Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U4B9rbsC16DGvTxDI1kg71whoCc.roa
File: U4B9rbsC16DGvTxDI1kg71whoCc.roa (raw, json)
Hash identifier: 2SvHFY2Ul4IkyrKnF3ueAoMhh3NELQ1oxFb0c4drgic=
Subject key identifier: 53:80:7D:AD:BB:02:D7:A0:C6:BD:3C:43:23:59:20:EF:5C:21:A0:27
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1D04
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U4B9rbsC16DGvTxDI1kg71whoCc.roa
Signing time: Wed 29 Sep 2021 02:48:30 +0000
ROA not before: Wed 29 Sep 2021 02:48:30 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.193.92.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7428 (0x1d04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:30 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=53807DADBB02D7A0C6BD3C43235920EF5C21A027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5f:67:6e:90:26:b2:87:39:47:9b:bb:72:13:
c4:90:60:9b:f0:82:d2:13:61:c3:e1:a2:b7:93:26:
02:c1:d3:3b:d0:d1:92:8f:88:d7:15:41:68:1f:4c:
68:6d:16:12:48:27:de:84:2d:dd:3a:22:93:a4:4e:
34:f5:d5:ad:8e:09:56:51:8f:24:55:cc:e5:c4:51:
e4:bb:26:5a:34:fd:8e:57:ac:46:b6:d7:82:b9:17:
ef:fd:27:dd:a3:d5:92:8e:1e:ac:95:63:ce:54:8d:
89:99:9e:d6:37:fd:1e:c1:86:2f:f0:3c:24:34:68:
73:ce:5c:ea:4b:87:f1:3a:a4:81:e0:10:be:42:01:
de:88:c9:85:de:dc:31:e2:11:9e:86:38:3a:ce:76:
4f:06:b5:79:10:72:60:90:1e:9a:f6:5c:ed:f7:a3:
4d:2f:9f:23:e3:fd:3a:55:c8:e3:93:f0:ec:c7:97:
55:77:b5:24:7e:05:35:b3:9e:0c:13:d3:26:8f:40:
0b:5d:4f:1f:6e:8f:98:ec:be:ff:9a:63:fc:63:fc:
ed:9f:5a:28:30:15:14:d7:e1:40:60:fc:6c:75:f1:
06:42:1b:3a:59:e8:3b:6e:84:21:9f:4e:45:fa:4f:
5c:37:ff:67:2f:4e:df:72:4c:31:31:5e:93:e9:f4:
45:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:80:7D:AD:BB:02:D7:A0:C6:BD:3C:43:23:59:20:EF:5C:21:A0:27
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U4B9rbsC16DGvTxDI1kg71whoCc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.92.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:4e:7a:e7:69:8c:78:f8:dd:d7:af:e6:89:6e:8d:73:2b:c7:
01:ab:bc:27:aa:60:d7:75:4a:81:95:1e:33:4b:53:11:e7:8d:
d9:84:40:b8:d7:c3:e9:90:dd:f9:3f:e2:c2:8a:6e:4b:a7:9b:
2c:12:4b:34:66:74:63:50:ba:ce:31:0f:c3:74:7f:b7:a9:9a:
fe:dc:23:62:27:6d:2e:c5:d9:f6:fd:60:92:10:ab:29:a3:25:
25:1f:84:0a:e1:a5:b4:c7:12:fc:53:ae:fc:f7:98:17:05:9d:
34:0e:33:6e:a6:99:a7:37:8b:5e:19:89:5f:cc:44:e9:e3:35:
c0:f8:49:42:67:13:f2:b4:30:e2:73:d4:ff:a6:03:92:06:d0:
23:6a:fe:48:39:ce:e2:7c:e9:00:a3:fa:c2:2e:a2:a7:12:85:
a5:81:7a:b0:75:10:06:4c:98:be:0d:a9:5d:13:cd:d4:97:22:
1e:82:66:56:84:66:a8:c5:14:f6:82:4c:68:f0:96:40:d3:f6:
7d:e5:48:0b:a8:d8:cf:fc:f9:28:0b:9a:fa:cc:38:cd:e1:32:
52:e7:2c:9a:f2:88:da:57:99:c7:a4:27:89:81:b9:03:ea:b4:
38:7b:bd:c8:05:db:de:ee:73:33:55:fb:93:22:a1:bd:47:84:
1d:68:23:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:32 2024 by rpki-client on console-ams.rpki-client.org