Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/M-9RiXwE1FCGUUU4kWTfqSUKPRM.roa
File: M-9RiXwE1FCGUUU4kWTfqSUKPRM.roa (raw, json)
Hash identifier: NuuhciSp6MeVowOJ/Qp2fUmdurNcdsJlpAkmJnAEjlU=
Subject key identifier: 33:EF:51:89:7C:04:D4:50:86:51:45:38:91:64:DF:A9:25:0A:3D:13
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1BDE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/M-9RiXwE1FCGUUU4kWTfqSUKPRM.roa
Signing time: Wed 29 Sep 2021 02:47:06 +0000
ROA not before: Wed 29 Sep 2021 02:47:06 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.195.160.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7134 (0x1bde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:06 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=33EF51897C04D450865145389164DFA9250A3D13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a7:1e:67:4c:bc:5f:20:bd:75:51:2d:f8:88:
02:97:18:69:a2:64:39:e8:62:13:f6:ff:a7:e0:07:
ce:1e:d5:39:a8:8d:b9:df:ba:12:48:7d:b7:a2:d9:
9e:2b:ff:42:e1:9f:a8:a8:b7:59:0c:b4:50:14:26:
02:fd:85:fc:46:15:1f:f4:f2:ed:73:e2:5a:51:c3:
39:2e:fb:e4:6f:fe:8c:29:29:4e:24:e0:a2:51:2d:
da:cb:6a:73:de:72:56:12:13:a4:ca:90:62:36:93:
a1:c7:3b:36:c8:b1:dc:1d:65:89:fa:50:a8:33:bb:
44:18:0e:9c:49:01:69:e0:a7:38:3e:6a:45:a6:60:
6b:08:9e:bf:e2:0c:e7:38:fd:a1:b2:39:95:2e:2b:
11:db:47:aa:bc:e8:70:5e:c9:34:59:bf:6d:98:76:
95:a5:a2:2e:24:cc:e7:cb:0b:70:1e:24:c0:59:9c:
94:51:07:60:e1:06:06:b2:1c:91:b1:67:44:68:d3:
16:30:61:d2:35:30:d8:9a:24:da:7d:34:f8:ce:64:
be:5b:b9:10:2c:42:d7:b2:84:dd:50:76:84:f3:c5:
c5:0f:60:a0:b4:ba:d4:f9:38:9c:b3:c5:47:ae:da:
b9:2d:6c:18:bd:c4:a3:c4:69:3c:04:c6:65:a1:e1:
df:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EF:51:89:7C:04:D4:50:86:51:45:38:91:64:DF:A9:25:0A:3D:13
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/M-9RiXwE1FCGUUU4kWTfqSUKPRM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.160.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:87:bf:3f:f0:52:64:9a:9d:fe:d8:21:08:c5:d4:3d:2d:8f:
a9:20:67:19:65:c9:f1:d7:06:56:7b:56:94:7f:57:91:74:7f:
6b:41:b3:ef:e4:25:e7:57:f0:d8:52:ed:29:eb:ff:fd:f3:7b:
25:d9:77:93:5f:88:9f:47:c9:75:ea:87:26:52:49:7d:6f:45:
22:fb:28:62:61:50:3a:82:4e:e4:a6:5f:88:7c:9a:55:31:17:
30:89:9e:ad:2c:fa:fa:2c:f5:7c:03:9e:98:bd:e0:c0:95:95:
7a:df:db:61:66:db:da:4c:66:48:22:36:aa:bb:ea:18:73:22:
28:79:b2:12:b4:20:98:56:68:23:ce:96:ad:b3:89:a2:7a:a1:
36:7e:3b:f1:d1:72:f1:b9:83:c8:f3:c9:97:fb:a0:b1:ea:a7:
38:3e:78:bf:a9:c4:67:7a:e4:af:f8:08:ec:7e:6f:a7:b2:d1:
cf:05:e4:86:74:f7:29:56:57:a0:4f:c8:cf:55:1e:06:38:01:
77:de:17:cc:68:bf:ca:52:0b:73:c8:7c:ed:de:0f:a1:ff:79:
7e:e8:bf:ca:b9:c8:38:98:bc:be:f1:30:77:8f:3e:eb:67:6d:
71:b9:0a:99:df:86:dc:68:9c:23:a5:32:2b:ef:9c:a7:fe:16:
ee:7f:78:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:29 2024 by rpki-client on console-ams.rpki-client.org