Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SThtdN9MwFlpdZUX7TmOSM16Qh4.roa
File: SThtdN9MwFlpdZUX7TmOSM16Qh4.roa (raw, json)
Hash identifier: +t4/wAeZ0XkekMlewreCDsXzHaWFbsyLi4/LDU000J0=
Subject key identifier: 49:38:6D:74:DF:4C:C0:59:69:75:95:17:ED:39:8E:48:CD:7A:42:1E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SThtdN9MwFlpdZUX7TmOSM16Qh4.roa
Signing time: Thu 15 Sep 2022 02:46:06 +0000
ROA not before: Thu 15 Sep 2022 02:46:06 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 103.224.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:06 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=49386D74DF4CC05969759517ED398E48CD7A421E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:12:a1:f7:e8:d2:99:5d:e3:f7:66:3d:1c:e0:
4e:32:5d:79:a5:3b:6d:d1:23:a4:40:f1:c3:0d:5a:
95:c9:b0:ae:3e:b2:b3:cf:2e:fb:0e:4c:5b:77:df:
ee:af:29:e5:c1:0c:e6:65:e0:9a:08:df:ac:41:9c:
96:51:b4:c5:43:a4:21:fe:5e:b4:68:62:95:35:39:
39:f1:fb:bf:d2:4b:ae:24:8b:a8:b6:9f:6e:35:bf:
78:e7:22:08:51:d1:fa:92:fd:4e:99:40:b9:89:62:
5c:66:78:0f:17:e6:be:67:39:3d:38:93:23:aa:96:
d4:a1:15:37:9e:bf:46:8f:42:61:d0:d5:a8:af:8f:
6b:46:7e:a2:3e:ec:89:48:7f:b4:f8:d7:f2:18:9d:
84:79:9e:fe:9b:31:65:4b:df:5e:89:74:02:93:9d:
c6:53:e1:44:81:e2:d8:c2:9e:61:b0:95:ef:5b:25:
1e:a1:67:a0:3d:e5:70:e8:da:a4:5d:df:26:1a:c9:
fa:f6:f5:41:a0:53:2f:2b:9c:5f:e4:c7:a7:22:a8:
18:10:b3:51:69:4d:e3:b3:b7:8c:80:c4:90:b9:57:
77:f4:ec:1d:90:f9:f1:e7:8e:d2:bc:ee:d8:cb:f8:
7a:11:39:28:9c:a1:47:45:13:42:32:41:0d:f3:3b:
aa:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:38:6D:74:DF:4C:C0:59:69:75:95:17:ED:39:8E:48:CD:7A:42:1E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SThtdN9MwFlpdZUX7TmOSM16Qh4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.224.195.0/24
Signature Algorithm: sha256WithRSAEncryption
82:a3:97:5b:90:73:8c:15:60:11:93:fa:82:56:c7:29:67:c1:
21:04:51:46:18:86:a4:1d:d9:97:1d:99:7d:52:0d:65:1b:cb:
63:a9:3e:23:3a:6a:bc:0b:0e:f8:0d:82:a2:59:a4:58:8e:0a:
17:51:38:eb:6e:ca:f4:14:66:f4:c5:ed:66:f8:5c:bf:8b:7f:
69:fc:80:83:e8:f5:6d:3e:a5:35:2f:83:dd:88:a6:96:2d:3f:
19:37:3d:41:a5:88:f5:ae:84:d2:2d:6d:60:27:ea:f7:98:b3:
3a:47:2f:d5:7a:6b:20:fa:71:fd:02:cc:94:13:61:4d:54:14:
f3:7b:a1:d5:fa:54:27:78:f4:e0:f7:b0:f2:a0:c2:0b:91:11:
83:3a:67:c9:9e:2b:b5:8c:f8:17:f0:9d:97:f1:76:6d:2b:3e:
5b:88:05:3d:12:87:5a:44:16:3f:29:da:d7:04:fc:79:8c:fb:
72:32:67:9d:01:fe:e6:af:a7:7b:4a:de:37:34:d6:32:07:d9:
19:f5:e9:b3:88:a2:22:43:69:70:2f:53:04:ce:52:a2:a2:78:
ed:9e:42:cf:43:13:91:78:f4:03:91:19:a7:92:ac:61:5d:2a:
67:4a:ad:a6:1a:96:37:6a:fe:02:41:92:f8:7a:27:ae:62:0b:
db:2e:4a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org