Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L22AjOTWIXCE1Ji7_egM-iKfZZc.roa
File: L22AjOTWIXCE1Ji7_egM-iKfZZc.roa (raw, json)
Hash identifier: 8mQ2f2RpzXTyoODGpc3+S07nDgNrTjD/F3b1vQ6R2Z4=
Subject key identifier: 2F:6D:80:8C:E4:D6:21:70:84:D4:98:BB:FD:E8:0C:FA:22:9F:65:97
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 21A2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L22AjOTWIXCE1Ji7_egM-iKfZZc.roa
Signing time: Fri 25 Nov 2022 04:40:08 +0000
ROA not before: Fri 25 Nov 2022 04:40:08 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.188.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8610 (0x21a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:08 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2F6D808CE4D6217084D498BBFDE80CFA229F6597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:31:54:21:33:1e:61:33:39:ca:4f:bf:6d:03:
5b:d4:3c:9c:0c:a5:81:ef:29:55:40:27:e7:cb:7f:
b9:13:41:74:13:ed:f1:dd:40:6f:58:8d:95:35:2b:
1c:74:ab:d7:11:f6:6e:bc:61:b4:a5:6a:c5:a4:d3:
78:ab:77:98:55:25:77:67:25:10:f3:41:d5:04:02:
6a:70:87:a2:e1:98:50:63:76:d6:fd:ed:02:60:c3:
57:a7:54:c6:be:fc:2b:8f:e2:bf:33:c2:ca:15:25:
c4:c2:72:3c:37:cc:bd:42:d7:38:af:45:91:22:99:
7c:f6:38:26:c9:4d:f7:01:9a:80:75:2a:42:9b:15:
4c:2b:c0:64:e8:03:2c:91:27:f7:dc:95:63:25:cc:
93:81:a1:8a:a4:fb:7b:9b:46:c4:e9:85:49:8e:c5:
48:7c:a7:c1:f4:bb:25:ee:dc:6c:d6:25:90:ba:a6:
0d:a3:67:ad:1b:49:a0:c3:95:57:44:e3:8f:ca:3a:
db:09:d6:9e:72:1f:73:e1:cd:89:1d:3a:4f:12:2a:
ae:f8:fb:ff:9e:60:4b:d3:8d:db:a0:98:77:4b:16:
c4:35:b9:d1:ac:e5:54:a7:92:5a:e9:b5:f6:73:30:
e5:46:01:17:f1:1e:18:ff:24:34:7a:2b:da:48:42:
d3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6D:80:8C:E4:D6:21:70:84:D4:98:BB:FD:E8:0C:FA:22:9F:65:97
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L22AjOTWIXCE1Ji7_egM-iKfZZc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.188.0/22
Signature Algorithm: sha256WithRSAEncryption
98:de:6e:b9:df:b6:df:d9:d8:6b:c8:d2:e8:e9:59:b6:87:06:
39:a7:13:cf:69:6e:20:8d:d5:a0:01:15:2b:9d:e7:f2:ac:82:
66:46:f5:ff:fe:e5:41:3c:31:c9:52:ab:d9:17:91:a5:65:fd:
eb:86:cf:a6:6d:ac:51:ae:b1:35:6b:82:9f:9b:b4:f1:d8:92:
15:d4:30:67:58:c3:48:c7:f3:e0:5e:a1:b2:8f:ca:6a:e3:9e:
a7:ac:31:9f:ef:01:6e:49:8b:be:6e:86:25:72:81:05:8f:7d:
59:08:bd:76:4b:01:1b:10:34:9c:75:4d:3e:95:02:60:12:f0:
f0:7f:c5:69:4b:28:f7:fe:c1:ce:de:33:5c:94:92:10:8d:6a:
f1:f0:05:7e:30:9c:55:10:22:ac:96:e5:c6:c5:49:aa:60:bf:
a6:2a:97:2c:bf:5a:a6:37:0a:3c:d2:0d:88:a9:5d:06:ae:dc:
2f:f2:c3:eb:9c:84:c8:95:5d:3b:e6:bd:72:54:93:f6:e4:52:
e3:f3:4b:80:25:12:0f:57:6f:1d:6e:45:08:d8:02:81:fc:20:
f1:9a:fa:47:df:1b:3f:d3:1d:09:37:f8:91:f1:ab:ff:e6:3e:
8b:4d:e6:4a:a4:0f:a1:13:db:f2:99:ce:d5:95:bb:7d:da:6e:
c6:1e:9f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org