Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IwX7_joVDoPbjwWuS9odJaftiow.roa
File: IwX7_joVDoPbjwWuS9odJaftiow.roa (raw, json)
Hash identifier: I/n0AAfauMenZmwBtzB7rRC4RGanZFdneaj3bbTT1oA=
Subject key identifier: 23:05:FB:FE:3A:15:0E:83:DB:8F:05:AE:4B:DA:1D:25:A7:ED:8A:8C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1A7B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IwX7_joVDoPbjwWuS9odJaftiow.roa
Signing time: Wed 29 Sep 2021 02:45:24 +0000
ROA not before: Wed 29 Sep 2021 02:45:24 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.195.148.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6779 (0x1a7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:45:24 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=2305FBFE3A150E83DB8F05AE4BDA1D25A7ED8A8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:35:3a:cc:ae:7d:9d:5c:81:90:80:9b:af:4c:
7a:7b:45:fa:c3:fa:41:85:06:74:82:ff:f3:b4:fc:
da:b6:03:d0:cb:97:a8:f2:9c:63:fb:d5:01:73:cf:
6a:12:96:1e:dd:40:fb:7e:89:18:bc:c8:b8:89:da:
4f:d9:bd:05:eb:39:2f:72:5f:2b:9f:2a:47:85:6c:
f4:96:b0:0c:7c:3d:f0:f0:72:57:7b:a4:ee:7b:4e:
44:5e:16:f6:45:a5:40:74:e9:dd:1c:15:12:ba:ad:
d8:95:80:5a:1d:bb:89:f1:29:7b:8c:f6:ed:a3:ee:
54:7a:3b:49:63:f1:93:5b:58:d5:ba:1e:66:8b:0d:
05:72:df:9a:24:ac:f0:01:d4:c2:be:60:bb:e9:5f:
de:8e:97:54:d7:25:d7:e0:fc:7d:37:19:3a:10:2b:
c5:9d:c7:eb:f3:f5:ab:5a:b5:e7:fa:05:9b:55:70:
ca:fd:70:19:c7:f8:95:f6:7c:b2:58:a5:7d:5c:68:
7d:61:ce:53:a1:60:2e:7e:bf:eb:a2:d8:a0:21:ef:
8f:39:20:16:ed:4c:79:28:b5:f3:74:e2:82:2a:f1:
1d:63:cf:d3:86:40:95:31:9d:e1:08:cf:7c:3b:fb:
dd:bb:f1:d2:8c:3a:4d:88:f2:a4:11:7a:3b:c3:3e:
c5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:05:FB:FE:3A:15:0E:83:DB:8F:05:AE:4B:DA:1D:25:A7:ED:8A:8C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IwX7_joVDoPbjwWuS9odJaftiow.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.148.0/22
Signature Algorithm: sha256WithRSAEncryption
49:4f:82:a5:4e:ac:a4:19:39:01:52:67:16:e6:49:d7:78:4e:
f4:37:67:d5:78:ae:9f:53:62:0f:bf:79:ed:05:df:34:0b:64:
28:35:99:78:80:89:9f:85:e4:d1:0d:b7:e6:3b:1c:ee:10:98:
f4:83:7d:4c:18:47:80:cc:88:db:97:f9:8e:7c:70:88:3a:64:
43:84:e9:af:2f:ad:41:88:d2:ad:ea:4a:6a:aa:13:9e:ad:bc:
20:2b:70:be:9d:3e:b3:06:3f:11:76:80:4f:68:2d:fd:58:3a:
0f:0b:77:cd:22:9d:f7:ec:fc:11:19:14:1e:fb:a4:f6:be:10:
19:0e:cb:b7:6d:5a:2a:d1:c1:bb:07:f5:6b:a9:9e:69:89:ca:
f9:49:98:5c:c1:f7:72:83:56:8d:a4:5c:0b:85:04:db:89:f3:
24:af:44:03:06:b8:96:15:64:84:ce:71:4f:0a:2a:0f:69:df:
bb:a7:10:23:a1:e9:5f:84:77:49:54:aa:d4:38:1c:91:d4:2a:
0f:b9:97:ff:b2:05:21:9d:2a:19:63:fe:99:c4:3f:b9:55:e8:
2b:4a:a3:33:a3:1d:aa:d8:87:92:47:be:33:dc:0a:90:75:f2:
ca:62:5c:5f:46:e4:b7:91:b2:50:93:e3:75:78:13:52:11:cc:
39:e7:48:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:28 2024 by rpki-client on console-ams.rpki-client.org