Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Nh5Zt5XpC6MeATLB9re25FW62qw.roa
File: Nh5Zt5XpC6MeATLB9re25FW62qw.roa (raw, json)
Hash identifier: hWGlczyxD1UMbV/5Yy6F4jvkTFy6XJe0goQPoSQbF0o=
Subject key identifier: 36:1E:59:B7:95:E9:0B:A3:1E:01:32:C1:F6:B7:B6:E4:55:BA:DA:AC
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 215B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Nh5Zt5XpC6MeATLB9re25FW62qw.roa
Signing time: Fri 25 Nov 2022 04:39:50 +0000
ROA not before: Fri 25 Nov 2022 04:39:50 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.0.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8539 (0x215b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:50 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=361E59B795E90BA31E0132C1F6B7B6E455BADAAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:de:5c:b0:56:cf:b0:6f:87:04:60:72:cf:8d:
41:5d:9a:f1:07:0e:3c:1c:e3:ee:4f:73:d4:6a:be:
f3:4d:f6:86:5e:c0:f7:85:83:e2:42:8a:9a:80:8b:
41:34:1f:80:c0:b2:25:62:46:5d:e4:a6:24:87:ef:
7f:91:af:c3:fa:fc:26:cd:73:9c:1a:52:11:69:1a:
7e:48:cc:cd:27:34:b5:19:bb:55:a3:31:47:3f:03:
e4:51:2d:de:c8:10:6b:61:07:54:1b:2c:07:e1:08:
d0:7d:05:c0:fc:01:22:27:3e:c0:e8:95:40:a7:04:
7f:b5:ae:b3:82:18:d3:eb:e0:16:8e:d7:c4:09:f2:
92:62:11:77:56:5d:3f:82:06:e5:0a:74:7b:cf:4d:
71:de:b3:a7:8d:be:85:c4:b0:07:d0:fd:8e:11:1a:
43:2b:2a:33:44:36:f2:89:2a:65:08:3b:1e:bc:9a:
da:ae:40:e3:a3:fb:95:8b:22:cb:88:55:c1:44:c4:
ec:8d:eb:e3:71:69:fa:c5:e4:16:ec:8e:2b:ba:33:
f6:8a:3f:9f:3f:b2:8e:81:d0:ed:92:e7:68:e6:f3:
36:5b:8b:b1:b7:95:14:b0:50:05:28:bc:3f:4c:c7:
b8:d8:a9:b9:c5:8b:c3:1d:0f:dc:7b:18:68:3a:8b:
f5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:1E:59:B7:95:E9:0B:A3:1E:01:32:C1:F6:B7:B6:E4:55:BA:DA:AC
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Nh5Zt5XpC6MeATLB9re25FW62qw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.0.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:a0:6f:c2:0c:f7:e3:84:ca:e4:b2:f7:18:24:f8:f5:30:67:
b3:91:50:87:75:cd:36:93:61:99:fc:fc:0c:d6:3c:21:9a:ae:
39:c5:fe:68:60:7d:45:34:13:51:df:79:0b:99:7e:99:fc:df:
dc:0b:ea:2d:18:01:ee:b6:99:9f:c7:dc:c0:5f:f8:bb:54:4d:
4c:15:70:be:d2:33:ac:27:b7:dc:2b:c7:fe:1f:65:2e:ad:a9:
3c:d9:bd:01:b7:9a:fa:df:80:59:07:fa:d0:65:d5:a0:cb:24:
9d:51:18:a7:c7:91:58:fd:8f:ae:9f:4c:51:a2:dd:03:bd:fb:
22:bb:80:18:71:2b:ae:1e:7f:c8:8e:76:95:33:dc:b9:46:c1:
1f:6e:cb:cb:7b:e7:99:ca:5d:e0:74:bc:22:27:40:ef:5d:7a:
b9:81:7d:3a:bb:1b:26:b6:33:8b:cc:52:77:b1:3e:e9:b8:ad:
b3:b6:d0:6f:30:d6:d7:45:e8:4e:d3:63:cf:a0:19:2a:e3:c6:
e1:59:fb:fd:06:df:c2:2f:eb:7a:8b:c5:49:90:8f:b9:cb:cf:
5b:06:68:92:d5:24:e6:28:a4:58:8e:29:1c:e2:b5:27:73:c7:
f0:ee:df:af:83:24:79:a6:e0:60:4a:3a:5d:a7:b3:00:54:b4:
c7:3c:ff:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:29 2024 by rpki-client on console-ams.rpki-client.org