Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Dxl3lUDnEnV0Fr5FmXJlaUkyVc0.roa
File: Dxl3lUDnEnV0Fr5FmXJlaUkyVc0.roa (raw, json)
Hash identifier: qgiUl2CD9KxJEefULRsRMJHA3MkJpZ2epxmb7AuANBs=
Subject key identifier: 0F:19:77:95:40:E7:12:75:74:16:BE:45:99:72:65:69:49:32:55:CD
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Dxl3lUDnEnV0Fr5FmXJlaUkyVc0.roa
Signing time: Thu 15 Sep 2022 02:45:28 +0000
ROA not before: Thu 15 Sep 2022 02:45:28 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.152.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:28 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0F19779540E712757416BE4599726569493255CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c0:d6:89:ba:5a:44:ce:6e:ba:3e:f8:c0:a3:
2a:c8:0d:07:78:5c:32:b3:97:d7:8e:ce:26:64:c0:
88:9a:00:dc:e3:aa:c4:3b:f7:f1:5b:10:0b:57:04:
1a:61:4c:54:77:99:6b:1e:81:64:91:8a:9c:2a:f1:
bf:fa:d5:76:44:d2:7a:0a:99:34:ff:6c:fb:92:17:
34:ff:20:6a:3b:47:42:e9:6b:51:bd:e9:5f:94:cf:
fd:85:db:2f:11:2a:b4:2f:96:ff:5c:43:c2:5e:4f:
0c:8f:75:0f:57:36:77:2b:d7:67:31:55:c8:22:9d:
6d:01:e7:a9:9a:af:b2:a9:cb:ae:14:6f:45:0a:95:
23:67:2c:d3:9f:9a:0f:4b:df:5b:f5:23:ee:65:79:
db:3a:60:fa:11:e7:64:11:8b:2f:75:23:73:08:26:
86:34:52:e0:c9:f0:f1:83:ab:0d:69:b7:5b:68:5d:
4a:28:d2:eb:53:01:5f:c7:5f:6b:b3:d0:e9:86:14:
5f:d2:44:ec:56:e1:76:b3:57:be:d9:52:3d:f3:72:
46:4a:a9:d7:7d:e5:83:e6:99:42:e2:66:eb:e9:84:
bb:24:51:83:14:7d:93:94:91:d0:fb:bb:60:78:55:
bf:80:5d:80:a2:03:34:79:b9:98:5a:85:7c:3b:d2:
b2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:19:77:95:40:E7:12:75:74:16:BE:45:99:72:65:69:49:32:55:CD
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Dxl3lUDnEnV0Fr5FmXJlaUkyVc0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.152.0/21
Signature Algorithm: sha256WithRSAEncryption
25:3c:73:2a:87:d9:5b:22:71:7a:22:c9:d8:68:4c:b2:3f:f6:
27:b7:60:05:48:24:25:65:0e:95:c4:e6:ef:27:f7:e7:f3:e4:
95:8e:c8:67:99:40:d2:94:3f:d0:b9:84:5b:9a:ed:25:38:ef:
4e:eb:25:13:14:5d:26:ba:cb:24:0c:4d:97:fb:f7:cc:f4:1d:
4a:08:ae:6e:a3:5d:3e:5d:bd:3e:59:b7:9b:61:c8:43:98:a5:
38:18:d0:0e:3f:27:6a:b4:73:5b:bf:51:e7:15:6f:b5:c2:68:
2c:99:83:c4:f0:7b:28:e2:db:77:9d:e9:a7:22:97:61:98:e8:
62:76:41:20:e6:a1:5e:ac:79:2d:c8:27:d0:fb:dd:f9:c5:94:
78:6d:eb:35:79:21:30:53:a3:34:72:a1:97:82:b0:12:5e:8a:
4e:18:e3:24:bf:09:33:fa:14:2d:f6:f2:ec:bc:31:95:5a:f8:
2b:8c:03:d7:72:0b:d1:60:73:c9:d7:3d:59:0e:0b:8a:46:7a:
ab:df:93:a2:5c:0a:35:90:13:a4:59:a1:bb:8c:9d:58:48:a8:
5a:ab:ba:b3:a9:d1:c0:cd:26:e8:d1:3c:f1:8e:f4:13:67:da:
41:0d:3a:3c:57:16:34:bb:67:c2:18:08:81:3d:62:34:f2:a4:
49:ab:8f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-fra.rpki-client.org