Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LvTCDienHMwhtsLhBHQMFwIH2pI.roa
File: LvTCDienHMwhtsLhBHQMFwIH2pI.roa (raw, json)
Hash identifier: EaV2m9/LRE/eF8U8nbe2jXyZiJ6nlBIou1egLHxLhkU=
Subject key identifier: 2E:F4:C2:0E:27:A7:1C:CC:21:B6:C2:E1:04:74:0C:17:02:07:DA:92
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LvTCDienHMwhtsLhBHQMFwIH2pI.roa
Signing time: Thu 15 Sep 2022 02:45:13 +0000
ROA not before: Thu 15 Sep 2022 02:45:13 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.104.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:13 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2EF4C20E27A71CCC21B6C2E104740C170207DA92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:57:25:91:e3:e5:e3:bc:9b:87:bc:47:b7:8e:
d9:45:a2:a5:6f:62:32:f0:0c:b8:98:3a:9f:53:22:
33:52:5c:56:9c:73:3c:af:db:7e:1d:d7:7a:80:1a:
38:ad:88:48:9e:09:8b:c7:29:ed:44:bf:d2:1f:7e:
53:c9:09:8b:6f:72:b9:fa:e1:27:ef:4d:30:07:e5:
ae:09:c5:42:df:38:d5:82:05:c5:21:df:06:c5:07:
09:9b:71:e9:6a:f9:e4:7d:54:00:a0:79:b7:4c:ec:
d9:f3:b9:4f:31:0d:52:90:ec:6b:ce:ee:5f:8f:12:
40:0d:92:11:4e:91:e9:20:53:aa:5c:d1:0a:12:ae:
6d:41:c5:bf:a6:70:83:25:e9:f2:1d:dd:46:c2:fe:
c9:74:ff:4b:69:d6:5a:e0:ea:f8:a7:23:21:68:5b:
a7:43:b9:9b:1e:c7:0a:96:bc:3f:87:29:f1:96:d6:
17:1d:ad:59:be:3f:c1:7f:34:8e:b6:14:f8:14:98:
af:ea:10:19:f5:90:82:7e:77:39:ec:dc:9a:6b:df:
b9:b0:96:0b:d1:2c:bc:91:e8:ff:84:d9:c5:23:3d:
c8:cc:57:fe:89:ce:a3:06:40:d1:3c:02:4e:1b:57:
36:74:d4:64:3a:b1:f1:4b:e5:58:d5:cc:69:fa:d0:
cc:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F4:C2:0E:27:A7:1C:CC:21:B6:C2:E1:04:74:0C:17:02:07:DA:92
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LvTCDienHMwhtsLhBHQMFwIH2pI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.104.0/22
Signature Algorithm: sha256WithRSAEncryption
84:aa:b6:f9:8c:9a:ed:bc:02:b2:99:95:13:c9:95:4c:74:36:
f5:96:29:41:79:b1:fa:88:ae:36:cd:5b:15:ec:7c:28:9a:dd:
ef:ea:e8:14:b8:8e:d7:ea:2f:67:e7:98:b5:28:e5:bf:fa:8f:
9d:9a:72:a5:a7:86:3a:7a:9d:9e:ce:7c:af:a9:12:f5:5b:72:
65:61:53:66:89:29:94:65:37:c2:26:72:92:55:51:f0:d5:ee:
93:e3:4f:00:53:75:bd:db:7e:e4:d4:ee:b1:2b:d7:bd:7d:13:
e5:65:4d:7d:d7:11:8e:55:b2:fa:c7:14:c7:7e:40:f1:6e:f1:
29:ac:4c:62:f4:c7:07:2c:b3:c7:23:42:d6:af:a3:20:76:da:
c3:03:fa:73:bf:c2:0e:ee:5e:a0:8c:37:71:06:9b:96:ce:53:
21:17:14:6c:87:3e:29:9a:9d:58:d8:e8:7e:68:71:04:17:ae:
c5:d3:e3:ac:5a:6d:48:3e:5f:65:60:95:45:15:27:9b:49:6b:
15:10:9b:8e:6a:1c:53:62:9f:96:7e:d3:95:83:43:7c:5d:92:
5a:a0:8e:8c:15:e5:76:9f:c3:df:58:36:ce:a1:7e:04:23:cd:
02:4c:13:74:0d:4b:bb:14:67:a6:2a:0a:e2:57:48:0b:1b:bf:
1f:74:e1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org