Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VGdqvHF3yB0TMo87m6wcTTC91Ak.roa
File: VGdqvHF3yB0TMo87m6wcTTC91Ak.roa (raw, json)
Hash identifier: Ak8iKfR46SwDjpfkHicEGn+m04XxvZGMAohDbOGfjXw=
Subject key identifier: 54:67:6A:BC:71:77:C8:1D:13:32:8F:3B:9B:AC:1C:4D:30:BD:D4:09
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1D36
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VGdqvHF3yB0TMo87m6wcTTC91Ak.roa
Signing time: Wed 29 Sep 2021 02:48:46 +0000
ROA not before: Wed 29 Sep 2021 02:48:46 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 123.193.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7478 (0x1d36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:46 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=54676ABC7177C81D13328F3B9BAC1C4D30BDD409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:24:d5:9e:94:1d:70:4b:a6:50:b5:9d:27:4b:
bb:87:f2:1e:80:1f:9d:35:e3:3a:42:b1:03:4f:ea:
83:2a:12:d4:3e:17:e2:d6:5a:23:05:3f:70:4e:45:
d4:5d:32:ca:41:1b:2a:e6:0d:17:de:cd:8b:3b:af:
bc:28:25:73:e1:ea:5f:20:77:df:90:c0:72:b0:54:
71:a4:f6:19:7c:c7:8e:13:0e:7f:09:4a:9f:45:17:
c8:ca:e9:16:3c:1f:c4:af:09:82:d4:90:7b:a1:f0:
6f:94:9b:24:75:5c:ea:c4:4a:e2:b0:11:0c:18:f6:
8a:18:c8:ac:64:20:8c:93:da:12:16:4e:f8:94:1b:
33:ab:1b:5d:8d:6a:3e:57:e0:c1:d5:30:83:b3:cf:
f1:92:1c:ae:3d:89:1b:35:b4:a4:b2:a9:e2:60:e6:
80:dd:ae:67:17:ef:c9:fc:0d:1a:4d:c4:89:c6:48:
dc:61:65:e6:ca:07:08:76:a5:00:41:fc:dc:68:5a:
30:5e:1e:f8:80:1b:a2:74:a7:37:bc:36:67:bb:cd:
fb:23:8c:72:5c:3d:8d:33:e1:25:e3:47:e7:b6:f1:
a8:8d:23:d7:c7:96:6c:e2:2a:e4:a8:b3:07:c0:4e:
dc:7b:d8:e8:61:26:a9:d3:13:46:ed:9e:4d:30:e4:
ea:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:67:6A:BC:71:77:C8:1D:13:32:8F:3B:9B:AC:1C:4D:30:BD:D4:09
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VGdqvHF3yB0TMo87m6wcTTC91Ak.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.223.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:b4:74:fc:ae:73:2a:4a:57:08:88:6d:9a:f2:2a:af:21:bf:
33:d0:bf:ee:c8:59:bf:01:95:3a:1b:f1:b4:f7:c1:13:7e:c4:
30:e4:95:f4:f1:f2:74:fc:21:bf:e0:6b:1f:10:0f:3f:0b:f1:
7b:6b:4f:8a:83:6e:50:20:f3:72:76:f2:e6:5c:be:30:32:ae:
bd:07:1a:37:36:c1:e4:9e:5e:90:3c:5b:c8:99:bd:d2:a3:94:
f1:58:1e:b2:42:b5:08:d4:e3:ae:a7:cf:60:2f:53:e3:14:a5:
ab:ab:b0:d5:97:16:a7:45:95:4c:0a:41:b4:45:c9:57:43:91:
44:2c:31:fb:e3:98:98:80:36:88:66:34:60:c5:de:10:77:57:
3a:b2:bf:eb:98:ac:95:47:ff:95:4e:22:04:a3:9d:65:1c:f8:
6a:e2:60:f5:40:18:fe:6d:2c:28:7d:92:6d:cb:4c:27:03:29:
15:d9:0a:d7:8e:94:2a:ae:df:2b:51:e7:87:34:98:63:74:57:
e4:87:f7:e7:7e:c7:29:6a:f9:c4:6b:46:81:e9:e3:4c:85:47:
fe:b2:1f:68:65:2d:01:dd:87:e1:36:3f:7d:ad:07:e1:28:7f:
6d:2a:5e:9f:45:93:e5:ba:4a:76:d3:d7:59:88:83:4b:7d:5b:
eb:04:20:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org