Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FVSPWQ9a5r7kgDWLGOxm7KN22oQ.roa
File: FVSPWQ9a5r7kgDWLGOxm7KN22oQ.roa (raw, json)
Hash identifier: DrQXpF27MgDc9QkBZh6ObB407p4TiYKWgeqc+uDm0/Y=
Subject key identifier: 15:54:8F:59:0F:5A:E6:BE:E4:80:35:8B:18:EC:66:EC:A3:76:DA:84
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FVSPWQ9a5r7kgDWLGOxm7KN22oQ.roa
Signing time: Thu 15 Sep 2022 02:44:39 +0000
ROA not before: Thu 15 Sep 2022 02:44:39 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.164.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:44:39 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=15548F590F5AE6BEE480358B18EC66ECA376DA84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bb:e6:70:39:55:3f:4b:5d:38:4e:41:29:38:
ef:ff:fc:00:85:53:2f:f1:59:9e:1a:5f:49:3f:71:
8c:83:c7:8b:3b:6b:c0:54:bd:00:21:8e:6a:8d:41:
67:c8:9e:46:c0:7c:b8:6f:f8:db:62:29:25:48:2e:
b7:66:ef:ee:0a:77:33:db:2a:83:36:c6:03:af:26:
19:07:32:1c:a2:2b:70:b4:85:e2:ca:8a:01:00:5d:
28:88:c0:9e:71:64:81:10:38:fe:af:99:3f:01:d5:
85:95:c6:f3:20:4b:cd:e4:3e:3d:49:e8:c1:71:f8:
b1:56:8c:fd:4b:b1:2d:bd:60:f8:ff:99:05:06:72:
5b:ab:63:71:2f:77:32:35:2d:bc:12:4c:3f:1c:97:
ab:2a:5d:c7:04:97:17:e4:d2:27:42:a3:0f:98:9e:
15:05:26:ea:af:6c:65:b8:be:c9:81:11:d1:e9:1d:
d9:3c:aa:26:82:70:46:84:c8:a3:cd:58:71:83:b8:
da:2b:ee:6a:79:2a:43:20:1d:01:f5:cf:ae:d2:89:
55:08:87:54:df:75:b2:5a:fd:a7:49:25:d5:55:86:
7b:6f:da:81:28:0f:4e:0c:a5:8a:11:d8:a8:9f:9b:
06:43:30:ad:fe:1e:0a:eb:88:1a:10:2e:60:58:69:
4c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:54:8F:59:0F:5A:E6:BE:E4:80:35:8B:18:EC:66:EC:A3:76:DA:84
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FVSPWQ9a5r7kgDWLGOxm7KN22oQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.164.0/22
Signature Algorithm: sha256WithRSAEncryption
76:a0:15:c4:b3:ca:a7:21:d8:31:15:57:a9:a7:7d:9d:ee:00:
17:b7:ff:2d:3d:e8:1a:ff:dc:3d:6b:de:11:60:ab:a6:e7:24:
9b:ef:a9:77:56:98:c9:13:e8:76:60:9f:ab:2f:f6:c2:86:0c:
bf:ec:32:db:24:38:13:ad:36:fb:a8:9f:03:8c:4d:6d:50:5d:
dd:f0:70:dc:02:f5:7d:92:51:e5:61:bf:21:ee:a1:e6:95:28:
66:b2:72:57:96:1c:eb:5c:7b:45:15:28:98:5b:75:a1:d4:85:
06:8d:da:7c:25:a1:46:49:82:b4:67:8a:9e:7d:5a:9d:f7:64:
24:78:d8:65:61:85:7d:dd:15:fc:a3:e2:91:72:f4:d8:72:77:
a9:d0:9f:3d:ed:af:22:a6:10:ad:2b:92:38:95:79:ce:9e:ae:
d1:30:7d:5c:7b:26:53:ba:ad:0a:fb:89:7e:ff:98:dd:e5:be:
7c:f0:34:ed:a3:a0:24:1e:11:2a:46:cf:21:7e:e6:51:09:ff:
0f:33:19:9b:e9:4d:62:12:c6:2e:f3:1b:0e:ac:fa:c1:09:2d:
1c:f4:7b:04:f9:33:13:d2:33:6f:af:54:07:a1:41:36:1f:0f:
cd:d7:3a:0d:9f:9b:07:7f:14:f0:b6:0c:7f:7c:df:ee:db:7c:
c0:2a:b9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:27 2024 by rpki-client on console-ams.rpki-client.org