Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NSFnWUSLudhLvBKl-h0FGuxASM4.roa
File: NSFnWUSLudhLvBKl-h0FGuxASM4.roa (raw, json)
Hash identifier: KNS56LGv2w/64HvbpimmOQCeBHRqm4MIoA0v0A5mX2I=
Subject key identifier: 35:21:67:59:44:8B:B9:D8:4B:BC:12:A5:FA:1D:05:1A:EC:40:48:CE
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2018
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NSFnWUSLudhLvBKl-h0FGuxASM4.roa
Signing time: Fri 25 Nov 2022 04:38:19 +0000
ROA not before: Fri 25 Nov 2022 04:38:19 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.204.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8216 (0x2018)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:19 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=35216759448BB9D84BBC12A5FA1D051AEC4048CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:65:81:74:d0:dc:01:0d:d4:03:79:97:79:32:
58:86:c6:4e:74:18:3b:24:e0:03:2e:98:00:59:00:
da:2a:88:6d:a4:69:63:25:1a:78:62:88:08:6c:c2:
c6:de:af:07:e4:a6:a9:78:79:a6:52:0f:92:37:e4:
2d:d9:23:b2:37:99:9a:63:4a:72:44:5d:6f:15:25:
a3:ea:d6:98:b8:80:d2:1f:ae:22:06:17:97:6d:e8:
b6:ac:b4:6b:3d:9b:77:46:b2:4c:3a:56:44:8d:83:
82:46:6b:08:d4:7a:80:69:a3:ec:1b:5d:4b:b9:55:
b3:83:2d:c6:63:ed:e7:46:0a:bb:d3:f7:1e:1c:88:
cb:f2:09:d8:48:c4:2b:b9:57:24:fd:75:8c:ca:68:
8c:a8:2c:be:66:f2:93:d6:3d:68:1a:3a:51:66:a7:
d9:91:02:d5:a5:75:a2:a7:d7:ea:00:95:53:ad:d4:
ba:83:49:ad:9e:bf:39:8b:86:29:c0:04:73:c1:d6:
be:d6:b7:60:40:a8:26:45:c3:99:c6:3e:8e:d7:22:
c3:84:cc:f1:ab:3c:1d:f6:04:21:8f:a5:b9:c8:d3:
79:dc:5c:58:37:9d:9d:a3:f7:d4:88:b2:80:cc:61:
04:b1:81:15:d5:57:d6:1b:a0:cf:2f:5c:4a:e6:d8:
b2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:21:67:59:44:8B:B9:D8:4B:BC:12:A5:FA:1D:05:1A:EC:40:48:CE
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NSFnWUSLudhLvBKl-h0FGuxASM4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.204.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:7f:c6:e7:9d:9a:e9:61:60:81:de:44:5c:a6:52:f8:6b:43:
27:a9:42:9e:d6:d4:65:6c:f5:85:c4:1b:08:73:c5:ac:ee:ff:
ec:6e:17:39:a0:13:2e:0d:d3:d3:9f:96:bf:7c:0f:4c:5f:3b:
cf:7b:3a:88:66:b5:38:90:b9:f0:9a:93:06:6f:86:37:05:ed:
e4:42:2e:db:91:f5:23:14:e9:79:71:ad:c7:47:00:01:66:5d:
01:a6:be:14:25:0f:17:6d:7f:1a:9c:ed:c2:42:a6:ad:0b:55:
ec:5c:78:ea:20:fd:38:99:9e:fe:d2:c3:82:07:e8:a1:03:d6:
d0:35:20:93:ae:c1:c9:ec:26:da:5e:0d:10:0f:f2:91:ec:ae:
ea:6f:e0:fe:cb:70:e0:40:2b:ad:06:c0:c0:8e:be:74:e1:83:
af:8f:a3:9d:f7:90:a7:d0:9b:70:b2:d8:87:e9:28:14:65:af:
a0:1b:c9:e1:fb:8a:82:6e:af:53:7d:91:05:24:10:87:b2:0e:
89:7b:ac:29:b1:34:fc:a9:4b:40:52:e4:25:f1:b9:84:2a:7d:
4e:e8:14:ba:54:03:f3:85:94:58:6b:e6:ee:d1:4d:97:36:8e:
a1:e7:31:73:bd:d5:e7:77:38:55:84:3e:96:88:a9:db:ce:14:
ad:22:f0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org