Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JiSKekNOueoVlDA8ardlTIdoXUw.roa
File: JiSKekNOueoVlDA8ardlTIdoXUw.roa (raw, json)
Hash identifier: MGiHYJCKLb0CB0n9DCbgn5VRF54y6ClXzl8PpEQXR9U=
Subject key identifier: 26:24:8A:7A:43:4E:B9:EA:15:94:30:3C:6A:B7:65:4C:87:68:5D:4C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1B2A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JiSKekNOueoVlDA8ardlTIdoXUw.roa
Signing time: Wed 29 Sep 2021 02:46:14 +0000
ROA not before: Wed 29 Sep 2021 02:46:14 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.193.4.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6954 (0x1b2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:14 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=26248A7A434EB9EA1594303C6AB7654C87685D4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:13:22:41:d4:a8:9b:cd:46:80:7f:6c:9b:89:
2f:89:43:15:e7:4c:a2:74:f8:bb:45:ff:62:96:85:
46:84:c4:0e:3d:28:5c:87:20:33:c8:c8:91:a9:7c:
79:5b:31:13:d3:2f:51:b6:d6:3c:e9:2c:1f:f7:19:
08:1b:1e:4c:6e:e2:a3:6a:d8:87:5a:76:bf:b3:6d:
00:67:2c:a4:92:90:d8:ce:e9:2b:5f:8c:26:86:71:
2e:7f:88:c6:88:b4:22:fa:69:99:d9:7f:92:18:62:
5d:88:7b:5f:c9:53:bd:d5:93:13:3c:0f:56:9e:56:
e0:e3:04:14:92:72:f5:8c:19:23:74:ce:98:2e:7a:
57:76:d0:c7:19:03:d3:a1:08:eb:2f:ba:53:0b:e9:
fe:48:2a:7f:05:87:7b:23:59:40:98:5e:f2:65:80:
94:4d:5e:4a:19:f9:5f:f9:ff:e9:36:48:e5:dd:03:
97:94:76:20:39:1e:c2:58:07:af:cb:e1:7f:cf:d3:
60:d8:2b:dd:21:df:e6:ac:94:87:ca:34:8a:8e:4e:
5a:39:4c:5f:e4:0c:6e:cf:22:c9:e7:c7:d7:a5:10:
58:ba:3e:47:af:8a:e5:01:9c:e2:5c:a4:a7:89:8d:
c4:3c:89:04:cc:c3:b2:e8:e7:ae:aa:da:57:14:ec:
7f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:24:8A:7A:43:4E:B9:EA:15:94:30:3C:6A:B7:65:4C:87:68:5D:4C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JiSKekNOueoVlDA8ardlTIdoXUw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.4.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:2f:e2:37:33:1a:5c:9c:cb:90:46:21:fe:5c:dc:ac:47:86:
f1:3f:0f:80:f1:f5:0f:eb:2b:5d:26:a5:f2:55:4b:9f:4b:d9:
59:30:77:ca:86:d3:54:7d:b1:42:3c:c0:8b:4b:54:da:2e:d5:
87:c3:29:e7:ed:e2:ee:b4:72:be:6b:80:e3:5d:ba:9c:65:04:
12:f8:e4:50:8b:cf:59:b3:4f:f0:c8:17:a6:2c:95:b7:2c:4d:
d1:cf:15:8e:96:f8:d7:db:01:7d:a6:b4:fb:52:02:6c:e3:a8:
ae:6a:32:c1:aa:8b:b2:22:65:90:ab:05:d1:e5:d3:c3:8c:0a:
6f:46:21:73:a3:26:9a:b2:c5:42:cf:1f:81:1c:df:b7:34:7e:
c6:46:95:65:fd:d7:a8:f6:b4:f7:9d:8d:86:4c:0d:11:22:84:
9a:02:c5:49:76:c3:73:7d:5c:5f:77:0f:fd:6d:11:2b:3f:d9:
94:ec:a1:d6:a4:72:19:d1:57:26:b3:41:a1:35:40:d6:0d:6c:
3a:88:1f:39:5d:b0:17:63:55:a8:71:89:3c:c0:60:fc:a4:06:
41:12:74:11:5b:25:40:31:7c:22:35:b2:7b:f8:25:c9:55:58:
a9:7c:bc:4f:9e:4a:b4:4b:e4:2e:d8:2e:09:50:37:b2:a8:cd:
12:a4:c6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:50 2024 by rpki-client on console-fra.rpki-client.org