Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/O0zq4gki_tS1-8jw-e11_eyTxHQ.roa
File: O0zq4gki_tS1-8jw-e11_eyTxHQ.roa (raw, json)
Hash identifier: XtpHPyBEyr0I4MfkGsjok2qd5uPzC2aZ6kwwLQFLHjw=
Subject key identifier: 3B:4C:EA:E2:09:22:FE:D4:B5:FB:C8:F0:F9:ED:75:FD:EC:93:C4:74
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1CF0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/O0zq4gki_tS1-8jw-e11_eyTxHQ.roa
Signing time: Wed 29 Sep 2021 02:48:24 +0000
ROA not before: Wed 29 Sep 2021 02:48:24 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.192.152.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7408 (0x1cf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:24 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=3B4CEAE20922FED4B5FBC8F0F9ED75FDEC93C474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2e:62:5f:a8:05:31:5d:17:46:38:f2:1d:05:
fb:25:3a:f4:69:69:ad:40:ab:39:a3:b0:c4:fc:e5:
f5:2f:d6:fb:d4:bc:16:97:ae:e1:bc:e3:67:63:c9:
86:14:cf:9d:f4:cc:db:84:ac:28:09:2c:61:64:f4:
ba:bd:3f:53:8c:a0:1a:85:95:86:d2:bb:11:1b:0a:
d3:c4:93:5e:0a:60:15:2f:7b:b7:5a:cb:8c:7d:bc:
4c:7c:1e:74:92:33:23:df:17:e0:91:48:7d:9b:ae:
fb:dc:42:db:af:fc:70:f2:06:fe:03:2f:a2:f4:43:
35:09:7a:24:9e:81:88:3d:7b:4f:b2:03:af:4f:c9:
3e:9f:28:86:55:81:e0:c5:e5:13:14:26:08:80:07:
94:ad:c5:be:ba:13:d6:fb:0e:68:fb:97:64:35:65:
cd:aa:ab:6d:e0:7b:c3:23:06:43:53:aa:72:c3:2c:
e2:f5:fa:6c:e9:e4:5f:e7:fe:58:61:56:1b:da:6e:
db:ec:e1:c2:8e:f8:d2:f8:ec:0a:7e:e6:be:a9:4e:
21:c6:dd:a4:b4:b7:f5:37:4c:0f:13:fd:b9:3d:d8:
42:ce:b0:f4:57:54:3d:d2:9e:2d:b9:9a:6b:72:23:
10:ea:28:5d:8b:e8:1c:85:3d:2f:71:7a:a4:bf:99:
61:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:4C:EA:E2:09:22:FE:D4:B5:FB:C8:F0:F9:ED:75:FD:EC:93:C4:74
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/O0zq4gki_tS1-8jw-e11_eyTxHQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.152.0/22
Signature Algorithm: sha256WithRSAEncryption
25:7d:97:a2:b6:a3:84:6b:d1:6f:3c:ba:c7:b7:2b:8c:6b:c7:
d5:75:89:0f:ba:02:35:af:63:87:ff:8c:8c:92:88:37:b4:28:
a0:b8:42:63:58:28:ab:8d:b5:ee:d1:ce:fe:e1:9c:0b:48:59:
c9:11:8e:27:29:2f:97:29:6f:7c:25:d8:82:a0:8e:8c:a4:40:
f9:52:7b:6e:9f:68:e3:dc:e1:4e:f9:98:5a:45:74:3a:e7:10:
0a:cc:fd:7f:a6:e4:2b:4e:78:5d:ec:ed:2b:b7:5d:a2:af:d5:
05:8a:54:ba:9c:2f:0e:50:ca:5b:46:e5:46:c1:de:24:bd:73:
18:ea:57:c9:f4:96:2e:22:56:c4:c7:a1:0b:0a:49:21:07:04:
df:2c:90:c0:9c:5d:2a:35:b5:bd:7d:47:a3:6f:50:d8:69:1b:
0f:f4:8f:01:e9:01:c2:74:13:69:50:00:eb:24:ea:ef:17:61:
96:bf:ed:43:cb:d5:49:75:eb:b6:da:f3:6d:ef:15:53:bf:b6:
6f:56:47:65:4b:bd:86:6f:1a:e2:10:fd:63:45:cf:09:d9:03:
02:b0:7b:17:3d:58:6f:03:4e:ff:be:5f:fc:11:8b:0a:38:7b:
9c:15:f4:ae:56:5d:62:61:e3:28:55:3f:8b:47:19:d8:ef:88:
ad:cf:a1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org