Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WUE5Z6qQ9BqfNtbjaL7lHOgKAQ0.roa
File: WUE5Z6qQ9BqfNtbjaL7lHOgKAQ0.roa (raw, json)
Hash identifier: HCA2J6aW4ByvEQ0WOZTxH8lMQwTQh3lyr4UfmuyRjrw=
Subject key identifier: 59:41:39:67:AA:90:F4:1A:9F:36:D6:E3:68:BE:E5:1C:E8:0A:01:0D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 22A5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WUE5Z6qQ9BqfNtbjaL7lHOgKAQ0.roa
Signing time: Fri 25 Nov 2022 04:41:27 +0000
ROA not before: Fri 25 Nov 2022 04:41:27 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.80.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8869 (0x22a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:27 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=59413967AA90F41A9F36D6E368BEE51CE80A010D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:02:37:52:5c:31:ac:32:48:75:71:b9:ac:87:
1e:58:e8:28:11:ea:6d:2b:73:f2:bd:c1:eb:a5:a9:
cd:d3:0f:26:22:75:58:bc:68:03:72:05:c1:69:d8:
ee:5e:44:22:19:3e:59:35:21:53:75:1d:e9:ea:f9:
ef:06:e0:d0:d6:cc:2e:1d:21:fb:e5:b9:97:86:1a:
f1:ee:6e:52:84:3a:52:57:26:73:11:9e:18:4d:b5:
af:92:95:87:a3:9b:a7:bc:12:1a:be:36:54:80:32:
ba:3f:bc:01:14:4d:a6:ef:14:6a:e0:7d:13:6e:36:
2f:44:6e:55:79:0c:1b:98:26:ac:33:7f:4f:0f:85:
69:9c:46:45:76:60:65:7f:71:af:34:d2:ad:60:c7:
51:52:f9:ce:af:02:ab:6e:64:13:1d:36:13:95:45:
50:37:84:65:a7:59:6a:2f:ee:78:f5:0e:12:a3:0b:
d7:2f:d1:10:28:59:5e:61:49:fa:7b:c1:5f:60:61:
4c:ce:e4:0e:c1:c5:dc:13:6a:3f:7d:30:5b:d8:93:
0e:b1:a5:b4:6d:87:17:81:27:39:87:60:87:d8:63:
44:03:15:d6:0d:a1:34:ee:2c:68:bc:44:b5:5d:72:
91:4a:53:ab:54:52:97:be:d5:dd:61:b3:52:fc:85:
c4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:41:39:67:AA:90:F4:1A:9F:36:D6:E3:68:BE:E5:1C:E8:0A:01:0D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WUE5Z6qQ9BqfNtbjaL7lHOgKAQ0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.80.0/21
Signature Algorithm: sha256WithRSAEncryption
4c:9a:57:5b:65:5d:2b:3c:bc:51:24:19:c0:77:cd:0f:14:f8:
ca:cc:1a:b2:c4:a9:69:ab:af:44:6e:38:83:49:47:9a:e0:63:
16:36:cf:ab:65:4a:6e:37:22:8c:ba:02:f7:6b:39:93:d7:e2:
8e:10:08:60:05:ec:cc:72:d4:79:35:f3:f2:ab:1b:f0:32:c6:
c5:78:8c:76:7e:af:c4:71:17:4f:f7:45:bf:02:c1:2b:2a:ec:
ba:8b:77:98:0b:4d:4a:68:9d:41:cb:19:14:74:b9:0f:21:59:
e6:df:f6:3c:2f:8a:ae:2d:4e:8e:8f:2b:81:f7:9a:5b:9e:3b:
af:86:c4:a7:c6:de:2c:7e:7b:47:6c:15:f4:a3:60:ad:5f:59:
ae:89:5a:df:2f:a0:de:a2:f2:05:8a:1f:37:ab:23:38:be:8d:
2c:26:46:81:b3:83:b5:3c:8a:c5:aa:6e:a3:60:d7:f8:08:df:
a7:5e:35:92:80:29:a3:ae:c9:1f:67:fd:88:aa:4e:cd:4b:80:
c3:8c:24:71:d6:34:e0:28:4e:aa:66:b2:ad:ce:a8:95:48:99:
f6:05:e4:11:e8:23:38:09:5a:45:5d:16:6a:91:b5:61:66:12:
d4:41:be:26:62:ea:5d:12:b9:9f:f7:7e:8c:c0:18:95:ca:3d:
9a:8b:95:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-fra.rpki-client.org