Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VmcLU3VMj76gTwMEWFk49QGmCIE.roa
File: VmcLU3VMj76gTwMEWFk49QGmCIE.roa (raw, json)
Hash identifier: x8+Kca+yP+6a5btPiXTTqxb+JkA7/lk+Sp4qKafHupM=
Subject key identifier: 56:67:0B:53:75:4C:8F:BE:A0:4F:03:04:58:59:38:F5:01:A6:08:81
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VmcLU3VMj76gTwMEWFk49QGmCIE.roa
Signing time: Thu 15 Sep 2022 02:44:56 +0000
ROA not before: Thu 15 Sep 2022 02:44:56 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.72.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:44:56 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=56670B53754C8FBEA04F0304585938F501A60881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:69:0d:53:ab:cc:c4:46:6f:06:b4:2c:ad:34:
09:e8:69:9c:db:5b:c2:1e:0b:eb:83:d4:78:03:b2:
54:88:7d:1e:03:2e:c4:f5:d3:9f:42:28:ea:1d:e8:
4e:bc:32:81:4a:e1:31:2e:cc:b5:94:66:b2:52:cf:
15:31:41:36:2e:bf:85:61:ae:f6:24:fd:1f:09:05:
29:1e:bf:09:d0:56:36:25:5e:f6:63:b7:a4:b6:79:
06:c0:24:0d:56:41:1c:5b:35:46:56:bd:7d:35:e7:
4f:82:e6:a8:d7:b9:5e:4e:32:c8:28:35:bf:7f:15:
3b:68:99:f6:f6:7f:de:14:4d:73:23:69:77:27:df:
10:e8:8b:04:8a:0a:b4:f1:bf:27:26:26:e1:5f:32:
2b:aa:38:80:e0:df:8a:21:ad:0a:e5:1d:58:f1:a9:
bb:48:82:72:d6:32:23:90:dc:ea:37:ab:c2:bf:43:
80:d4:9b:29:31:6a:4e:18:3b:45:c1:47:d1:e9:ba:
c6:a0:f6:7e:6d:94:9d:3f:c6:3b:ca:d8:b5:f2:3d:
12:e7:da:76:78:2c:20:62:20:79:05:38:68:4b:df:
e0:b0:d6:04:2b:a0:09:88:1b:5b:3a:70:14:48:31:
48:83:b0:3f:27:f5:ff:fe:bd:0f:25:12:d2:ac:54:
49:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:67:0B:53:75:4C:8F:BE:A0:4F:03:04:58:59:38:F5:01:A6:08:81
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VmcLU3VMj76gTwMEWFk49QGmCIE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.72.0/21
Signature Algorithm: sha256WithRSAEncryption
10:41:0e:f7:ce:cb:c9:a5:52:a4:bc:90:3d:26:58:73:bc:e0:
62:3d:d7:ae:67:1f:5c:fd:2b:dc:5d:ad:30:58:d5:45:1d:0a:
7e:57:5a:f4:e0:7a:43:bd:2f:88:ec:4a:b2:3f:63:6e:8b:85:
68:e1:c2:d1:0b:f5:9f:d7:e2:44:38:db:c3:e5:8c:bc:74:9b:
21:81:bc:3c:db:a0:02:e4:9a:26:e6:57:d5:fe:45:88:c1:b7:
0f:f6:ec:d5:ad:c6:f0:95:9f:bd:c1:3a:24:ea:5e:0a:ec:f4:
78:d3:8f:37:09:4a:59:63:72:ef:b8:e4:7e:e1:68:30:f4:a9:
79:0f:d1:0c:70:3c:4e:21:90:6e:a5:2c:46:2d:6e:63:e6:35:
6d:d1:34:f5:c2:0c:93:f3:23:ec:32:d8:b7:96:80:f8:ce:e1:
ef:4e:ee:6e:b2:a3:ee:a8:0b:43:11:c6:40:65:d1:dd:47:0e:
95:e2:11:a6:32:9b:94:a3:98:fe:95:54:22:e4:c2:e2:cd:d7:
dc:d5:f2:44:bc:13:bc:8f:e0:63:44:de:15:53:ce:ed:73:8a:
a0:b4:c0:71:f1:8d:28:e2:2e:a3:a2:d9:db:4c:b4:38:74:a7:
0e:72:54:2f:e0:19:0d:a9:fb:9a:bb:70:65:31:20:f6:28:9b:
df:8c:aa:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:33 2024 by rpki-client on console-ams.rpki-client.org