Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Q0oIcUBHjwoiDv4oesFya0F3VHI.roa
File: Q0oIcUBHjwoiDv4oesFya0F3VHI.roa (raw, json)
Hash identifier: fJ4yK9SM96Bw3AwBp43W3gwfrJZMzoPha9IsJng4LPk=
Subject key identifier: 43:4A:08:71:40:47:8F:0A:22:0E:FE:28:7A:C1:72:6B:41:77:54:72
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Q0oIcUBHjwoiDv4oesFya0F3VHI.roa
Signing time: Thu 15 Sep 2022 02:53:24 +0000
ROA not before: Thu 15 Sep 2022 02:53:24 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.192.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:24 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=434A087140478F0A220EFE287AC1726B41775472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8e:8f:fa:ea:45:d3:e8:1b:3a:6c:b0:ee:de:
9a:c3:a5:fc:27:08:5a:00:97:9a:5c:41:38:07:4a:
0c:79:cb:3c:4c:84:c3:03:76:32:5f:47:c9:b9:0d:
a0:c4:ac:cb:35:e0:4e:af:ed:e5:cb:f9:89:8b:69:
01:74:c8:c0:13:d1:f4:16:12:3c:1d:68:82:25:fa:
8c:05:1f:d0:43:46:33:ed:87:a9:d6:a8:a6:c6:2e:
4c:2f:a4:5e:29:58:3f:6e:1b:4e:7d:e0:eb:39:6e:
9d:f1:87:e5:c7:99:79:33:36:cc:94:1c:0f:14:ca:
42:7b:fd:fd:62:85:61:32:a2:db:79:a8:2e:d0:67:
ab:01:6d:08:37:8c:72:8b:98:55:ff:72:56:b0:e0:
e0:68:9d:83:49:fc:6a:db:26:d4:c7:64:5a:44:14:
02:1a:79:ae:83:66:3b:bb:2c:ae:d5:b9:2d:53:bd:
0c:cc:22:e1:7f:a6:60:ce:f5:1d:c7:a8:3e:f5:4d:
2a:2e:8e:77:c2:64:47:1d:64:4e:69:c5:7d:f2:b5:
3e:36:28:db:0c:cc:a9:60:bc:f6:f6:08:80:78:bd:
85:22:b3:7d:79:23:9a:d7:42:73:bd:5d:d4:56:68:
28:f0:39:88:1f:14:0e:bb:95:ee:0f:a2:ba:1c:19:
88:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4A:08:71:40:47:8F:0A:22:0E:FE:28:7A:C1:72:6B:41:77:54:72
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Q0oIcUBHjwoiDv4oesFya0F3VHI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.192.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:a7:12:a4:0f:4b:a4:a0:98:cd:78:47:64:59:66:a8:7b:07:
94:a2:53:c4:98:d7:bd:7b:60:7e:5f:88:81:33:a9:68:3c:0f:
23:f5:20:ed:8e:1e:e4:f2:60:13:2d:a1:6e:06:37:90:9c:93:
a2:92:f5:ab:fd:b3:01:1d:13:83:3f:8b:36:8b:ee:33:70:84:
0a:5d:8b:af:8a:6d:93:ba:9b:15:58:b6:3d:48:9e:8d:87:93:
c9:8f:b6:a5:e7:b9:1b:cc:f1:f9:c5:36:82:35:ac:4b:7e:42:
93:cc:23:f4:fe:44:a8:9f:1f:dc:9e:c6:75:37:bb:55:a3:bc:
4e:05:30:62:4e:b5:99:45:91:6c:b6:e6:c2:f0:be:00:61:3d:
f9:60:4f:a3:3b:93:5b:db:4b:37:a6:12:d6:f3:dc:fc:24:40:
c1:67:77:6a:32:21:e0:ca:4e:d0:8a:aa:ed:ca:5c:e8:ef:ea:
e9:fa:75:48:30:12:78:f1:28:39:2e:03:5b:18:a5:8f:88:9b:
f2:7d:4a:99:fc:19:ff:5c:cb:59:58:42:fe:ca:08:8f:fd:ee:
cb:03:38:30:73:3f:0a:d0:32:49:09:85:81:91:4a:8a:59:e5:
fc:68:3f:7f:88:a5:74:be:0a:e3:59:9e:bb:90:52:37:82:c3:
79:48:56:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:52 2024 by rpki-client on console-fra.rpki-client.org