Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Id2xB7xZuGRpAgsvCyeRWQ2FQec.roa
File: Id2xB7xZuGRpAgsvCyeRWQ2FQec.roa (raw, json)
Hash identifier: GfH7S5URxoWqPhpnpe+09I56zYFcAGqkxX3uf4xFTWs=
Subject key identifier: 21:DD:B1:07:BC:59:B8:64:69:02:0B:2F:0B:27:91:59:0D:85:41:E7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Id2xB7xZuGRpAgsvCyeRWQ2FQec.roa
Signing time: Thu 15 Sep 2022 02:46:32 +0000
ROA not before: Thu 15 Sep 2022 02:46:32 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.96.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:32 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=21DDB107BC59B86469020B2F0B2791590D8541E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ed:58:a4:19:0b:40:f8:9d:ff:83:c1:bd:b5:
ab:e5:1f:0f:ae:25:b6:bd:84:b4:f5:f9:42:89:92:
0b:4d:ed:76:13:2e:b9:30:be:a5:58:a8:fa:f8:c4:
05:e6:1e:c3:c8:78:29:e5:9d:5f:cc:98:f8:87:a8:
4e:bb:33:96:7b:c6:53:51:84:b0:c7:f6:f5:37:b7:
af:f1:9e:86:dc:72:5b:66:67:1e:c1:d6:60:41:c5:
bd:60:83:d9:bd:94:c6:d1:0b:b7:87:03:d4:1e:de:
1d:cb:c1:bb:e6:93:41:52:74:01:38:77:8f:24:2a:
a0:8c:ca:c3:69:88:95:81:20:ed:20:86:18:6c:6c:
b5:8b:3c:4d:d6:b4:b4:f7:28:09:2a:c3:9d:71:53:
2f:8b:97:40:3a:89:56:cd:c4:73:cb:25:80:4d:b4:
21:2a:ca:a7:5e:f5:a2:e7:7a:1a:1f:17:5b:3f:09:
7c:e9:79:46:64:30:63:6e:12:75:e9:f2:81:50:d6:
ab:90:bb:d9:a5:6c:26:42:71:f9:ff:21:d9:4c:cf:
0b:0b:12:7d:91:e9:45:6d:68:ff:ad:01:e8:fb:79:
bc:64:3f:9d:89:a4:0b:f6:a8:a0:92:55:1b:28:6e:
26:33:02:cf:e1:8b:8a:9e:5d:6f:fe:06:03:6d:5e:
0f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DD:B1:07:BC:59:B8:64:69:02:0B:2F:0B:27:91:59:0D:85:41:E7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Id2xB7xZuGRpAgsvCyeRWQ2FQec.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.96.0/20
Signature Algorithm: sha256WithRSAEncryption
52:3d:ee:6c:90:52:e1:eb:1a:3e:fc:1d:35:d3:7f:44:cd:9c:
c1:51:91:34:e9:06:6e:5b:46:f3:a6:d2:1c:f2:c5:35:24:1d:
2d:82:b2:70:ea:37:64:d2:51:47:db:53:42:a8:33:b5:0f:45:
d5:ec:f0:fa:e7:b3:15:2f:b8:05:71:fc:a7:f9:04:88:c2:d8:
7f:c3:3b:43:97:1a:fd:80:85:19:a2:25:ec:22:d7:aa:e0:5d:
a0:73:bd:fe:03:d8:5d:07:ad:e9:72:e3:bb:cc:c4:12:f1:f4:
14:7f:ac:c2:e2:ba:fe:64:43:d3:eb:6b:95:39:fb:5b:9b:fe:
5e:0f:d4:19:f6:99:a6:b5:c8:62:a8:50:53:84:c2:2b:63:b7:
44:9a:29:16:7c:ee:b3:6b:90:b8:b7:72:a4:34:6c:d4:35:68:
1b:17:af:39:0a:f9:ba:e7:9f:4d:4c:fd:21:81:08:0b:65:93:
32:17:1e:bf:de:d6:f1:13:9c:f9:59:ad:7f:0a:7b:c2:b9:25:
de:08:80:13:60:e8:5e:91:10:ce:a6:1d:54:07:66:a4:5f:01:
92:2c:e6:c9:51:89:76:29:66:58:71:7a:c8:9c:bd:67:d0:91:
c6:dd:80:a7:1b:ee:8f:a0:ff:1f:74:dc:58:ba:bb:f6:65:4a:
15:b7:f5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:50 2024 by rpki-client on console-fra.rpki-client.org