Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/W08psLO6EzlmltUytBbmS1mAcIM.roa
File: W08psLO6EzlmltUytBbmS1mAcIM.roa (raw, json)
Hash identifier: /u64UFudFZ3UhalgU4JovShzxFlCpPrwtn/00UOVmSY=
Subject key identifier: 5B:4F:29:B0:B3:BA:13:39:66:96:D5:32:B4:16:E6:4B:59:80:70:83
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FC5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/W08psLO6EzlmltUytBbmS1mAcIM.roa
Signing time: Tue 11 Oct 2022 14:12:23 +0000
ROA not before: Tue 11 Oct 2022 14:12:23 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.196.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8133 (0x1fc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Oct 11 14:12:23 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5B4F29B0B3BA13396696D532B416E64B59807083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:66:e7:a9:02:fb:fd:36:d3:e8:4d:47:18:cc:
63:33:76:a3:76:69:40:7d:85:37:64:42:57:fb:3b:
68:0f:cf:47:0d:cb:ae:81:1e:bd:74:69:5c:de:d4:
d2:6f:5f:38:09:3b:a9:8f:63:af:9b:d4:06:b1:3e:
31:6b:ef:a2:23:99:cb:de:38:79:50:25:6a:8f:1e:
98:40:46:f5:c6:e0:19:86:59:9d:75:d2:e4:2b:43:
d0:b9:21:51:44:7e:34:dc:b5:3d:8c:dd:41:9d:35:
2c:04:2e:42:2a:25:68:42:d6:40:9b:c2:80:e7:d2:
50:07:6f:8b:97:60:27:8e:98:af:c2:03:ae:97:e6:
ec:70:2b:03:80:21:d4:2e:b1:0d:b8:64:ac:c9:ea:
6b:6b:87:d2:3a:39:8e:a4:2f:9b:a1:de:13:76:3a:
25:5f:e9:5a:2a:c7:2e:f7:d7:3b:ab:bf:07:63:fe:
12:98:79:17:e7:0c:ca:89:19:ce:3b:ed:c4:b6:5a:
7f:b5:89:7b:01:0a:d7:30:44:b9:bf:45:87:67:6a:
9d:0e:a6:39:ee:d5:bb:0e:89:eb:16:27:6a:e1:ce:
ef:fc:e2:ca:ff:60:24:2b:9e:1a:88:85:fd:27:e1:
0c:ba:78:f5:2a:76:5f:95:e1:f1:e0:c5:99:b1:19:
5d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4F:29:B0:B3:BA:13:39:66:96:D5:32:B4:16:E6:4B:59:80:70:83
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/W08psLO6EzlmltUytBbmS1mAcIM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.196.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:56:5c:96:b4:f3:4d:14:a1:17:58:d4:d3:f0:b8:71:2a:d1:
dd:bd:34:7f:44:a7:5a:f2:7b:fb:dc:e9:42:14:90:84:52:f0:
3e:9a:96:e6:17:24:bd:b7:a5:3c:f7:ce:15:82:e5:08:b1:e4:
d0:98:d5:35:71:6a:82:99:9b:cf:cc:d6:10:c8:fc:99:15:2e:
75:58:66:03:23:4d:21:9f:fa:53:4c:0a:08:3c:fd:a0:bf:ba:
cb:18:d7:c0:89:22:2c:c7:12:1e:06:e8:c8:0d:ed:36:8f:f1:
d5:3c:56:b6:95:ec:2e:84:68:66:98:4f:99:d6:bc:7a:a2:46:
c1:8a:6d:89:56:32:19:4f:b4:50:8d:a9:49:36:2c:fd:34:f2:
3c:5f:f9:f4:e5:22:97:54:ae:49:93:8e:29:67:5c:f1:be:88:
3d:c3:be:fb:f0:b1:1f:85:c7:eb:e9:2d:e6:1e:9a:82:c2:04:
68:f9:5f:17:fb:7d:55:30:cc:bc:c1:b1:92:65:22:54:ae:b1:
06:15:6a:c0:99:f5:f9:81:46:ca:03:1f:be:2f:49:6b:36:de:
4c:8b:69:e3:0a:44:10:95:da:db:59:30:2a:ce:0f:1d:4f:f5:
9e:4c:13:0f:b8:16:cd:ef:27:df:02:84:91:69:7e:5b:1e:bf:
ef:a5:97:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:33 2024 by rpki-client on console-ams.rpki-client.org