Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Th4km_mFbkE5WEnNLsVePYBwyag.roa
File: Th4km_mFbkE5WEnNLsVePYBwyag.roa (raw, json)
Hash identifier: 4CR0gDIMrotMAt76l9BQ6JxBtwms1jJN5YOwPy1/RaE=
Subject key identifier: 4E:1E:24:9B:F9:85:6E:41:39:58:49:CD:2E:C5:5E:3D:80:70:C9:A8
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2165
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Th4km_mFbkE5WEnNLsVePYBwyag.roa
Signing time: Fri 25 Nov 2022 04:39:53 +0000
ROA not before: Fri 25 Nov 2022 04:39:53 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.72.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8549 (0x2165)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:53 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4E1E249BF9856E41395849CD2EC55E3D8070C9A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:42:19:45:f7:17:36:db:ef:6a:8d:5f:7f:fb:
e5:7b:b8:54:b1:77:57:8f:e3:be:ca:a0:7e:e2:83:
e5:a8:fb:0c:c2:36:97:f6:8c:74:b3:fc:04:68:ff:
fc:f8:78:46:af:71:80:52:c6:f2:c5:d1:75:ea:27:
72:d3:b9:9a:67:6c:55:3c:cc:98:06:df:5c:23:ac:
d4:77:9f:cb:77:c2:18:96:7d:a8:30:7f:cf:b8:3d:
65:d1:bd:81:7b:1e:13:62:81:97:87:7e:8b:1e:d4:
c7:e5:0e:23:cd:ec:62:d2:a5:1d:a9:d5:ae:81:28:
4e:f9:f2:8f:0d:27:15:ad:bb:af:bd:78:a1:d2:7c:
91:7b:54:8a:be:ea:48:c8:63:39:e8:67:f2:a2:d0:
b8:25:5a:0a:2d:fd:39:ad:13:f4:ad:7d:2a:ce:78:
9e:fe:9d:24:6f:77:94:57:47:88:15:1c:60:16:55:
7d:13:9a:96:42:2e:b6:93:70:73:e4:23:0e:ab:95:
39:76:78:5a:eb:37:95:3d:ee:9e:4e:97:54:d6:84:
2f:c9:5b:66:ff:f2:72:55:2c:7c:98:bc:a0:24:6b:
d7:00:89:f3:42:28:1f:46:93:38:7e:90:52:48:98:
45:8b:10:9c:64:f4:f8:c3:75:57:2b:76:94:2c:cb:
cf:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:1E:24:9B:F9:85:6E:41:39:58:49:CD:2E:C5:5E:3D:80:70:C9:A8
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Th4km_mFbkE5WEnNLsVePYBwyag.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.72.0/22
Signature Algorithm: sha256WithRSAEncryption
49:78:b2:a8:58:8c:0e:2a:a8:ee:70:3b:39:20:60:0e:76:36:
e8:ba:ec:08:43:24:3c:27:b1:b9:68:04:00:16:bc:1b:5f:41:
dd:24:ce:7e:a7:f4:53:9b:0d:3f:02:82:75:29:a9:36:dd:86:
88:22:42:14:ac:79:b4:37:65:54:fb:ea:35:37:c6:50:f1:9d:
ad:d8:57:71:1e:6e:5d:7e:06:ba:8f:0e:36:46:78:4b:00:c6:
1e:81:66:ad:ca:bf:97:e4:a0:1b:1d:07:6f:e2:c2:58:dc:72:
f1:4d:fe:97:15:4c:3c:00:e8:88:72:76:76:d1:19:49:a1:6a:
91:91:22:fb:7c:c4:60:ab:4f:8a:82:03:7c:68:81:52:82:14:
40:66:29:a0:5c:12:40:e9:7d:5d:a8:e5:95:15:a7:7c:1a:16:
40:0b:cf:ed:a1:59:81:a1:52:91:9c:df:55:d9:53:b1:73:5e:
26:6b:94:aa:23:68:59:c8:a9:74:94:c1:d0:18:c8:e9:74:f4:
54:db:7c:c8:ab:0b:bd:bf:64:af:0d:16:23:e2:7b:d1:43:65:
01:53:66:49:a8:a1:81:e8:4a:5e:c3:27:71:d6:15:60:ea:3c:
a4:67:fd:19:a2:58:bf:d4:2d:b1:36:c4:7a:ef:f9:38:fe:cc:
82:c6:36:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org