Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Kv0Q9LeTKKx5H6sJtcVRWe5Thrg.roa
File: Kv0Q9LeTKKx5H6sJtcVRWe5Thrg.roa (raw, json)
Hash identifier: 4VVc96HXoskdEvJQ3toYwvp4tgHWtcyZafJcHM6YgEk=
Subject key identifier: 2A:FD:10:F4:B7:93:28:AC:79:1F:AB:09:B5:C5:51:59:EE:53:86:B8
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 222D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Kv0Q9LeTKKx5H6sJtcVRWe5Thrg.roa
Signing time: Fri 25 Nov 2022 04:40:52 +0000
ROA not before: Fri 25 Nov 2022 04:40:52 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.128.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8749 (0x222d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:52 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2AFD10F4B79328AC791FAB09B5C55159EE5386B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:29:ae:60:41:d8:7f:c6:49:25:c4:57:fe:8c:
ae:d5:11:f5:7e:bb:c9:10:6a:3f:72:6e:e2:b6:d1:
f9:77:ca:7e:b6:17:81:a8:26:1d:52:7d:6d:a6:67:
29:f3:e4:48:d4:93:b0:e7:b9:87:44:0e:16:b9:af:
5f:64:53:f4:bd:6a:cf:16:71:58:1a:40:1c:43:57:
cf:d1:1e:bb:69:77:6c:71:5e:ff:a3:c1:12:85:2d:
5c:8b:80:b2:fd:23:ec:64:be:99:ef:16:fe:97:6e:
39:62:13:8e:99:ca:a9:87:13:01:24:74:c9:62:59:
12:33:dc:3f:6d:d9:de:0e:74:19:17:3c:c0:10:42:
4b:bc:30:9a:c8:6a:88:52:50:8d:1d:e7:1e:b8:cc:
28:eb:19:c9:51:8e:3a:92:85:9e:54:48:f6:30:51:
73:8a:00:0b:99:71:e2:03:57:3a:3f:75:2e:90:f6:
2a:5a:f0:b7:61:4b:2a:09:36:13:b4:15:60:d5:63:
af:f5:33:4c:f6:b8:09:83:20:f4:00:ca:13:6a:e3:
08:d6:7e:40:13:34:57:3d:c1:c7:3a:1c:b7:e6:3c:
4e:3f:69:03:db:a9:bc:df:b9:f0:e6:5c:ec:bf:a3:
c0:c6:a6:9e:02:09:07:9d:cb:c4:e3:42:a0:cb:f4:
a7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:FD:10:F4:B7:93:28:AC:79:1F:AB:09:B5:C5:51:59:EE:53:86:B8
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Kv0Q9LeTKKx5H6sJtcVRWe5Thrg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.128.0/19
Signature Algorithm: sha256WithRSAEncryption
1a:7e:34:4b:94:1e:d0:ad:7c:c6:13:0c:9a:2e:2d:fe:6d:94:
a7:67:ea:93:c6:3c:45:fb:05:43:8e:3f:90:61:bf:99:13:cb:
a7:49:cf:ed:df:f1:81:36:4e:d5:1f:9d:9c:94:c8:62:05:cb:
5d:50:43:64:d3:53:0d:cd:68:b4:eb:76:f8:d7:38:82:ff:5a:
d6:29:e4:fc:01:80:41:3b:54:ac:31:d0:79:20:aa:6a:98:65:
1d:9c:6f:60:81:52:9c:46:0a:be:a0:b7:77:60:09:66:c0:fd:
5a:15:b1:d0:92:de:0b:90:19:f9:88:ce:b2:67:a3:a4:ba:70:
e8:dd:f6:36:c4:e3:e9:08:72:76:0c:8e:01:cb:f0:87:88:18:
b4:57:39:62:16:09:94:82:ba:fc:ff:aa:fd:b7:99:90:b2:59:
7c:33:9c:ce:3d:91:1f:8f:65:40:86:b6:fe:ee:d1:b1:0a:c7:
10:96:5f:68:85:67:29:87:11:f5:7f:34:15:89:a3:ec:98:9d:
2a:16:1f:d4:79:48:b1:f8:e4:a9:27:1c:b8:a3:56:e9:40:5c:
c5:bd:c0:c1:f3:87:15:a9:08:8e:da:94:1b:66:dc:97:5d:ba:
aa:81:44:f5:a9:f5:51:e2:f4:c3:5d:21:e6:30:1d:1c:23:99:
94:2c:ac:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org