Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Vfym6nbeSrkZG-lZ9nMCvoLVGRw.roa
File: Vfym6nbeSrkZG-lZ9nMCvoLVGRw.roa (raw, json)
Hash identifier: dLDf5hwS6XduWvL6Uswu7KlWFvBMrXAq8ItmPsgvUT0=
Subject key identifier: 55:FC:A6:EA:76:DE:4A:B9:19:1B:E9:59:F6:73:02:BE:82:D5:19:1C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 21A5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Vfym6nbeSrkZG-lZ9nMCvoLVGRw.roa
Signing time: Fri 25 Nov 2022 04:40:09 +0000
ROA not before: Fri 25 Nov 2022 04:40:09 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8613 (0x21a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:09 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=55FCA6EA76DE4AB9191BE959F67302BE82D5191C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c2:11:19:2e:8b:43:1b:0c:45:cb:8e:b4:93:
2e:93:c6:58:c1:76:fc:c3:62:0a:1a:c6:5f:89:e7:
fc:3e:d5:b9:dc:2b:68:7a:a0:9a:cd:2b:a1:55:9a:
f6:66:7a:be:a7:29:c7:16:ce:83:3b:7b:b5:c5:b2:
0d:dd:fa:41:b4:5c:8d:4f:bf:33:cb:5f:ca:79:f5:
e9:92:c8:96:b6:4a:da:af:6f:d7:aa:29:e2:86:37:
67:fa:6a:08:71:d5:29:de:de:18:0f:75:3c:c4:5a:
6e:2d:53:5e:f9:5d:db:60:9c:e7:ac:fa:e4:dd:f6:
c0:f2:e1:81:5a:5e:45:9d:cf:86:10:74:a4:3e:46:
06:54:ce:8d:1f:da:90:da:46:ff:9e:ae:b1:ea:d1:
f0:2b:2e:8e:cb:3e:1f:d8:ee:44:4c:33:ea:c0:e9:
20:73:88:c4:23:31:a7:63:03:38:cc:d9:ae:96:b7:
fb:35:49:25:eb:6a:fe:9d:9c:06:e4:7b:46:d0:d5:
44:2f:98:6b:d7:29:66:21:eb:cd:b0:1b:a8:44:01:
cf:c5:e6:b8:3a:c2:d9:eb:d8:50:39:39:bb:67:c2:
11:b1:fc:a2:dc:85:b9:84:54:b7:21:ce:ed:ee:67:
d6:e5:79:3a:13:79:91:51:c4:76:29:b7:a3:09:d1:
e0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FC:A6:EA:76:DE:4A:B9:19:1B:E9:59:F6:73:02:BE:82:D5:19:1C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Vfym6nbeSrkZG-lZ9nMCvoLVGRw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.108.0/24
Signature Algorithm: sha256WithRSAEncryption
45:d5:a6:a3:21:48:5a:2e:a3:26:86:43:fa:49:8d:81:7a:2a:
4b:a7:3b:80:0e:af:c2:44:7b:a3:da:30:71:54:eb:c7:57:0e:
37:3f:78:ee:3d:c6:2d:98:3d:0b:dd:af:a0:3a:7f:e8:c8:96:
f7:83:9e:18:53:d6:7f:83:58:b0:ad:ec:3e:22:4c:dd:ce:9a:
19:fe:86:7f:dc:47:23:92:e2:b5:bd:c8:c8:65:3f:f5:95:42:
f5:bd:2d:d8:63:0e:31:5c:8c:6c:a6:5e:5a:62:d4:e8:df:e9:
fd:97:7c:32:d1:18:f2:88:d7:20:20:78:c6:60:08:8e:1e:44:
96:fd:75:9c:2d:03:2a:1c:c2:57:40:e5:01:0c:0b:a6:4a:16:
5f:0f:e3:37:f0:73:62:41:9a:2e:11:9c:f2:f0:96:53:ed:d2:
58:86:93:e1:e8:02:46:86:31:75:e4:a8:06:c8:9c:56:8b:06:
43:33:08:ef:66:ff:19:18:9b:3c:c1:22:e7:42:c9:69:7a:07:
9d:13:35:e3:52:6b:f3:d7:c4:9b:f1:df:a4:f2:4a:84:56:4d:
ce:81:0c:e5:0e:a5:e0:01:a2:6f:4f:d2:43:02:72:1f:c7:93:
b5:08:6a:d5:24:27:c4:92:31:2a:a8:a0:a3:ca:fc:12:5e:c0:
8b:85:82:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org