Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IkXlK7RGDBxaOUWSpf64Htry9sk.roa
File: IkXlK7RGDBxaOUWSpf64Htry9sk.roa (raw, json)
Hash identifier: IZfXRDZGvAkVR5MOjK8kMgZcQ2zdpcyHFppkvxvuwkc=
Subject key identifier: 22:45:E5:2B:B4:46:0C:1C:5A:39:45:92:A5:FE:B8:1E:DA:F2:F6:C9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IkXlK7RGDBxaOUWSpf64Htry9sk.roa
Signing time: Thu 15 Sep 2022 02:46:20 +0000
ROA not before: Thu 15 Sep 2022 02:46:20 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.64.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:20 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2245E52BB4460C1C5A394592A5FEB81EDAF2F6C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:20:ef:47:65:ce:5f:56:6d:04:47:91:04:2e:
c1:50:77:1a:4e:97:6b:6c:1f:0d:92:50:88:02:3f:
1e:9d:2b:54:6d:07:2f:4e:05:7b:76:e5:71:33:9d:
77:6e:0e:af:62:53:5c:a8:59:41:8d:fa:31:1b:3c:
4a:4b:dc:4b:af:d1:78:ac:c1:a1:21:2c:60:ed:c4:
38:0d:ff:ed:98:b1:f1:f3:b3:07:c0:d9:22:94:92:
7b:13:96:30:29:14:ab:10:5d:03:d9:05:b4:5b:c8:
5a:41:e0:2e:ac:58:75:0c:08:27:55:7f:59:40:08:
8f:db:57:fa:5f:99:a6:71:0e:3c:45:6f:bc:b2:da:
cd:70:fd:1b:d1:c4:f5:6e:a0:41:c9:d3:83:34:8e:
39:46:33:01:89:76:9c:aa:f0:73:a5:13:0e:3f:82:
ce:5d:e9:22:23:33:f3:8d:02:82:7b:aa:dc:28:2b:
75:5b:9e:d3:7a:86:54:43:b9:45:6b:87:42:b5:27:
ee:ea:e4:02:0a:0f:1a:56:c4:1f:2b:8f:2e:79:ff:
5a:a7:72:94:6e:28:58:80:be:54:f8:be:20:c6:32:
7d:90:99:dd:cc:8e:fe:c6:bb:f1:a8:4f:d3:88:78:
ad:aa:db:cc:3d:7f:df:10:15:ef:ed:6c:3f:04:f0:
3f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:45:E5:2B:B4:46:0C:1C:5A:39:45:92:A5:FE:B8:1E:DA:F2:F6:C9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IkXlK7RGDBxaOUWSpf64Htry9sk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.64.0/21
Signature Algorithm: sha256WithRSAEncryption
1a:8d:ec:96:4c:cd:35:93:4e:7c:57:6a:65:a0:58:c6:a2:19:
c0:8a:4a:7f:67:65:51:31:d9:7b:a1:a4:72:bd:93:7e:4d:d7:
27:dc:94:79:b4:8d:8e:9c:20:8e:18:d8:b5:a0:fa:03:d1:f3:
57:ec:eb:11:1d:62:e2:d1:03:8c:ea:8d:e6:f7:de:53:58:10:
d3:ae:86:3c:45:ce:a7:90:75:0b:ca:62:6e:b7:df:c2:20:fd:
f3:c6:a6:e8:b2:63:57:e1:42:e3:be:0d:de:9d:0f:1a:7b:a2:
d8:73:04:1c:29:dd:b3:36:19:7f:f9:d5:21:65:f9:f6:79:d9:
1b:e9:10:a1:fe:a1:00:c4:0a:9d:51:1f:d4:74:1a:a6:97:57:
30:03:75:1c:54:f4:db:a0:2d:75:df:32:51:a3:75:5b:43:3f:
0b:59:9c:91:25:c6:2c:87:5e:a6:72:a3:f4:2d:64:7a:4a:29:
40:40:5d:88:5d:c6:5a:82:3c:17:61:40:13:45:d7:c4:7a:2f:
83:3b:32:91:89:2b:11:3a:88:73:6b:28:d6:ef:7a:2e:2d:89:
dc:00:a5:e0:ad:c8:a4:07:42:07:32:c8:13:ea:38:cf:97:0f:
dc:24:cf:7d:82:eb:03:ed:8c:4c:ff:b8:cd:97:21:a3:44:5b:
b5:36:44:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:50 2024 by rpki-client on console-fra.rpki-client.org