Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LNI4T0gecDaXccDgDNef86z0-f8.roa
File: LNI4T0gecDaXccDgDNef86z0-f8.roa (raw, json)
Hash identifier: SokatvXK128lVXDAFDiI2pd1xYx8EdwGSnq54Ci2fdM=
Subject key identifier: 2C:D2:38:4F:48:1E:70:36:97:71:C0:E0:0C:D7:9F:F3:AC:F4:F9:FF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LNI4T0gecDaXccDgDNef86z0-f8.roa
Signing time: Thu 15 Sep 2022 02:45:03 +0000
ROA not before: Thu 15 Sep 2022 02:45:03 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.223.64/26 maxlen: 26
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:03 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2CD2384F481E70369771C0E00CD79FF3ACF4F9FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5c:84:1e:14:54:6d:2d:ce:dd:53:dc:34:ef:
f4:0c:26:09:30:0f:a6:cc:53:e0:67:8c:55:d4:5e:
9e:52:b4:84:4a:19:b7:80:7b:e9:65:3e:d0:1a:14:
0c:01:e1:d9:bf:89:40:81:f1:db:be:e3:2a:99:08:
cf:26:09:e0:1f:24:6c:94:ec:0f:a5:58:e4:85:b6:
d0:7b:87:1f:12:f5:8a:76:a3:7e:62:75:7f:8f:ac:
c9:25:47:d6:e7:59:3b:88:b9:41:d9:ed:24:b3:be:
1d:97:b2:2b:0b:c1:44:49:61:52:07:14:86:04:f2:
db:46:e2:28:8b:19:41:32:9a:1b:9b:b9:72:94:bf:
ae:66:75:e9:27:a4:f7:4f:12:29:75:bb:c3:53:4f:
67:6f:5e:c2:b6:42:c6:1c:5f:f4:13:9d:0d:a8:2d:
52:57:8e:b2:52:04:d6:0f:1c:d1:3d:76:95:a0:59:
92:2f:50:fb:cb:b4:a6:51:cc:4d:fe:d6:ed:d8:a4:
39:4f:5c:a5:de:24:77:3d:9f:cf:9e:26:cf:a8:55:
1a:33:2e:36:a4:fc:2f:f4:03:bc:8b:c4:2e:7a:29:
f9:af:82:2d:93:87:3b:8d:12:cf:03:f8:71:a2:4f:
3c:bb:42:c1:4d:c1:3e:8c:2a:83:09:d7:84:54:93:
02:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D2:38:4F:48:1E:70:36:97:71:C0:E0:0C:D7:9F:F3:AC:F4:F9:FF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LNI4T0gecDaXccDgDNef86z0-f8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.223.64/26
Signature Algorithm: sha256WithRSAEncryption
b0:47:a5:91:3f:a8:f6:bc:e7:54:96:2e:74:fc:3a:cf:ec:37:
60:ff:ce:bd:e3:e9:57:5b:ef:b3:e8:64:95:ff:0c:24:83:9d:
a3:4f:89:20:98:44:8d:a4:b6:bc:a3:a8:73:a7:70:dd:5b:e7:
fd:e7:43:b7:d4:25:80:bf:91:ad:e8:3c:1b:dd:0b:9e:7b:f3:
49:f8:c3:e3:38:32:3e:05:74:d6:b7:dc:6f:1d:dc:ad:8f:b5:
ca:43:63:56:26:88:0b:5f:14:1a:e3:2d:e8:b2:84:73:4a:4e:
ad:46:67:6a:79:34:76:e1:80:10:57:74:c7:5d:c2:16:e9:23:
78:3d:ef:26:99:d7:78:7a:e7:d2:5c:46:f9:9c:9b:dd:16:56:
37:7c:23:9e:1d:25:53:5c:74:aa:0c:6e:ce:ff:7f:d6:16:1e:
c3:c4:bc:d1:d8:5d:93:8c:5d:a9:2f:e9:7e:3c:38:be:3f:4b:
44:7c:f2:bc:51:b2:6d:07:8a:aa:8b:55:50:17:1f:92:8b:d5:
b6:6c:f3:ac:8c:66:28:63:0b:35:88:c5:c5:75:cc:6a:69:95:
9d:f9:79:29:c5:c0:a1:11:16:db:d2:26:36:5e:56:21:ff:76:
99:3e:2c:87:17:92:e8:93:29:de:60:f2:6d:b6:7e:3d:d3:32:
11:e6:32:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org