Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LGkocDGR4srKM8QMXrpgLTnczZQ.roa
File: LGkocDGR4srKM8QMXrpgLTnczZQ.roa (raw, json)
Hash identifier: n8COOOZZEjN2js7sil1NsLH25NXq7EIloLtKt7Hw7KA=
Subject key identifier: 2C:69:28:70:31:91:E2:CA:CA:33:C4:0C:5E:BA:60:2D:39:DC:CD:94
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 192F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LGkocDGR4srKM8QMXrpgLTnczZQ.roa
Signing time: Sun 07 Feb 2021 13:06:05 +0000
ROA not before: Sun 07 Feb 2021 13:06:05 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.192.144.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6447 (0x192f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 13:06:05 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=2C6928703191E2CACA33C40C5EBA602D39DCCD94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9f:a9:e4:3f:5c:f0:05:b8:5a:cd:02:10:db:
72:66:ac:1c:de:9f:34:fe:f3:8f:70:55:fd:4b:8a:
34:66:95:b4:5d:6e:21:c5:be:08:4e:7e:d1:a2:d9:
94:4b:48:92:5a:0a:c6:02:86:85:8e:3e:71:87:a7:
12:5e:84:05:df:da:c1:13:7c:97:6b:8e:fc:95:9d:
2a:9e:d4:4e:d4:64:f4:67:d1:2e:0c:dc:1e:6a:5f:
75:00:4c:b4:7f:67:2a:81:47:eb:29:a0:23:54:65:
ad:fb:12:3a:3b:ed:74:01:6d:d3:cd:07:53:ab:40:
eb:71:bb:b6:2b:49:f8:8e:df:91:89:4d:71:7a:76:
77:5b:81:44:1d:ba:0f:f1:e2:fe:f2:66:74:28:92:
c6:2a:17:e4:33:87:f7:e9:57:f7:20:bd:69:a3:cd:
58:d0:c7:ea:96:d5:f2:b2:51:82:35:38:53:2c:f9:
c9:63:ea:d0:ef:c1:e8:11:5d:35:f8:39:88:ed:c1:
5e:61:86:c9:50:28:23:69:b6:25:88:76:c4:b4:3f:
18:46:1e:58:a3:96:88:b2:f3:29:24:aa:11:89:fc:
59:11:ea:ba:05:82:b2:df:24:b4:d4:d8:5e:2e:88:
8d:75:c3:7d:99:03:5e:9b:c4:a8:07:f9:9e:91:c6:
b8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:69:28:70:31:91:E2:CA:CA:33:C4:0C:5E:BA:60:2D:39:DC:CD:94
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LGkocDGR4srKM8QMXrpgLTnczZQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.144.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:f9:94:e5:14:d6:e5:7b:71:de:cc:67:e6:2f:c8:cf:e7:08:
ae:36:60:e9:a4:88:f9:8d:46:ac:f5:8a:53:f2:32:8f:05:23:
24:71:aa:ad:42:59:d4:4f:fe:b7:ac:4e:2d:a0:79:71:bd:08:
c4:ff:82:6a:d1:2f:3b:fe:2f:d8:cc:9d:e1:9b:b3:e2:06:3a:
53:93:bc:0a:1a:f1:91:9a:f5:e7:ce:5c:3c:34:1b:1a:cc:55:
ff:6a:4d:1b:ff:bb:b6:6a:cb:c3:5d:ae:3b:4f:4a:23:df:94:
d6:7e:84:3d:d0:11:20:f9:e8:b8:29:d1:d2:f6:f0:21:d2:7c:
88:fb:24:36:a4:4c:70:40:d9:f1:0b:64:1b:52:2c:b1:68:f4:
35:db:72:29:46:0f:1b:b2:34:86:93:4e:db:72:52:81:17:4f:
72:89:bb:6e:f8:b7:e1:a1:b8:ed:7c:50:08:5e:d1:ee:c6:c8:
00:95:a0:00:8e:61:70:ef:c4:56:8a:36:28:c0:77:c0:ec:c7:
56:be:fb:1f:63:6d:74:c0:c9:25:5c:0c:05:5d:cb:bd:33:4c:
09:31:76:cd:f3:fa:f8:69:9e:9c:8b:e6:81:96:ab:1c:b3:b1:
a4:71:e2:ec:5e:e2:5a:1f:f7:24:10:b8:16:cd:a4:92:32:a3:
df:66:05:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org