Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VZty-brrAKjTlf-PH5T7N7a1IrE.roa
File: VZty-brrAKjTlf-PH5T7N7a1IrE.roa (raw, json)
Hash identifier: oiaF/j0buP90mxVo+tbKaYIGvqzjJiWhoc9w4QtJh6Y=
Subject key identifier: 55:9B:72:F9:BA:EB:00:A8:D3:95:FF:8F:1F:94:FB:37:B6:B5:22:B1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VZty-brrAKjTlf-PH5T7N7a1IrE.roa
Signing time: Thu 15 Sep 2022 02:52:16 +0000
ROA not before: Thu 15 Sep 2022 02:52:16 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:16 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=559B72F9BAEB00A8D395FF8F1F94FB37B6B522B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7d:cc:b6:a1:79:f1:83:97:ab:bf:63:cf:44:
02:d9:38:d3:0f:6e:92:29:0e:26:be:62:6c:87:23:
98:6e:0e:a5:4f:92:40:41:3c:b6:dc:61:89:31:89:
27:eb:66:53:bf:42:bc:8c:84:fe:82:ba:ba:49:2b:
7f:c5:c4:9f:df:e6:b5:e0:1d:9e:b6:39:85:9b:d0:
8e:2c:c4:ae:10:9d:1e:ec:14:31:68:60:b0:8a:05:
c5:5d:f7:93:9c:84:96:38:f0:de:b0:29:ef:52:f6:
21:a4:ac:97:f5:48:2a:66:f7:d1:ef:9d:2d:63:4c:
8d:4b:6a:0d:29:18:2f:4c:e1:33:8c:bb:2f:82:66:
c3:1a:4b:1d:14:87:22:75:4f:cf:35:8c:8a:64:1d:
90:76:b6:75:e7:65:02:4b:54:05:79:21:36:4a:22:
04:c3:80:8a:7c:96:ff:31:05:9e:c1:04:68:ab:c2:
4c:a2:aa:de:45:5f:75:72:b7:e9:2e:10:39:18:92:
81:1c:12:c9:46:74:6e:ba:fa:41:79:eb:0e:41:c6:
86:13:6a:5c:b0:b7:1c:b9:7d:a4:58:4b:3b:0a:06:
f5:af:77:a8:b5:b1:ac:1d:9d:0a:28:f3:74:ee:3d:
42:83:f8:fc:ac:fa:1b:42:76:84:da:89:eb:52:4e:
11:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:9B:72:F9:BA:EB:00:A8:D3:95:FF:8F:1F:94:FB:37:B6:B5:22:B1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VZty-brrAKjTlf-PH5T7N7a1IrE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.183.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:48:4d:cb:94:fe:ab:1d:9d:0f:4c:76:98:2b:bb:78:14:20:
31:17:40:cc:09:12:fb:95:78:5d:3c:a2:fb:06:24:04:2c:7e:
61:2b:40:7a:76:0d:63:bb:40:bc:aa:cb:1d:1e:8a:14:d8:c4:
95:2d:55:ce:06:67:89:c7:53:f5:2c:4d:1b:4b:9d:cf:b0:74:
30:fe:01:22:43:b8:11:e9:49:9a:2e:f9:6a:fc:d6:ab:6f:f4:
20:e1:7b:36:b4:61:43:27:a9:8e:bb:cc:0a:72:55:57:41:93:
25:d0:c2:97:63:bd:f4:c1:b3:2e:c3:6c:a9:74:57:c7:d3:24:
fb:17:6d:68:a0:83:ca:97:50:5c:9a:f9:77:a5:8b:4a:9b:05:
c1:a8:42:19:91:66:c3:fc:6d:e5:94:04:95:ec:c9:51:19:f0:
39:5a:f7:27:ae:e6:18:ae:ee:89:c3:bd:ba:1e:5f:be:c2:13:
20:c1:15:98:62:51:28:d0:28:be:f9:8e:11:b3:05:28:6e:8e:
f0:c8:75:6c:7d:cd:7a:65:88:15:af:5b:ee:26:e9:53:02:31:
58:33:c7:c2:e2:fa:cf:60:23:5d:f9:48:ba:f1:86:3f:76:c0:
bb:dd:42:65:5a:df:56:15:cf:2a:62:63:8f:d2:d0:fb:1d:a1:
17:96:af:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org