Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GmfKhWIEeuIftFTE06TWS-7T3Dc.roa
File: GmfKhWIEeuIftFTE06TWS-7T3Dc.roa (raw, json)
Hash identifier: c6l6wnaTgkv3y5NJuF6PezlOnMm2XvvrgBG6lfzl6bY=
Subject key identifier: 1A:67:CA:85:62:04:7A:E2:1F:B4:54:C4:D3:A4:D6:4B:EE:D3:DC:37
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1B0A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GmfKhWIEeuIftFTE06TWS-7T3Dc.roa
Signing time: Wed 29 Sep 2021 02:46:03 +0000
ROA not before: Wed 29 Sep 2021 02:46:03 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.193.252.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6922 (0x1b0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:03 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=1A67CA8562047AE21FB454C4D3A4D64BEED3DC37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:46:dd:9b:1f:02:3c:5d:42:60:02:79:6e:b1:
0e:89:21:4e:af:5e:0b:60:8e:1a:d9:98:0e:86:59:
c2:d0:5c:e1:c9:36:c4:c2:ec:6b:4a:e3:29:26:ff:
9f:f4:1d:d4:6a:3a:24:7f:b2:66:85:45:2a:5c:c0:
f6:03:ee:48:10:85:0f:76:ab:15:ed:70:a9:9c:99:
ee:ae:48:04:0e:bb:fb:b5:f5:d0:56:dd:8a:52:5a:
69:14:bf:f5:a2:e8:a6:da:f5:7d:de:a0:39:e1:b8:
cb:97:70:ca:99:c3:ac:6a:97:52:4b:49:6b:10:5d:
11:46:50:88:e4:c5:81:b1:a8:24:60:96:a8:18:9e:
40:8c:5e:b4:a7:05:ff:cc:11:5f:cf:84:ec:d4:c5:
52:ab:b7:8e:c7:5e:92:1c:95:de:a0:4e:24:f6:2f:
19:e8:3c:91:d4:43:09:43:7d:88:59:8c:67:44:d8:
91:4f:08:5c:d3:fe:8f:3c:a1:f5:3f:5c:01:7a:99:
ef:22:ef:28:1f:40:23:37:04:5c:55:b3:c7:6b:a4:
25:de:fc:28:09:d6:38:cf:65:9b:71:bb:32:99:ea:
0c:c6:14:ad:d8:45:45:b3:e3:2a:9d:2a:05:9b:47:
83:03:56:14:26:92:6a:d7:f7:bd:97:e7:25:6c:d8:
50:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:67:CA:85:62:04:7A:E2:1F:B4:54:C4:D3:A4:D6:4B:EE:D3:DC:37
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GmfKhWIEeuIftFTE06TWS-7T3Dc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.252.0/22
Signature Algorithm: sha256WithRSAEncryption
91:9d:df:f0:10:60:03:cc:88:b5:17:32:83:e0:61:63:7b:d1:
f7:af:2b:47:4f:97:5a:a2:e6:4c:7b:a3:39:d3:1f:89:a5:88:
cc:cf:24:f7:6b:cf:53:9f:d1:df:69:b5:92:f3:7f:d4:64:77:
42:ff:d5:d7:10:4b:da:81:6b:df:60:8b:2d:46:87:bb:52:9e:
2e:55:67:c2:8e:ea:83:a1:80:10:2b:d3:04:aa:db:c0:b0:a6:
d5:81:b8:b3:fc:a3:03:bb:a8:a6:12:5c:70:3e:c0:c3:7b:62:
6d:03:f1:1a:1e:03:08:54:c6:fd:60:ba:47:8e:74:34:d1:75:
47:b3:c1:10:26:67:9d:c7:66:f4:53:73:89:c1:cc:db:31:89:
22:57:e7:9b:25:6b:85:ee:98:97:05:10:5a:34:d4:e7:d1:6a:
1b:b6:ec:f7:38:c6:11:35:67:18:02:be:c4:09:3f:e6:41:d1:
e2:39:8c:2a:b2:54:b8:b4:57:26:70:be:fa:a6:58:df:6e:04:
b5:12:5c:f4:fc:b8:04:f8:8f:5b:23:2b:44:3a:a8:f0:71:43:
94:cb:d9:5f:06:15:32:79:39:95:18:56:9e:a0:73:cf:4d:1a:
4e:57:51:f3:ed:81:d4:91:e0:c0:8e:85:c7:10:3a:91:11:80:
c1:da:e6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:50 2024 by rpki-client on console-fra.rpki-client.org