Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Fhk9y19Y5H6WZpZWWLQbYKW5m3I.roa
File: Fhk9y19Y5H6WZpZWWLQbYKW5m3I.roa (raw, json)
Hash identifier: 6ygH+DO9PCrw0AcefRN1+pHDoMiBvJyqr6jsemqfLVE=
Subject key identifier: 16:19:3D:CB:5F:58:E4:7E:96:66:96:56:58:B4:1B:60:A5:B9:9B:72
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Fhk9y19Y5H6WZpZWWLQbYKW5m3I.roa
Signing time: Thu 15 Sep 2022 02:53:16 +0000
ROA not before: Thu 15 Sep 2022 02:53:16 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.216.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:16 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=16193DCB5F58E47E9666965658B41B60A5B99B72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:68:73:3d:91:e2:f1:da:77:8e:bf:41:4d:d9:
b2:94:90:21:13:f2:35:7e:89:bb:01:e9:3d:f1:71:
10:09:f6:a9:bf:7f:20:77:95:b8:e6:97:65:e3:37:
01:12:da:13:9c:c1:f3:fc:70:ff:cb:a0:02:19:79:
15:d3:57:83:9b:12:e3:d2:70:af:65:43:b6:fa:9b:
0d:97:1d:f0:79:ca:0e:7d:c3:85:b7:d5:17:f1:10:
62:4f:e1:3d:7a:f6:b4:bc:58:f8:ed:48:a3:81:87:
2b:b0:15:2a:b8:dc:38:84:1e:f0:d5:fd:85:a6:17:
4d:d0:80:2c:84:e9:7b:b8:c6:47:e2:2d:e0:ba:00:
9b:1c:8c:5d:14:ec:27:d6:33:9a:8a:0a:22:08:25:
a4:26:54:1e:49:79:d6:63:0b:bd:ca:33:8b:74:dd:
04:7e:bf:40:0a:d4:01:5c:91:9e:7b:48:ea:3f:2f:
8b:6a:ca:23:50:7b:a1:c1:6d:d8:45:58:e7:e0:35:
19:2a:80:5d:7a:14:25:3f:81:a6:f3:3d:bc:e3:a8:
6b:3f:fa:ff:5f:f1:c9:a4:0d:4f:20:e1:3d:d5:2f:
10:b9:e9:7e:1b:45:9c:da:ea:91:8a:6c:dd:9b:77:
54:14:f6:c1:ff:45:89:27:10:5d:ae:8f:da:fe:47:
5b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:19:3D:CB:5F:58:E4:7E:96:66:96:56:58:B4:1B:60:A5:B9:9B:72
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Fhk9y19Y5H6WZpZWWLQbYKW5m3I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.216.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:d3:9b:1d:95:3c:16:ed:03:95:1e:39:ca:70:24:bb:ba:ec:
7c:41:32:c4:d4:8e:c4:83:fd:01:9d:5a:a1:f0:6e:13:41:7e:
2d:15:cd:ad:41:be:d6:93:50:ae:72:dc:8e:c0:9b:bd:a1:a5:
cf:f2:c0:bb:f4:b5:c3:f2:4b:fe:77:e3:b1:68:e9:4b:6a:10:
68:93:4d:94:a8:bf:7a:2e:f0:d3:16:63:c0:04:ef:14:26:ad:
5a:04:c6:5d:10:68:61:02:f6:92:47:a9:af:09:97:ac:6f:76:
73:db:11:db:13:27:fd:41:60:d9:9e:a6:9d:24:63:88:fc:af:
36:4c:b0:83:f8:08:09:18:65:69:42:1d:c9:4e:91:d2:69:69:
b2:9d:34:6d:b1:84:ee:30:64:a2:a2:eb:ec:02:bc:fa:8e:d8:
bd:fc:f3:38:70:ca:16:1c:b8:91:f3:30:6e:b9:37:81:7e:38:
50:4f:1a:a3:74:ab:dd:67:f6:71:bb:18:50:0c:e9:dc:61:a5:
29:f0:d4:3a:7b:89:e6:3c:15:a1:4a:af:fb:70:30:a0:af:06:
88:8a:53:27:83:aa:b5:9d:61:ed:fc:cb:21:36:f0:ec:53:31:
d3:80:fa:dc:79:b1:6b:45:d3:4f:12:f6:04:26:03:2d:a9:72:
87:f7:b9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:27 2024 by rpki-client on console-ams.rpki-client.org