Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Vd8qI2BxZRJljgtVAmuagFOQVBg.roa
File: Vd8qI2BxZRJljgtVAmuagFOQVBg.roa (raw, json)
Hash identifier: V0+0Ldp3EL0jgbhKaZsujuQsxQpUbyZCJYE1C4GJRqY=
Subject key identifier: 55:DF:2A:23:60:71:65:12:65:8E:0B:55:02:6B:9A:80:53:90:54:18
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Vd8qI2BxZRJljgtVAmuagFOQVBg.roa
Signing time: Thu 15 Sep 2022 02:45:42 +0000
ROA not before: Thu 15 Sep 2022 02:45:42 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.104.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:42 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=55DF2A2360716512658E0B55026B9A8053905418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e0:8c:cc:28:52:f5:b4:2d:ab:05:3e:89:ea:
55:ab:3e:45:81:94:32:08:ab:c8:47:2b:21:87:08:
f5:58:03:32:f5:41:f0:d5:00:0b:ca:9a:50:ed:4c:
8a:c8:29:11:c0:4a:45:55:46:a7:5b:f9:9c:33:1a:
43:61:9e:a6:4b:bf:8c:41:a6:d1:ac:a8:54:09:54:
5c:72:20:e4:cd:3b:5c:e7:3f:3b:68:0d:e9:43:b8:
9d:53:44:6f:bd:ad:5e:43:80:fd:f8:6b:1e:90:bf:
c0:58:3b:5b:d1:db:11:c2:32:40:71:c6:0a:62:1b:
14:da:61:9a:9d:d6:42:2a:81:ea:9f:26:0a:36:c5:
e9:db:ee:ea:d7:4b:55:4f:21:44:e2:10:b2:74:0d:
60:f5:d2:9b:05:ee:fe:b4:6c:bb:cf:07:9a:26:4e:
a8:5a:a8:37:d4:dc:d5:eb:bc:e9:5b:13:42:a1:f5:
c1:63:76:64:fb:df:b1:84:25:2e:db:0a:29:26:9e:
ee:e5:38:ae:db:47:77:af:7c:4f:81:3c:b4:b3:7f:
33:71:b2:4d:84:ca:87:e6:cc:09:fe:92:4b:80:34:
d4:7f:c0:98:69:7e:8f:1f:51:4b:0e:58:cb:66:f3:
e0:25:98:14:aa:b8:18:6c:3f:3b:df:32:08:fc:cc:
a0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:DF:2A:23:60:71:65:12:65:8E:0B:55:02:6B:9A:80:53:90:54:18
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Vd8qI2BxZRJljgtVAmuagFOQVBg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.104.0/22
Signature Algorithm: sha256WithRSAEncryption
97:76:66:c0:38:72:2b:2d:f6:55:70:9d:73:2b:de:32:27:3d:
03:5d:2a:42:c0:72:51:52:86:5e:3e:1e:8b:f1:75:3c:13:16:
52:ee:24:83:b9:c2:0b:ea:67:2a:8a:b3:2c:d0:81:da:e6:c6:
c1:15:a1:ef:18:b7:da:0a:38:ba:bc:73:d3:8e:35:e4:15:90:
68:f1:3b:cf:7b:74:2e:aa:62:78:38:e3:df:3a:0d:31:1c:65:
fb:bb:5d:4a:7d:3f:2e:c6:15:9b:54:c7:0d:42:89:34:31:03:
a0:26:15:bd:21:42:09:5e:0d:2f:58:9b:f3:24:05:94:93:fd:
a1:9d:66:c1:65:9e:c5:ba:e1:21:df:d0:57:38:a9:b0:07:1e:
51:9e:02:19:7c:a8:ba:a7:7f:6f:6f:04:a1:19:e8:22:e0:0a:
23:8c:77:ea:d4:de:03:d7:8b:b5:ef:66:7e:55:82:28:de:e2:
53:f0:e2:3a:f9:cb:c3:74:0d:a0:08:f0:74:47:a4:76:77:b0:
3c:6a:79:37:f6:32:18:e0:26:25:a3:42:35:27:3c:74:fc:62:
25:54:a7:21:ea:e8:dc:72:68:95:48:b5:e4:8b:d8:f3:d6:d1:
e1:73:2e:aa:89:1e:bf:23:3e:86:df:01:78:2b:cc:47:bb:56:
d4:f7:c0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org