Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EVMaACt4XPcnYNcQ5mKeRu7o098.roa
File: EVMaACt4XPcnYNcQ5mKeRu7o098.roa (raw, json)
Hash identifier: ZpGROhhZUI69sbxWUudfmpKGUlA0p/hDapt73RhjnkY=
Subject key identifier: 11:53:1A:00:2B:78:5C:F7:27:60:D7:10:E6:62:9E:46:EE:E8:D3:DF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1DD0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EVMaACt4XPcnYNcQ5mKeRu7o098.roa
Signing time: Tue 07 Dec 2021 08:20:03 +0000
ROA not before: Tue 07 Dec 2021 08:20:03 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.192.164.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7632 (0x1dd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Dec 7 08:20:03 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=11531A002B785CF72760D710E6629E46EEE8D3DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4f:b9:0d:7c:0b:31:8c:26:6b:1a:c7:5d:66:
10:64:7e:30:b6:bf:3b:3f:44:67:44:22:89:68:4d:
46:7b:f3:4a:0d:56:5c:06:c7:2a:8b:1e:ef:da:d1:
8e:ab:85:01:f0:db:8e:b4:78:9f:95:f5:93:25:cb:
fc:3f:1a:cd:32:d3:22:92:cb:6f:04:2f:87:e1:dd:
a8:e1:5f:60:09:bf:cf:52:51:4c:4e:d6:8b:e4:e9:
1d:f7:fd:81:5c:71:f1:0e:2c:dd:6a:70:d9:00:6d:
bf:e9:4e:e7:93:dc:ad:39:6b:84:d1:96:c8:8b:f9:
ca:4c:81:d8:c7:49:3e:bd:87:e0:7b:d2:56:ae:c7:
3b:86:82:7a:cb:eb:6a:01:1a:23:21:49:a2:90:61:
72:a3:8f:81:0c:09:8d:73:43:ab:66:ad:09:41:96:
4d:03:59:dc:f1:73:ab:90:c2:d5:0b:03:cf:e7:95:
5c:14:20:cf:7b:0b:9b:c4:e6:7a:94:ee:30:76:f8:
c9:d4:dc:53:63:89:be:bd:b9:d9:9a:c7:75:05:cb:
34:41:ac:50:81:04:4c:4b:ca:a6:2a:d6:1b:96:cf:
10:73:6c:81:56:ab:41:e7:74:c6:ec:09:94:af:92:
94:0d:b4:76:4a:04:33:f2:56:e4:7a:36:a3:08:02:
30:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:53:1A:00:2B:78:5C:F7:27:60:D7:10:E6:62:9E:46:EE:E8:D3:DF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EVMaACt4XPcnYNcQ5mKeRu7o098.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.164.0/22
Signature Algorithm: sha256WithRSAEncryption
61:37:96:7a:be:ef:2b:e6:f7:32:db:a4:00:16:6d:49:73:04:
b7:01:b2:44:dc:da:8e:be:d7:ad:75:e8:97:52:03:cf:61:47:
ed:76:8f:18:c8:04:fb:75:45:71:04:fd:e0:63:19:65:25:20:
69:40:41:a6:53:ac:0b:40:d1:c6:04:97:71:5d:69:57:d6:e7:
b1:3b:f4:d9:b7:20:a7:7b:ba:b6:cf:1b:d4:1e:22:e1:85:2e:
2d:c5:01:9e:14:f1:bb:a3:ef:6c:9b:96:75:d7:37:16:2a:e5:
26:a5:99:33:8d:0a:74:98:6f:70:bc:aa:16:03:47:9b:9f:52:
2a:4b:af:2b:b4:f3:b1:94:fa:99:82:df:2a:3b:9b:19:f7:22:
0c:7c:04:8f:04:28:8f:cf:b6:a5:3a:a4:5d:94:ab:0d:19:a1:
34:b0:47:63:56:7e:fa:80:11:fb:cf:31:f2:28:f9:c8:07:1e:
e3:26:cb:0d:f8:e4:e4:bd:7a:0a:55:05:48:a9:9f:fd:1a:b6:
b9:42:8e:44:66:ef:ff:80:de:36:d7:c6:4d:87:b9:a3:1e:ca:
25:a1:3d:cd:8b:ee:51:1b:15:90:98:37:13:4e:0b:8b:1c:f8:
ea:23:02:c7:ec:53:4f:f5:24:79:c3:4e:79:8f:f3:b5:31:67:
8e:21:f3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:26 2024 by rpki-client on console-ams.rpki-client.org