Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VHALx4vq_XmJTaxVRG9Rg2Pm4wU.roa
File: VHALx4vq_XmJTaxVRG9Rg2Pm4wU.roa (raw, json)
Hash identifier: TEBjpnwjNzUa+a4GW3W7jZrj2ixfFzhxtgWTGI+7uZE=
Subject key identifier: 54:70:0B:C7:8B:EA:FD:79:89:4D:AC:55:44:6F:51:83:63:E6:E3:05
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2293
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VHALx4vq_XmJTaxVRG9Rg2Pm4wU.roa
Signing time: Fri 25 Nov 2022 04:41:21 +0000
ROA not before: Fri 25 Nov 2022 04:41:21 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 123.194.254.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8851 (0x2293)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:21 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=54700BC78BEAFD79894DAC55446F518363E6E305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5d:46:99:a9:06:e4:6e:5e:0d:35:cd:31:49:
b2:ba:a7:ca:8a:2b:62:48:0c:f0:98:72:3a:ae:7f:
35:79:c1:d5:00:26:0c:e5:b3:95:24:84:fe:a6:e5:
6e:b9:92:3e:2e:35:44:1b:bb:30:2e:4b:23:c3:18:
5d:81:5e:10:2c:cb:78:75:2b:ef:3d:c8:41:e9:3b:
a9:24:ca:65:6d:f8:16:9f:72:ac:d3:8e:5e:34:2a:
f4:36:7b:de:06:3d:8c:5a:ab:6c:11:36:3a:eb:b9:
73:7c:92:9a:b6:57:37:27:e2:b4:e3:1e:7c:42:6f:
91:94:24:b0:a1:b2:37:28:5c:18:24:e9:4b:4f:c9:
ee:f7:25:28:10:bb:47:db:3f:4d:cf:bd:37:cd:db:
40:d9:15:57:96:88:e0:e1:14:1f:c3:f4:b3:f7:0b:
0f:21:bd:3f:35:ce:8a:99:ca:b7:3c:ba:e3:1c:7c:
d2:53:de:ad:c7:f8:9a:97:82:59:50:48:37:96:6e:
b1:28:91:ce:66:37:f7:23:80:d3:44:b2:53:97:10:
26:6c:aa:0a:18:9f:74:0c:32:99:ef:ac:60:0c:82:
98:85:ae:c7:19:69:4f:cd:cb:fd:af:e4:ce:51:21:
36:5e:25:69:5e:8a:bf:43:cd:72:89:24:af:61:44:
d8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:70:0B:C7:8B:EA:FD:79:89:4D:AC:55:44:6F:51:83:63:E6:E3:05
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VHALx4vq_XmJTaxVRG9Rg2Pm4wU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.254.0/23
Signature Algorithm: sha256WithRSAEncryption
92:1d:19:41:c1:2c:ab:8d:ff:06:37:e8:4b:a6:26:4f:bc:eb:
4b:9c:d9:d7:4c:e1:18:a5:75:42:6d:65:1b:81:24:91:14:85:
a6:33:30:34:a2:be:81:8b:fe:74:db:08:02:89:fd:56:1f:47:
a3:63:a3:50:0f:37:1a:96:0f:fa:3b:fa:be:fb:c5:57:f2:d2:
37:74:7c:f0:46:b5:31:bb:cc:2e:47:be:62:3f:12:14:01:ad:
91:bd:21:a8:2a:b0:50:32:87:dd:2e:4c:7b:f1:55:26:7d:99:
9a:91:52:29:27:d5:52:e0:2e:f6:5e:c9:0e:77:14:7d:6a:82:
f1:84:83:b1:85:e0:b1:fd:74:28:e1:9b:e5:e1:b2:a9:ad:bf:
27:5e:42:3c:dc:89:1f:30:17:4b:3e:32:f2:1a:dd:47:85:6d:
1e:ab:bd:aa:4c:ee:ec:a4:18:13:f7:93:0b:10:fc:42:43:82:
1a:86:c5:5c:55:7a:0c:b7:7e:9b:e3:6c:01:bb:d9:21:44:f7:
25:91:6f:2a:81:6d:c4:b1:47:a0:09:a4:a5:26:9b:0a:ce:a0:
28:1c:57:82:45:d7:60:60:6f:ee:af:7d:ae:02:f6:1c:5a:a9:
fb:ff:e1:0b:e1:4f:88:ac:de:a2:f5:fc:d2:8e:0e:45:96:3f:
86:0c:db:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org