Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TavXtLJjqGnMYYjYYLCQrYSrV_Q.roa
File: TavXtLJjqGnMYYjYYLCQrYSrV_Q.roa (raw, json)
Hash identifier: SxQnwQqTlRm8sC+k6KGRZ3qNkLQ44ijrNh4dgfvL7iw=
Subject key identifier: 4D:AB:D7:B4:B2:63:A8:69:CC:61:88:D8:60:B0:90:AD:84:AB:57:F4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TavXtLJjqGnMYYjYYLCQrYSrV_Q.roa
Signing time: Thu 15 Sep 2022 02:46:20 +0000
ROA not before: Thu 15 Sep 2022 02:46:20 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.16.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:20 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4DABD7B4B263A869CC6188D860B090AD84AB57F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fb:95:57:ae:1c:c0:73:a3:b3:0d:02:99:57:
84:c5:10:60:ae:b4:88:66:9b:ac:52:cf:a2:b5:41:
27:a5:ec:82:82:c0:c5:6e:e5:dd:14:15:2b:6f:68:
24:db:df:d2:70:13:b6:ce:4d:7c:89:f4:18:af:89:
73:50:34:55:fd:2c:cc:12:94:34:55:a2:1e:84:25:
44:15:3f:00:32:31:36:49:f0:bf:5b:17:29:86:3f:
8a:32:2f:a8:a4:5b:aa:a4:df:75:58:08:22:3c:84:
94:7d:d3:63:c8:31:4c:0a:f2:f0:72:0e:d7:20:af:
ff:61:b5:8f:2f:33:ad:6c:f3:09:a5:60:9b:fb:e4:
bf:25:8b:07:f7:52:67:84:1b:f0:a3:b3:bb:0f:fd:
81:f3:12:c8:f3:14:b8:22:00:d2:85:c0:54:62:9b:
cd:b9:77:a8:11:d6:de:95:05:06:c2:a8:8b:27:1c:
fe:32:50:f7:d1:c6:6c:fe:84:9f:90:67:05:48:f1:
9e:f5:b2:a9:c1:51:6a:f6:9f:a0:92:cf:4d:39:1b:
7b:f7:6a:86:bc:9f:12:e4:49:a3:0c:99:7a:0c:f5:
48:ab:7b:09:d4:d1:33:dc:91:76:f2:df:9e:df:fb:
8e:a0:8c:a3:3c:8e:05:d1:93:9f:da:74:fc:42:49:
6e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:AB:D7:B4:B2:63:A8:69:CC:61:88:D8:60:B0:90:AD:84:AB:57:F4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TavXtLJjqGnMYYjYYLCQrYSrV_Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.16.0/21
Signature Algorithm: sha256WithRSAEncryption
03:0a:e8:1c:16:53:ec:4a:05:62:99:95:72:d1:eb:99:a3:9d:
0a:0b:3d:60:2a:b5:3a:de:55:d2:bc:84:ae:98:f5:1d:ea:ed:
dc:0c:c7:80:e2:44:c8:81:14:61:3a:0d:ee:66:dd:2b:93:79:
68:d6:82:ce:bb:a3:8e:d3:a6:a4:ed:70:7b:58:5a:c8:e0:3b:
63:cd:92:52:57:f4:9b:6a:23:1c:a2:cc:86:f1:fd:dc:17:58:
db:13:37:d1:06:c4:d5:78:f6:68:a8:90:8a:97:98:07:4d:e2:
3d:ff:e5:62:c5:d0:6b:37:c3:48:15:98:ce:ee:44:d2:c6:6c:
62:cd:2f:5f:b6:63:1f:31:5d:76:50:aa:7f:09:d8:e6:27:6b:
e2:e0:89:c6:f2:1d:36:75:16:1d:18:88:d2:b5:08:5c:75:78:
17:06:0f:65:81:6b:56:8b:32:c5:bc:5a:68:cb:c6:44:25:28:
fc:34:20:bc:7c:54:ad:a4:ac:49:48:60:f7:ff:e5:d6:da:03:
5c:1e:e2:ae:6a:ae:5c:c6:43:7a:32:c5:f8:19:23:2d:e7:e5:
11:5f:e8:90:96:81:27:8b:79:b1:8d:8d:43:36:b8:1b:b7:2a:
67:c8:0a:9b:dc:2a:af:0e:7c:9a:ba:e1:2f:3b:db:c1:72:dc:
61:71:9e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org