Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HMHSQuxFDt_Vt_s3RBgzPgO5ihA.roa
File: HMHSQuxFDt_Vt_s3RBgzPgO5ihA.roa (raw, json)
Hash identifier: 6QFAbe/SiMWu6JqZs/JBFg+uTsVEKh4Tg0kJub6QqRw=
Subject key identifier: 1C:C1:D2:42:EC:45:0E:DF:D5:B7:FB:37:44:18:33:3E:03:B9:8A:10
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HMHSQuxFDt_Vt_s3RBgzPgO5ihA.roa
Signing time: Thu 15 Sep 2022 02:53:11 +0000
ROA not before: Thu 15 Sep 2022 02:53:11 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.112.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:11 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1CC1D242EC450EDFD5B7FB374418333E03B98A10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:27:73:2f:f2:00:63:11:18:af:10:cf:a1:dc:
f9:1a:05:06:b0:6b:64:c1:80:ff:7a:54:ae:b3:44:
65:c5:76:d1:69:dc:1d:c9:c7:b4:7c:6b:b2:97:86:
2f:73:39:dc:72:4b:f6:9a:c4:ef:ba:7e:12:be:65:
eb:da:d1:8f:85:2b:44:b2:10:9a:06:25:21:64:82:
d9:fc:5f:e4:bb:3b:20:7f:23:a3:d4:b9:22:f9:83:
28:e0:3e:03:65:55:fe:94:cf:e7:ce:7f:11:43:7d:
d3:11:fe:48:e9:74:05:02:ec:54:2c:88:7e:f1:9b:
33:e7:0a:6f:18:55:87:5b:17:41:40:1c:a9:6d:94:
6b:b3:14:70:0a:de:3d:8c:65:41:ac:28:20:be:99:
74:f9:77:89:d0:aa:1f:e1:9e:0c:9d:79:36:6e:62:
1c:04:f5:17:65:4e:24:3b:7a:69:5d:b2:ec:24:ef:
d1:c5:61:a4:54:7a:98:97:fa:88:12:ea:85:cc:8a:
4d:aa:3f:19:49:cf:8f:2b:77:8e:13:45:87:2d:70:
87:67:f7:97:36:25:02:58:66:96:9d:4f:9f:78:b7:
72:1a:86:e4:31:4a:10:51:d2:da:82:6d:4a:43:6d:
b7:b1:20:0f:57:05:9e:bd:7d:3c:35:49:0d:c5:bf:
ec:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C1:D2:42:EC:45:0E:DF:D5:B7:FB:37:44:18:33:3E:03:B9:8A:10
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HMHSQuxFDt_Vt_s3RBgzPgO5ihA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.112.0/20
Signature Algorithm: sha256WithRSAEncryption
95:82:95:92:65:5a:c4:fc:ad:34:e6:35:fa:42:ff:4e:16:35:
ae:4e:d0:54:05:9e:9d:73:70:dc:34:39:ad:a2:ba:78:82:fd:
cb:1b:b4:a2:0a:f3:7f:8e:03:01:02:34:8a:71:18:65:03:6a:
1f:46:d1:e5:4c:57:7f:a0:02:a1:a5:9b:b3:3a:2f:75:fb:0e:
06:b7:37:cd:00:7f:43:fa:a8:0e:30:c2:1c:11:7e:29:b8:e0:
6b:4d:47:74:e1:5e:6c:70:59:56:d2:e5:d7:81:8a:64:4c:e2:
76:65:d1:88:83:ce:6a:c6:ef:a2:42:9e:ec:0c:82:67:95:9c:
d3:ab:0f:4b:c0:67:bc:c5:2c:ae:8d:87:57:28:b5:30:c7:dc:
73:63:34:e4:2e:b2:37:cd:0e:13:49:d3:f9:de:a8:e1:0e:e5:
53:f8:86:93:e5:cf:5e:90:22:52:c7:0a:62:33:9c:d9:c2:5a:
99:21:67:ea:06:67:6e:36:24:60:6b:1f:f6:1e:95:61:4c:02:
60:90:7d:c4:24:f4:fa:6c:0d:b8:4e:d9:95:cc:2f:e8:4a:8b:
da:03:f5:35:6d:4a:d4:c0:c7:ac:6c:4d:e7:63:ae:b7:25:f3:
c5:ac:0c:35:ba:13:46:ec:3b:57:7d:30:1b:f8:9e:47:b1:aa:
03:f5:fe:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:50 2024 by rpki-client on console-fra.rpki-client.org