Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TSWsp0UzhvPdxDaXFYg_PjfkfWw.roa
File: TSWsp0UzhvPdxDaXFYg_PjfkfWw.roa (raw, json)
Hash identifier: YUBt3v5v5n1MOhV844qqAgOV0QtCbrFH2roXev1p88c=
Subject key identifier: 4D:25:AC:A7:45:33:86:F3:DD:C4:36:97:15:88:3F:3E:37:E4:7D:6C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TSWsp0UzhvPdxDaXFYg_PjfkfWw.roa
Signing time: Thu 15 Sep 2022 02:46:08 +0000
ROA not before: Thu 15 Sep 2022 02:46:08 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.156.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:08 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4D25ACA7453386F3DDC4369715883F3E37E47D6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:60:13:02:0b:31:bb:f8:82:16:b0:8f:6c:49:
21:e3:d8:5b:d6:c0:7e:7b:9d:a6:9c:a7:fc:5f:10:
11:95:04:50:b9:ff:7c:30:5f:b2:47:d4:e0:30:a8:
f8:9d:47:d7:f1:9a:9a:a1:0c:c3:f1:81:8c:0e:8e:
dd:2f:28:fb:6c:92:9e:09:61:81:0d:a1:37:24:ca:
3e:33:5b:27:97:4f:db:0a:28:4f:64:9e:d8:a0:24:
ef:46:70:da:53:71:c9:a4:62:53:89:1a:50:33:bc:
e7:a2:f4:e7:8a:75:c1:50:39:77:d9:7b:48:4f:9a:
c8:7e:14:67:c1:6f:0e:c4:0d:37:b1:6f:d2:bb:0e:
ad:00:29:37:3c:bd:97:66:44:83:e4:65:f6:c8:a2:
a1:09:24:e7:09:52:8d:d2:06:ba:8f:f8:cf:f0:19:
b6:49:ce:0f:f5:9b:df:78:e3:8b:06:01:6b:94:3d:
0a:b7:b5:41:61:a4:3c:a2:1a:2c:f4:86:93:a9:8f:
fc:d8:5f:61:67:1a:c4:6b:de:47:9a:57:5d:07:88:
07:c9:5e:64:c1:91:aa:76:da:06:83:f8:8a:ed:ab:
3b:1d:b7:97:96:26:49:25:50:00:ee:42:f8:c9:ec:
83:a3:0e:55:3e:38:7a:dc:94:23:45:51:31:dd:8d:
81:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:25:AC:A7:45:33:86:F3:DD:C4:36:97:15:88:3F:3E:37:E4:7D:6C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TSWsp0UzhvPdxDaXFYg_PjfkfWw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.156.0/22
Signature Algorithm: sha256WithRSAEncryption
40:73:f3:f1:14:8f:4c:e1:ae:4a:6b:00:97:4e:68:95:46:66:
81:92:33:66:22:fd:3b:29:c6:31:db:43:44:60:0d:53:7d:83:
4d:2c:7a:f7:48:e5:5c:c0:7e:8a:bd:d0:6b:89:c1:10:3f:af:
c4:89:a1:55:fd:ff:e1:37:5a:c2:d9:3e:fe:ab:1e:44:27:99:
e2:84:2c:97:a1:29:dd:59:4d:5e:88:63:e1:34:0e:b1:7a:2e:
29:0b:cd:b8:73:01:70:73:09:79:89:00:86:24:b2:18:4e:6d:
95:c1:c7:35:47:f9:9d:b4:83:d3:b8:e7:c8:1d:39:af:a9:d5:
6f:41:09:ff:76:a5:54:70:29:b4:5a:93:7e:89:31:04:c1:98:
3e:bd:a8:b8:e9:f1:75:2f:ab:6a:59:da:e0:c2:43:e8:9b:7b:
a5:46:5e:a8:74:30:4f:c5:09:bb:3d:28:70:03:24:7d:35:9a:
9d:13:40:47:b8:2b:07:57:d5:1c:5e:71:20:8a:a5:2c:32:a3:
c9:ca:77:56:c5:ec:f5:2d:24:ea:19:96:27:7e:95:41:60:67:
82:dc:9b:50:57:cc:68:85:0f:47:27:a1:28:04:da:85:bf:11:
9a:09:c0:d3:23:89:f4:12:dd:e1:cf:dd:39:35:cd:e9:17:11:
e8:a0:3a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org