Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NvWw0_JUOCR7njabRVfpmMFBnlk.roa
File: NvWw0_JUOCR7njabRVfpmMFBnlk.roa (raw, json)
Hash identifier: q7PBf6TwwpOKa00+XjLS+g3dRlyhl6PtYrlcwDs/Usk=
Subject key identifier: 36:F5:B0:D3:F2:54:38:24:7B:9E:36:9B:45:57:E9:98:C1:41:9E:59
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NvWw0_JUOCR7njabRVfpmMFBnlk.roa
Signing time: Thu 15 Sep 2022 02:52:59 +0000
ROA not before: Thu 15 Sep 2022 02:52:59 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 123.193.0.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:59 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=36F5B0D3F25438247B9E369B4557E998C1419E59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d2:77:c3:ef:a9:d9:42:4f:9e:8e:7c:2b:51:
ba:a9:61:72:0e:3b:49:e5:ab:e6:cd:29:7e:ca:41:
e4:16:6f:a2:53:77:51:f6:c7:32:9e:7a:17:16:c9:
dc:67:4d:12:b8:0a:db:7a:ea:77:fa:a8:fb:22:cf:
c8:e0:11:6b:73:f6:2f:07:97:a4:b9:77:7e:c6:85:
04:27:52:34:43:41:5a:07:8f:80:cc:5e:22:c9:22:
60:02:ac:f5:1d:69:06:ca:48:8d:39:39:4c:cb:ce:
8a:b1:4e:c2:51:09:93:ca:a6:73:e7:99:45:5f:a3:
98:fd:63:ca:4f:fb:20:ca:31:b6:78:0c:ec:cb:6b:
f9:f9:9b:71:5f:2c:6f:1e:b9:45:41:20:94:d6:5d:
1a:e7:45:d1:34:f3:8d:87:3b:7d:58:55:88:76:b0:
69:f5:0e:1a:66:7d:56:54:9e:f3:c2:16:92:5f:cd:
b7:cf:5c:0b:41:75:32:1e:76:5c:50:63:91:77:d7:
65:2a:7f:5b:2c:19:23:e8:35:99:fc:ee:9f:80:f1:
ec:31:75:ad:e2:b5:a2:2b:f5:44:64:af:1e:6a:c6:
f9:25:09:ef:cd:d1:6f:31:b1:af:73:7b:9a:8a:d2:
5f:38:ba:2f:70:20:3c:79:9f:d1:42:0e:8c:d0:4f:
32:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F5:B0:D3:F2:54:38:24:7B:9E:36:9B:45:57:E9:98:C1:41:9E:59
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NvWw0_JUOCR7njabRVfpmMFBnlk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.0.0/19
Signature Algorithm: sha256WithRSAEncryption
1d:18:7b:14:75:d5:04:ce:f4:ff:0b:ad:cb:80:e0:cd:01:6c:
de:47:51:d9:c2:4b:3f:6c:7e:93:7f:c1:72:14:8e:fe:4d:2f:
ee:1c:19:9b:e8:70:82:5c:70:77:bb:a4:7b:65:64:79:fa:be:
74:31:cd:d8:f5:7e:14:85:87:15:d9:46:52:d2:f0:40:6f:63:
e1:c3:2f:77:38:23:69:aa:28:80:e7:51:1b:55:d2:58:32:3b:
31:9c:b5:21:17:e4:1a:e1:56:c0:25:c0:10:3b:90:e0:14:72:
0e:ac:51:8b:57:f5:f5:e6:b8:c0:d4:48:43:bf:2e:0e:cf:a8:
62:70:69:b0:28:a3:22:63:7a:51:a5:06:a5:f2:35:da:00:31:
80:6e:6b:8c:e5:d7:ba:32:fe:88:20:a6:df:54:94:1f:f3:4e:
b3:ad:c7:9a:e8:0d:04:80:0f:e3:92:9c:a7:bb:9f:1a:09:c1:
3a:84:fa:49:6f:08:86:a9:2c:f1:ba:72:6c:d4:ff:b3:73:fa:
1f:fd:90:68:97:1d:21:27:51:56:2c:24:f9:e0:8e:50:bd:aa:
4a:3e:cf:41:a0:aa:2a:e6:aa:1e:0c:d7:95:6b:a7:b8:d1:4c:
c3:a6:43:bf:4d:3a:db:c4:b7:b2:9d:87:55:4c:e7:5e:9c:39:
b1:9b:28:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:29 2024 by rpki-client on console-ams.rpki-client.org