Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VFBetslaLjS8gk9rnGOxyDfVe98.roa
File: VFBetslaLjS8gk9rnGOxyDfVe98.roa (raw, json)
Hash identifier: OPouRAPbImJ0grFHLSMzLMux2gM5gSHA1rSj+1xkX6s=
Subject key identifier: 54:50:5E:B6:C9:5A:2E:34:BC:82:4F:6B:9C:63:B1:C8:37:D5:7B:DF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1EA7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VFBetslaLjS8gk9rnGOxyDfVe98.roa
Signing time: Wed 04 May 2022 07:01:12 +0000
ROA not before: Wed 04 May 2022 07:01:12 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.195.24.0/21 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7847 (0x1ea7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: May 4 07:01:12 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=54505EB6C95A2E34BC824F6B9C63B1C837D57BDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4b:7d:2d:29:16:d7:1f:81:72:a7:9a:3b:0e:
ac:e0:3c:41:c8:69:0d:a7:7e:32:23:85:91:d5:6c:
75:6d:f3:c3:db:a0:10:2c:41:59:83:4a:fe:c6:9f:
7e:9b:ec:a1:1a:16:5f:81:4c:c9:eb:22:8a:f0:85:
ab:74:e4:bf:44:b9:5e:59:3f:6b:ed:ce:db:f9:56:
1a:96:16:c5:17:24:c0:3a:2d:c4:83:da:fe:56:09:
85:33:50:3a:68:94:5d:ac:62:44:26:28:0d:8f:a8:
53:4a:10:e4:77:10:ad:ee:84:b3:e1:8f:73:a8:0e:
a4:f8:d0:e2:0a:f6:e1:0d:80:18:f2:1e:f7:ca:6e:
4d:0d:3b:f8:d8:8b:4f:97:4a:57:bb:d0:1c:c3:14:
22:d7:9a:eb:21:f3:a0:14:1f:a5:c9:5d:f4:a9:0f:
7c:10:0d:c3:2d:8a:eb:87:68:78:37:45:b4:45:b9:
dc:70:04:02:42:a3:9b:c2:89:14:8a:df:69:ec:a3:
23:a5:2c:a7:ff:42:f9:6d:98:db:48:67:81:42:7e:
10:23:b0:57:b0:38:df:7e:5a:1c:21:d6:51:dd:7d:
be:9f:6c:07:94:2a:00:0e:3a:4c:d3:6e:b0:0f:dd:
46:8b:d2:4c:04:f4:ee:e8:8f:de:c2:07:a6:1c:7e:
a7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:50:5E:B6:C9:5A:2E:34:BC:82:4F:6B:9C:63:B1:C8:37:D5:7B:DF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VFBetslaLjS8gk9rnGOxyDfVe98.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.24.0/21
Signature Algorithm: sha256WithRSAEncryption
34:62:84:7f:18:98:a6:87:59:ce:90:6d:6d:d7:04:f0:82:d2:
a1:df:da:e0:0a:05:6c:b3:1e:8a:3b:b1:53:ad:48:ba:b7:e7:
d4:36:8d:a7:94:86:08:b9:6a:5d:40:7c:ae:fe:e7:65:43:56:
35:5a:65:9c:8f:49:f1:94:70:68:f6:29:f1:db:30:4a:c4:b6:
48:ac:ad:93:6d:f6:35:60:84:ba:f9:24:0e:77:3d:38:99:d0:
cc:34:1b:c4:55:d1:4d:02:79:13:3d:57:1e:e6:77:35:7c:79:
a6:02:e3:f3:23:48:ec:b9:d1:82:c0:52:26:aa:6d:fc:87:b2:
f5:bf:43:ae:df:ef:4d:06:c5:46:36:ad:cd:af:66:61:db:78:
d3:0d:99:64:ca:71:fe:61:89:7a:79:49:53:a9:e6:55:13:4c:
a1:fe:af:4e:de:dc:34:99:0f:27:c5:3a:32:84:91:c1:34:87:
bd:48:6c:67:81:cd:80:be:01:89:ff:91:3b:10:a1:2b:69:6b:
20:64:49:a2:c0:2f:ba:a0:77:17:67:99:38:cd:9e:65:9b:a5:
76:b0:6b:46:d3:03:87:3c:47:8d:6e:2d:62:c8:a9:d1:b5:f2:
2f:30:3c:53:57:0a:20:5a:01:34:98:67:2e:bd:10:69:e8:87:
af:28:ba:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:30 2023 by rpki-client on console-fra.rpki-client.org