Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L0aB8vmP8YZUNCvmrYAeY4AvwKk.roa
File: L0aB8vmP8YZUNCvmrYAeY4AvwKk.roa (raw, json)
Hash identifier: 1wsyEnXIVNmhCglTbmgTD546sL/YKmO7v4/Q9Mtbjfs=
Subject key identifier: 2F:46:81:F2:F9:8F:F1:86:54:34:2B:E6:AD:80:1E:63:80:2F:C0:A9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2202
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L0aB8vmP8YZUNCvmrYAeY4AvwKk.roa
Signing time: Fri 25 Nov 2022 04:40:39 +0000
ROA not before: Fri 25 Nov 2022 04:40:39 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 123.192.240.0/21 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8706 (0x2202)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:39 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2F4681F2F98FF18654342BE6AD801E63802FC0A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:52:d3:be:bb:13:24:fe:e2:9f:df:f3:94:42:
9f:b6:a2:92:3e:dd:88:11:8f:45:79:b0:85:ea:88:
c8:93:14:84:b7:b5:0e:4b:04:cb:ee:95:f0:11:01:
81:14:8b:c3:12:8f:11:64:1c:4b:bf:ea:cc:f0:7c:
53:17:86:12:e3:a5:75:72:47:9c:bc:f3:5f:47:bc:
98:ba:6a:59:19:d5:c3:c7:bc:21:60:90:13:b4:e1:
52:09:8e:88:31:95:ac:99:8e:37:03:4e:4e:ab:aa:
a2:39:f7:d7:cb:0c:6d:cc:71:ee:88:74:96:3c:21:
bd:31:cc:39:cd:06:5c:66:3f:53:8e:a2:9c:2b:61:
df:3c:0c:a2:eb:49:39:57:44:e1:d9:0e:8e:6c:68:
d9:6a:79:50:df:dc:41:90:ad:71:97:71:01:e9:bc:
ca:3a:03:06:c6:28:da:dc:4b:a2:3a:99:06:c8:75:
b2:9e:8e:12:57:e4:e5:2a:34:20:33:9c:f7:a4:a0:
0b:35:e9:a3:14:5b:a6:24:ef:eb:d8:03:2b:39:46:
21:43:5d:61:ab:ce:1b:a4:0c:b8:80:d2:0c:fe:1f:
ef:c2:6b:bf:45:f5:c4:34:de:29:93:67:c7:8a:b5:
b6:7f:3e:e2:51:1a:43:af:4d:d0:e0:9c:8a:dd:7b:
4f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:46:81:F2:F9:8F:F1:86:54:34:2B:E6:AD:80:1E:63:80:2F:C0:A9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L0aB8vmP8YZUNCvmrYAeY4AvwKk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.240.0/21
Signature Algorithm: sha256WithRSAEncryption
31:c2:42:b6:cf:8a:2e:cd:34:2c:c8:d4:c6:d5:9f:ab:7a:9c:
1c:9e:c1:f4:b2:b7:b2:46:7d:47:cc:74:01:0c:30:65:28:b3:
58:b3:60:fc:55:eb:6c:38:92:b3:cb:58:06:ff:c1:45:00:1d:
87:8d:c7:0f:ff:38:51:82:76:af:86:61:d7:c1:cf:a7:21:cd:
12:9f:cb:12:c1:0a:f5:4f:1e:7e:46:a8:89:5a:6d:87:1c:92:
6c:fb:31:15:db:aa:97:85:e8:99:2a:87:40:9b:1c:b1:53:60:
80:a7:ce:57:ab:86:be:c9:a5:c0:a9:35:80:fd:33:2c:0d:9c:
ef:63:38:f8:36:8a:9f:b3:67:c2:01:49:6a:cf:55:76:25:eb:
15:12:ce:a0:ee:f7:1a:7a:14:84:4d:25:e4:32:28:de:2d:04:
e4:71:ac:f9:70:04:eb:bf:0a:c0:2c:23:ee:b4:f4:94:b6:86:
97:b5:5e:ff:5f:d4:49:d9:36:f2:19:7d:09:1d:15:55:c2:cf:
0e:bb:4e:30:28:3f:16:71:10:57:1c:bb:86:19:7c:e0:c0:ae:
9e:98:77:57:eb:3a:1b:d2:8a:2f:0c:29:33:f0:93:46:0b:5d:
cf:87:46:c7:c6:1a:a5:9a:b5:91:d3:a5:75:bd:48:a0:5c:33:
74:31:e2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org