Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/T1zEIcYYVoMuiPIBXV9iJ_rlv70.roa
File: T1zEIcYYVoMuiPIBXV9iJ_rlv70.roa (raw, json)
Hash identifier: TBHfnOSEzHgOtYtmxOWrpVa8+bLivFYsB9hP+aAJFvY=
Subject key identifier: 4F:5C:C4:21:C6:18:56:83:2E:88:F2:01:5D:5F:62:27:FA:E5:BF:BD
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/T1zEIcYYVoMuiPIBXV9iJ_rlv70.roa
Signing time: Thu 15 Sep 2022 02:45:15 +0000
ROA not before: Thu 15 Sep 2022 02:45:15 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 123.195.0.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:15 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4F5CC421C61856832E88F2015D5F6227FAE5BFBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:29:71:fd:78:bc:2c:93:d3:51:0f:e2:62:d0:
37:57:a8:88:3e:9c:03:45:82:fe:40:82:e5:bb:e9:
67:90:43:a6:99:82:87:46:d8:00:25:53:ca:e5:d8:
16:cd:9f:98:bb:a8:70:d6:fa:f3:b2:ab:e9:d9:fd:
d7:c0:ad:5e:56:94:b1:04:64:59:63:4f:6f:0b:0e:
6f:0e:88:69:32:22:d2:57:bb:bb:f3:1d:7e:52:cc:
5f:5a:01:e1:f2:2a:27:24:22:8c:e4:44:25:f9:b7:
5f:bf:c6:41:c1:2b:00:49:dc:52:ea:65:8a:e0:bb:
6a:55:b7:a0:47:52:7b:94:3d:a6:80:27:92:3c:0c:
82:eb:7b:ce:ec:5b:a0:e6:34:a5:ea:70:85:58:3a:
9b:78:89:b0:46:8a:8e:ca:00:a0:64:4f:c0:a5:e8:
ca:e9:f6:6b:94:90:85:38:87:02:b2:7f:9c:39:b2:
ce:8c:1e:36:24:14:cb:df:75:33:16:05:36:e7:36:
02:87:95:66:22:3e:e4:c2:e0:7d:ff:62:3e:90:35:
30:ea:49:52:bc:46:d0:4c:97:75:ac:2c:87:3b:4b:
c8:b6:c1:93:b4:b9:65:20:21:3b:4e:84:13:22:d6:
39:6a:ae:b5:40:6d:bb:c9:64:e4:a4:d7:97:e1:3e:
f1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5C:C4:21:C6:18:56:83:2E:88:F2:01:5D:5F:62:27:FA:E5:BF:BD
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/T1zEIcYYVoMuiPIBXV9iJ_rlv70.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.0.0/19
Signature Algorithm: sha256WithRSAEncryption
00:cc:99:33:06:6a:05:a2:6b:6f:b5:ff:14:78:02:c6:a6:a1:
be:60:65:8c:79:8a:f3:7f:f3:6f:c9:77:77:9d:d0:4a:3a:f4:
03:27:2a:c4:12:f9:e8:19:25:32:24:42:f9:ff:8f:e9:f5:98:
a0:51:cb:5c:f0:05:71:8e:33:2d:15:53:ae:4f:4b:86:e2:73:
1b:c0:59:a0:d6:be:52:0d:9f:00:e4:db:c4:65:0b:5e:c4:a2:
f9:8f:23:72:8f:db:95:2a:95:01:07:18:1c:27:92:39:1c:20:
5e:1e:b3:9c:a9:29:69:84:fd:1b:6c:56:3a:d8:39:5b:75:25:
47:fa:19:71:8e:a0:e2:cb:fc:d6:b8:dc:60:da:a7:56:85:73:
ea:b4:3f:23:b5:ba:1a:f4:8d:97:33:65:ff:ec:a8:46:29:2b:
fd:8d:88:38:25:ca:9b:1b:63:b8:e2:ad:6e:f9:ff:32:ba:03:
07:9f:fe:61:f3:bc:dd:66:1e:1b:39:12:ba:34:b5:9d:da:0a:
c9:a2:b8:eb:27:85:f1:9d:d0:8d:8a:a8:fe:ef:f8:e4:f7:35:
38:a7:17:f9:7d:c2:33:70:18:e5:2f:7c:60:54:43:e9:65:77:
f3:3c:d9:cb:92:09:fc:ca:75:b3:0e:04:8d:d5:8c:e2:56:03:
be:23:47:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org