Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NVTihazHCQITDBlHsUofoHAnwVs.roa
File: NVTihazHCQITDBlHsUofoHAnwVs.roa (raw, json)
Hash identifier: GpIIt39LVkvkZtM13Jjr1iWuNZw6FzFoy8Z6FIIHE68=
Subject key identifier: 35:54:E2:85:AC:C7:09:02:13:0C:19:47:B1:4A:1F:A0:70:27:C1:5B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 209F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NVTihazHCQITDBlHsUofoHAnwVs.roa
Signing time: Fri 25 Nov 2022 04:38:55 +0000
ROA not before: Fri 25 Nov 2022 04:38:55 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.192.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8351 (0x209f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:55 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3554E285ACC70902130C1947B14A1FA07027C15B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c6:60:ae:12:6c:72:cb:f1:61:60:84:90:bf:
f7:ea:77:27:d0:c4:36:48:02:3b:01:0c:de:ab:a7:
95:b0:ee:5f:b9:f4:51:37:e3:47:58:65:a7:e9:4f:
e8:dd:01:e5:3e:d2:6f:e3:88:c2:45:4d:71:2f:4d:
8e:e1:32:90:51:47:b2:ea:39:29:5b:2e:dd:4e:af:
d6:5e:1d:e2:c4:63:54:1b:4e:1e:8a:1a:fd:f5:4f:
36:c9:c5:32:f5:84:e5:15:63:df:e4:a6:e3:7d:7a:
95:9e:76:aa:a7:e2:a8:2f:33:98:39:2e:ac:1b:e2:
41:b2:b6:c9:88:c6:45:18:78:5e:5d:4c:ca:9b:2e:
e4:92:dc:a9:43:4b:d8:90:46:45:a0:ae:b0:66:79:
a7:83:df:6d:d4:28:cc:37:0e:3e:59:eb:71:8a:e2:
04:11:e5:d9:49:8d:25:5d:a4:cd:70:3d:20:80:c8:
76:e7:e7:e3:5f:7b:f3:09:50:7a:9f:43:80:67:d0:
cc:d9:10:5e:17:d2:32:99:39:69:bc:28:7c:cc:49:
41:45:42:7e:bc:ba:97:78:2d:af:c7:c3:f5:f6:c8:
7e:3a:c9:1f:4c:38:57:c0:ad:5c:cf:e3:da:d6:fb:
2d:99:70:7c:e2:cd:8b:38:82:08:d3:1f:6e:16:46:
34:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:54:E2:85:AC:C7:09:02:13:0C:19:47:B1:4A:1F:A0:70:27:C1:5B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NVTihazHCQITDBlHsUofoHAnwVs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.192.0/19
Signature Algorithm: sha256WithRSAEncryption
45:4c:80:5e:a3:3d:23:8b:66:77:d8:c0:fd:bb:11:7f:d2:d4:
3f:9e:4b:a6:f6:34:56:34:cb:43:69:85:cf:c1:2c:e7:de:5b:
45:74:a9:7a:6a:14:4a:f1:3d:33:22:da:63:b7:3c:f1:32:d0:
96:36:06:3d:61:f7:ad:3a:47:36:ef:4e:ea:5e:2c:04:07:46:
9c:3f:85:25:9d:34:80:eb:fc:d3:c1:85:a5:4d:f7:90:57:95:
87:c5:e1:eb:82:99:66:98:71:42:56:75:25:a6:1b:e6:76:33:
d6:cd:e2:71:0c:e3:09:da:ed:b5:71:e6:3d:8b:ab:b4:97:be:
e8:1b:f2:ec:32:99:86:9c:73:cd:0e:d5:ea:45:9e:ff:d4:8e:
57:bb:53:4c:a4:7e:46:a1:1f:ed:18:db:52:f5:af:9c:91:6a:
1f:c0:fe:ac:5c:36:c7:5b:3c:b3:8f:a9:30:5e:82:f9:b0:62:
2c:0f:28:ed:e7:30:75:d6:0f:c9:69:58:eb:2c:49:2b:5e:10:
ec:93:e3:0a:0a:a9:f1:bf:ee:4f:b2:8d:29:01:ac:5d:f2:9b:
b7:23:71:30:c9:ad:05:10:0a:3f:8a:af:35:ad:31:ea:17:be:
ef:ab:ae:17:2e:3c:39:24:19:6c:ce:61:e5:81:f1:22:69:b6:
6c:a2:ee:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org