Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KvnQhPO2eFhs9gHickS-4zGMY5E.roa
File: KvnQhPO2eFhs9gHickS-4zGMY5E.roa (raw, json)
Hash identifier: Brs0kaTvIUxTGXpxx1EH6PIhlj11yNqPnT3JFEZ2IFk=
Subject key identifier: 2A:F9:D0:84:F3:B6:78:58:6C:F6:01:E2:72:44:BE:E3:31:8C:63:91
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KvnQhPO2eFhs9gHickS-4zGMY5E.roa
Signing time: Thu 15 Sep 2022 02:52:33 +0000
ROA not before: Thu 15 Sep 2022 02:52:33 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.184.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:33 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2AF9D084F3B678586CF601E27244BEE3318C6391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:43:ee:f2:eb:ee:db:18:98:53:50:f8:a5:51:
0b:92:af:c2:b1:ae:3e:c9:58:a0:f5:fe:85:33:68:
8f:cc:a8:cb:04:a7:12:5c:8c:22:93:9e:cd:06:6d:
32:fd:28:0c:3c:41:47:70:c4:4d:a7:54:16:1c:5b:
35:95:2b:ea:02:4c:44:d4:32:4f:fa:82:cc:ff:1d:
c9:78:21:88:c8:14:2e:dd:36:4f:7c:79:88:b5:4f:
2e:d5:7d:a6:d4:31:ac:46:4a:df:9a:a8:5d:f3:b5:
e8:22:ad:dc:97:34:8d:4d:cb:6c:28:3d:b3:3d:3e:
0f:3a:e0:70:73:b8:6e:54:95:e1:d8:2b:ca:c1:ca:
24:b7:19:b6:c5:bd:f2:ba:9d:38:24:89:68:9a:93:
f3:c8:63:1b:d4:18:f1:81:a3:43:8e:76:7a:17:a5:
ad:da:cf:9a:39:7e:ce:12:7f:4e:97:13:9c:c3:59:
9f:ee:ac:80:c2:28:a3:49:46:f5:6e:de:a7:7a:32:
a9:06:fe:0d:6d:8a:9b:31:cc:0a:84:0e:79:ab:63:
3d:47:ad:14:69:73:a7:25:07:f7:05:aa:e3:88:82:
df:72:11:e9:3a:09:d2:44:f6:be:5a:87:24:e7:7d:
6e:af:f3:33:fe:d9:92:ac:26:b0:a0:9f:d0:95:95:
03:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F9:D0:84:F3:B6:78:58:6C:F6:01:E2:72:44:BE:E3:31:8C:63:91
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KvnQhPO2eFhs9gHickS-4zGMY5E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.184.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:3f:00:92:be:6a:ef:77:7f:71:eb:74:2c:79:b6:66:4a:7c:
3c:13:85:94:16:fb:d4:7b:ee:01:d7:ff:65:bf:7c:b1:39:33:
44:57:07:97:56:b2:d6:b5:c9:98:66:63:a2:26:91:83:a3:07:
66:7a:cc:e5:82:90:5a:b9:02:3e:4f:f9:ec:82:ed:cd:26:e0:
c4:32:66:0e:7e:ca:78:2e:8d:97:3e:9e:f1:4f:5b:6c:e5:5c:
91:bb:fe:d0:6b:98:d5:1f:1e:a6:75:41:06:ba:97:a8:9c:a1:
51:b6:17:f5:f6:82:c9:6d:4e:5b:98:b0:58:cb:3f:ff:8b:53:
12:a1:cb:df:1d:82:a1:13:32:9f:4c:75:89:53:c7:b0:72:d0:
e8:84:7d:38:9a:ba:03:d1:8e:05:cf:81:4f:5c:6f:e7:30:0b:
5f:cb:84:fb:46:c5:07:2f:3f:c3:1a:b6:02:a4:89:7e:5a:6a:
bc:93:2a:ff:07:79:06:29:fa:c1:aa:f5:e5:7d:6a:80:74:c5:
26:f1:26:c1:fa:12:84:1c:aa:86:3a:06:71:fc:e4:bb:4c:20:
bd:9d:a2:fe:96:c9:60:58:bc:27:3f:97:77:31:60:1b:ee:d3:
3e:55:ca:a2:e0:62:08:16:55:6d:42:c2:5f:b1:e0:d8:e0:c0:
b5:6b:ce:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org