Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GYyxaertIZeKQRSWTGX7lwjVYSs.roa
File: GYyxaertIZeKQRSWTGX7lwjVYSs.roa (raw, json)
Hash identifier: Q5TM3nrHeGYpyhDizkTDmobp34M1BnX/NHw12mf0xWk=
Subject key identifier: 19:8C:B1:69:EA:ED:21:97:8A:41:14:96:4C:65:FB:97:08:D5:61:2B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GYyxaertIZeKQRSWTGX7lwjVYSs.roa
Signing time: Thu 15 Sep 2022 02:53:33 +0000
ROA not before: Thu 15 Sep 2022 02:53:33 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.144.128/26 maxlen: 26
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:33 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=198CB169EAED21978A4114964C65FB9708D5612B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8f:f9:b0:ab:60:21:f2:fa:70:6d:c6:cc:d9:
d6:1a:e8:77:54:3e:80:3a:7a:ac:d9:18:15:a1:79:
2f:e1:d4:a8:f2:1b:4c:76:1d:ea:44:eb:9c:80:2c:
d6:fa:d8:72:97:2c:d0:ec:b5:71:4d:dd:16:f6:c3:
57:42:f2:bc:68:45:1c:2f:64:40:21:55:25:20:36:
ed:96:44:2a:06:74:3a:03:5f:7f:20:81:4a:bd:99:
96:43:05:16:cc:73:9e:50:62:a0:cb:29:73:7c:62:
b7:7a:0c:e7:f4:8d:4d:d6:ef:5f:b8:3d:ec:68:37:
6d:0f:fe:48:34:5d:57:79:6e:ad:78:1d:51:df:45:
23:d5:80:d6:54:48:8d:f5:9d:78:7d:a2:85:ee:bd:
51:6a:2a:22:f6:29:57:a1:62:e0:0e:68:7f:7e:10:
79:72:e4:af:41:61:ec:45:25:04:2e:a7:31:4d:60:
ff:c0:96:3b:da:84:bc:f2:d8:c8:5a:52:a5:2b:87:
61:df:fd:34:a1:72:d0:b4:bc:00:9d:f9:06:ad:b3:
e9:dc:28:e8:27:4b:d3:2e:c6:3f:4c:61:f5:7a:0b:
58:e7:8d:94:47:90:20:03:72:22:37:75:ce:58:4e:
e4:7a:b7:08:8f:d2:04:e7:f5:51:a9:29:06:a7:c4:
43:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:8C:B1:69:EA:ED:21:97:8A:41:14:96:4C:65:FB:97:08:D5:61:2B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GYyxaertIZeKQRSWTGX7lwjVYSs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.144.128/26
Signature Algorithm: sha256WithRSAEncryption
03:e0:fe:5f:1d:aa:8a:aa:cd:4d:4e:68:ce:74:b7:53:7f:bf:
21:2b:7a:ba:24:4c:5e:f8:e6:71:3d:8f:94:cc:39:f7:38:88:
27:fb:49:0d:4b:ae:09:b2:4c:9c:3a:cb:8f:2c:e1:88:53:99:
ba:7f:db:8c:91:a9:e4:0e:1f:89:ee:b2:37:a6:3f:6d:03:1b:
e6:13:08:90:2f:e0:2e:c0:47:21:e7:c4:ea:71:e2:60:1f:8a:
3f:7f:e5:f2:c7:fc:73:9d:7f:57:59:2b:59:7c:6c:47:55:e8:
5b:99:1f:05:67:6e:eb:27:99:ee:d4:32:d1:a3:1b:b7:e8:24:
85:4a:7b:7f:58:0b:d7:bd:56:e7:90:77:a9:b4:34:f2:a3:f5:
ca:24:51:91:17:a8:3f:ae:54:08:26:ec:23:49:f1:2f:59:ca:
c0:53:5b:2f:7d:17:78:55:dd:90:5a:f7:2d:1a:da:3d:80:a4:
db:fa:e7:f3:ad:48:88:65:b9:b9:5b:9d:31:d4:2a:d3:9a:79:
de:78:7e:c6:5d:fa:51:d1:c6:d8:f5:fc:f8:40:d7:74:8b:32:
4b:37:42:0c:c0:59:89:07:53:0a:30:ca:7e:3a:ad:45:4f:ed:
dd:0d:9c:33:76:8a:7e:b4:4c:67:6f:fa:b6:71:5e:4e:eb:b3:
54:bf:39:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:27 2024 by rpki-client on console-ams.rpki-client.org