Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UDG9JEycF5BMKXhm8vf7CPqAJ4U.roa
File: UDG9JEycF5BMKXhm8vf7CPqAJ4U.roa (raw, json)
Hash identifier: NW033yrVSDZsrvw2Ekp2uvL22SJiELlBJix6UuWuLzQ=
Subject key identifier: 50:31:BD:24:4C:9C:17:90:4C:29:78:66:F2:F7:FB:08:FA:80:27:85
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1A95
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UDG9JEycF5BMKXhm8vf7CPqAJ4U.roa
Signing time: Wed 29 Sep 2021 02:45:31 +0000
ROA not before: Wed 29 Sep 2021 02:45:31 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.192.108.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6805 (0x1a95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:45:31 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=5031BD244C9C17904C297866F2F7FB08FA802785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:88:d5:18:f0:fa:c8:8a:f8:4a:1d:ab:70:8e:
17:e0:96:13:3b:a1:2a:0f:4b:6f:85:cc:11:fe:95:
f5:64:4c:1e:c2:8f:2a:87:e1:7a:9f:59:82:28:f0:
ab:2d:e5:91:4c:d5:5e:f0:3a:89:36:a8:dc:d1:e9:
f0:07:86:ef:78:0e:51:04:9b:77:e6:2a:d6:23:5c:
a7:bf:de:de:d4:24:c4:a6:16:9c:a0:62:52:ea:b9:
5d:ae:c1:52:d0:5c:2f:cc:5c:2f:70:fa:c0:1e:1d:
5e:67:37:f7:8d:d4:2a:e1:bd:e6:b3:f5:3b:62:c2:
db:05:d1:64:a5:15:f6:3c:80:c5:5c:c6:a9:19:8c:
4f:fa:ec:7a:1c:d9:87:4f:00:6d:f9:91:44:60:79:
cd:ce:10:7d:bd:34:98:dc:5b:e9:25:f1:1d:6f:c7:
3b:0c:38:68:af:9a:76:db:6e:8e:13:1f:a4:aa:c0:
68:0e:f1:2c:96:78:20:43:ba:74:77:90:3a:66:32:
38:63:5b:a0:65:3e:e1:59:77:cf:b3:7c:59:a1:3e:
08:0e:68:c3:55:b2:96:af:bc:eb:26:99:21:38:4f:
23:59:1f:ca:e2:3f:74:4b:f8:d5:1d:c3:5d:c4:f7:
74:c3:af:f6:7e:6d:aa:56:4c:c7:e9:c6:b8:3a:fd:
2d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:31:BD:24:4C:9C:17:90:4C:29:78:66:F2:F7:FB:08:FA:80:27:85
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UDG9JEycF5BMKXhm8vf7CPqAJ4U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.108.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:f5:43:1b:91:97:dc:61:7c:a0:d1:73:45:b6:00:47:ae:86:
1d:82:97:6b:b5:03:e8:15:98:b8:9b:01:e0:05:e5:17:2f:68:
b4:f4:ef:74:40:8c:fd:64:f9:dc:6a:14:a1:31:1c:fb:27:bf:
f2:7f:22:7e:fa:e7:70:fe:bd:9c:99:e1:15:42:ac:06:4c:02:
d2:fb:79:62:9f:ba:0c:1f:37:31:5f:2c:ec:e5:b6:0b:e6:ba:
c0:69:f3:20:a6:19:2e:72:d0:18:3d:02:e6:b3:fc:0f:1d:9a:
d1:ec:f4:6a:85:9b:11:de:10:2f:39:6d:c8:92:df:a0:80:33:
32:18:06:bc:5e:0b:e5:03:07:fc:30:06:01:15:61:d0:5c:b2:
ba:bc:69:d0:a6:07:79:a3:6f:cf:dd:5c:d5:8b:60:47:22:14:
0e:8e:90:13:aa:a0:e1:31:73:4a:df:e9:ca:f4:d0:08:93:8c:
52:4b:8c:f0:ae:59:c4:54:03:56:33:7e:45:bb:13:f1:7b:db:
c3:b8:af:6e:87:7f:98:a6:c0:d6:d0:f4:d4:63:76:f5:ba:74:
da:b5:cf:27:12:f6:eb:af:c1:d5:73:4a:2e:57:5e:0a:0a:76:
40:7c:aa:f2:7b:1e:9b:15:72:48:e7:59:a1:f8:a0:75:dc:34:
f0:e9:7f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:20 2023 by rpki-client on console-ams.rpki-client.org