQrAw6zs.roa
Signing time: Thu 15 Sep 2022 02:45:22 +0000
ROA not before: Thu 15 Sep 2022 02:45:22 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.88.0/21 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:22 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0D7E803AFCDCCD337D6DE856C0789C42B030EB3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8d:e5:f6:58:e4:67:f9:ed:17:5e:9b:d4:3c:
e7:c1:ea:2f:4f:fd:52:79:90:34:21:e7:95:b3:69:
04:c8:0c:61:90:4b:55:2a:11:5b:1a:85:0d:32:67:
bc:07:de:0c:e1:70:4d:19:f0:1c:f0:38:ba:65:b5:
ed:45:a4:1d:f8:79:54:19:1f:79:7b:be:81:eb:54:
e9:52:26:78:b2:62:18:0d:11:e1:28:4e:de:ae:f7:
ca:c7:53:e8:ed:a0:94:4f:bd:f4:24:e9:52:5b:a0:
c9:49:e9:b1:15:6b:07:01:54:0d:b2:9c:e7:c6:2a:
00:00:bb:85:2d:4a:90:0e:d0:c8:65:0c:23:ee:50:
6f:5f:1c:80:a4:7d:7a:27:56:b7:e2:fc:20:14:c3:
f2:8a:76:79:2a:cf:53:db:2a:fe:01:a7:9a:36:70:
e7:b9:06:18:be:0e:a3:5d:c4:fc:5a:12:5f:f7:ad:
cd:fb:97:98:ce:5d:67:c1:d2:89:31:bf:86:0d:ae:
73:51:55:5c:4f:8c:a7:a7:55:3a:8c:69:c4:34:17:
69:63:26:10:b6:b4:99:24:a2:67:f8:50:98:3b:95:
13:e0:f2:2a:09:13:d4:81:da:8d:ad:27:20:51:c2:
35:df:18:5d:d5:af:cc:0b:b4:5e:b1:69:f5:e3:b7:
71:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7E:80:3A:FC:DC:CD:33:7D:6D:E8:56:C0:78:9C:42:B0:30:EB:3B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DX6AOvzczTN9behWwHicQrAw6zs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.88.0/21
Signature Algorithm: sha256WithRSAEncryption
51:a5:eb:5f:0d:ec:06:5e:8a:40:5e:06:d6:e7:95:44:3b:4f:
5f:72:b1:7b:0f:fe:86:b5:ee:a1:7b:45:26:11:5d:d5:ee:77:
7b:0b:e9:41:86:13:9f:dc:3a:ce:2d:56:76:b2:e0:b7:cd:fb:
b5:8c:47:77:36:d1:7f:0a:44:01:0b:9a:d3:75:3d:07:6c:69:
95:43:62:7b:75:d5:58:09:c0:ed:0e:61:72:5b:94:64:cb:eb:
44:9c:e9:46:39:07:e7:e6:22:ba:5c:f8:be:9f:25:1d:83:31:
69:76:5a:4e:d2:f3:e2:81:b3:7e:9f:a6:50:e9:3a:0c:21:2b:
80:2c:64:9e:4c:cd:57:98:1d:65:aa:79:d5:50:da:1d:98:32:
1e:0d:e9:7c:3f:01:6f:d9:e1:83:c1:28:46:87:64:74:d3:e8:
a9:f2:45:27:c3:2c:7d:40:9f:ac:05:3f:21:b6:27:82:77:a2:
df:52:60:2d:34:b6:7e:d7:d8:77:a7:c0:32:a4:4b:6d:6f:3e:
13:ba:22:78:73:13:e0:ac:62:00:90:4b:34:ac:f8:a8:cb:5f:
32:20:85:ac:9c:57:7f:b6:61:11:8c:98:81:7a:d9:af:63:8f:
f3:2b:27:95:f1:0a:03:30:06:fe:0c:fd:c3:61:2d:cf:45:d2:
eb:97:74:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:26 2024 by rpki-client on console-ams.rpki-client.org