Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OB7hvaoHXQOZP8ws6TnfhKPcWlk.roa
File: OB7hvaoHXQOZP8ws6TnfhKPcWlk.roa (raw, json)
Hash identifier: X1Z3l66zUcnEGhBphFogkCgUqDhc/y2ow/RutsDUV+o=
Subject key identifier: 38:1E:E1:BD:AA:07:5D:03:99:3F:CC:2C:E9:39:DF:84:A3:DC:5A:59
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1BE7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OB7hvaoHXQOZP8ws6TnfhKPcWlk.roa
Signing time: Wed 29 Sep 2021 02:47:09 +0000
ROA not before: Wed 29 Sep 2021 02:47:09 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.195.182.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7143 (0x1be7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:09 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=381EE1BDAA075D03993FCC2CE939DF84A3DC5A59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e0:81:8c:62:8a:32:fd:82:da:d7:27:08:f9:
5f:94:ca:99:b0:90:bd:d2:e0:6d:b7:38:d8:3d:e1:
0b:2f:73:e9:bf:67:bb:b6:44:d1:5d:7c:87:e4:06:
5e:93:8d:26:1c:72:3f:b9:84:32:8a:a7:6e:d0:86:
85:05:0a:e1:42:53:85:f7:f6:f0:d4:8d:dd:5d:dc:
b1:5b:89:60:9b:cc:a0:b5:50:11:ca:4c:0e:94:01:
43:b4:57:a6:bf:22:ed:c6:cc:e6:dd:c7:1f:1f:c2:
ca:70:4c:c5:cb:66:ec:81:11:99:d7:db:80:0a:59:
db:42:bf:fd:17:2d:f7:4e:47:26:07:ad:48:4e:09:
78:90:41:b7:72:2c:25:b1:e6:a7:14:bf:de:65:c5:
d1:ad:f6:2a:86:d8:0b:d7:5a:b6:2c:ef:b0:f2:72:
dd:65:bf:81:73:f2:8c:90:03:6e:88:33:94:03:6c:
36:fa:34:9f:f0:83:89:c9:9f:5c:7a:dd:10:b7:bb:
08:55:12:61:2d:13:85:fe:e1:a1:44:ee:5e:9a:94:
ad:93:75:4c:58:52:ed:b9:c7:5c:e8:60:8b:23:cb:
89:f1:5b:8f:22:4b:b8:85:76:df:a8:bd:aa:80:3c:
65:ca:2c:cb:f3:f9:70:a5:61:b3:4d:6b:5e:0a:13:
18:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1E:E1:BD:AA:07:5D:03:99:3F:CC:2C:E9:39:DF:84:A3:DC:5A:59
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OB7hvaoHXQOZP8ws6TnfhKPcWlk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.182.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:9d:ef:43:f5:96:76:c9:7b:10:61:0d:6d:64:57:81:49:02:
88:58:47:fb:39:72:63:1c:91:e6:25:e1:34:2c:6d:25:9b:67:
94:5f:ff:85:ce:a5:e5:93:85:8f:de:0a:1e:42:9a:ee:bc:10:
9f:db:3f:61:c4:2a:90:56:7e:16:bc:81:d7:db:59:b1:74:96:
ef:b9:48:04:00:78:f8:f4:2c:56:95:2f:b9:0d:fd:d8:6d:28:
3a:a5:5b:4a:72:c5:cd:26:a1:d6:cd:80:da:0a:0b:44:70:53:
4a:03:3b:ca:cf:cc:59:9b:9f:f2:95:8a:00:27:a9:d5:d6:e7:
19:88:0a:6a:e8:8e:ec:d5:cd:37:2c:df:ba:49:ab:dd:41:df:
dd:2b:c8:72:19:49:05:45:46:11:48:f8:b6:0c:c7:25:cf:33:
63:58:c8:82:d5:a5:89:67:d6:32:58:15:f3:73:42:b7:22:07:
e2:88:2d:15:01:8f:2a:ec:bf:39:51:7a:0d:56:63:aa:26:76:
e7:48:66:16:b8:86:82:81:71:8e:38:fe:04:2a:4d:b1:8a:7e:
8b:cf:90:11:9b:85:3e:89:71:85:96:c2:17:6a:71:2e:10:98:
22:59:ee:82:1d:52:ed:f6:c1:f2:31:a4:15:10:09:57:5f:a7:
71:98:9b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:18 2023 by rpki-client on console-ams.rpki-client.org