Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VPPy6feUIk3GXrI2FW4LIJFQOcM.roa
File: VPPy6feUIk3GXrI2FW4LIJFQOcM.roa (raw, json)
Hash identifier: lww33UzMIhSTCRDrAHaPbsgQP/tHBeecqgwRRmH/IE0=
Subject key identifier: 54:F3:F2:E9:F7:94:22:4D:C6:5E:B2:36:15:6E:0B:20:91:50:39:C3
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VPPy6feUIk3GXrI2FW4LIJFQOcM.roa
Signing time: Thu 15 Sep 2022 02:45:27 +0000
ROA not before: Thu 15 Sep 2022 02:45:27 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.188.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:27 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=54F3F2E9F794224DC65EB236156E0B20915039C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:63:be:9d:94:b5:42:4d:d8:66:d7:52:65:40:
a7:c7:22:33:2d:f8:70:51:fd:33:ab:74:a8:5f:46:
d6:cb:b6:9b:88:44:b6:2e:6b:75:e2:ba:de:04:de:
52:a4:ba:7d:e4:fd:cd:c3:7b:99:dc:e8:28:91:76:
72:96:cf:7d:d5:60:38:7e:3c:85:2a:c7:85:61:53:
9a:12:f8:15:6a:5b:8c:5f:63:cc:75:a3:3f:93:8e:
a3:1f:6c:cb:6f:05:f6:b5:93:26:27:e2:7e:90:ba:
0c:ac:77:59:7b:2f:18:66:b2:3a:6e:7a:65:a4:6b:
34:e2:56:53:95:ff:23:c4:b3:b2:fa:26:c8:4b:80:
d2:40:4b:67:28:c9:97:86:05:ff:5d:df:75:0e:d0:
09:e4:74:5b:b3:7b:f8:e3:5f:fd:04:75:47:c6:76:
b5:d9:97:b0:6c:2e:32:a7:83:e3:38:60:7b:7b:b7:
09:56:27:e1:40:76:96:a3:9a:78:6d:30:9e:ee:c9:
47:1a:cf:76:88:1c:43:ac:ed:be:ba:f3:1c:a5:97:
8d:9d:cb:56:b3:85:e1:af:46:ed:4d:98:f3:0f:d1:
8e:d2:a4:b4:dc:40:57:01:77:38:2f:d6:78:94:3b:
4f:c8:fb:f9:f3:c3:bb:9d:e8:70:3e:c8:4c:40:72:
20:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F3:F2:E9:F7:94:22:4D:C6:5E:B2:36:15:6E:0B:20:91:50:39:C3
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VPPy6feUIk3GXrI2FW4LIJFQOcM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.188.0/22
Signature Algorithm: sha256WithRSAEncryption
50:6a:72:06:7f:8f:6e:db:80:bf:5c:f8:7b:6e:dd:c3:ca:69:
f1:6a:55:be:31:c0:2b:c3:e1:df:48:f7:c4:ff:6d:27:81:b5:
61:e1:92:dc:d7:46:ca:fb:c6:ed:e4:01:e9:2b:cc:87:1c:3e:
39:fc:37:d3:71:0e:02:91:01:b7:01:54:19:97:42:c8:f3:a3:
2e:03:c6:7b:17:91:f7:20:a3:4a:72:8f:0a:9e:53:3f:2d:8d:
30:3d:3f:3d:36:23:b3:07:a8:ca:26:28:a6:5d:02:3e:e8:bb:
2d:77:98:a9:c2:9d:22:18:93:57:f2:15:72:64:d6:83:06:2f:
70:97:82:4b:e5:44:64:95:2b:0e:1c:70:9e:b0:23:47:d9:ba:
43:d9:e8:d3:1c:d2:41:89:0b:ae:01:3c:5b:68:b7:81:54:e9:
cb:07:28:56:a1:ae:b1:da:8a:85:7a:8f:8c:65:02:9b:96:2e:
e8:07:7d:84:6b:1c:5c:77:d9:bf:19:b2:49:0a:b9:9c:b6:94:
32:6a:d6:50:52:1b:fa:76:6c:b6:33:cb:f6:d3:d2:85:23:98:
0a:6a:99:e5:69:6e:ca:3f:f4:cc:df:84:ff:73:33:02:3d:03:
6b:61:e4:3e:2f:49:93:af:26:b8:28:6d:3a:0e:ff:d6:8c:89:
42:62:0a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org