Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Wh1lQMts-O2gRTUb9ih0DtYQks8.roa
File: Wh1lQMts-O2gRTUb9ih0DtYQks8.roa (raw, json)
Hash identifier: 7DRiZNfBfHEwAGLhgPVkkhuSsx4BDM2E4hjxEAOoM5Q=
Subject key identifier: 5A:1D:65:40:CB:6C:F8:ED:A0:45:35:1B:F6:28:74:0E:D6:10:92:CF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Wh1lQMts-O2gRTUb9ih0DtYQks8.roa
Signing time: Thu 15 Sep 2022 02:45:30 +0000
ROA not before: Thu 15 Sep 2022 02:45:30 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.208.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:30 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5A1D6540CB6CF8EDA045351BF628740ED61092CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:be:c7:2f:6b:6b:7c:e2:7d:11:20:97:72:96:
31:05:60:40:94:d2:64:f1:94:69:b7:e8:6f:dd:55:
4e:93:bb:75:06:e7:ed:f9:9b:a9:2c:6e:39:a1:ef:
0d:aa:7b:ce:30:04:55:6b:6e:a1:fd:f5:b7:78:7e:
39:c4:8f:21:ed:45:f6:b0:ed:64:ee:6a:c9:1d:ae:
bf:8e:3a:2e:53:05:91:6a:ee:40:9e:a8:37:7e:4d:
19:b1:c1:cb:48:86:12:6e:2d:ba:79:02:ef:48:d0:
4a:43:54:ea:0e:48:6e:67:e8:f5:66:be:64:07:fc:
97:fe:0f:eb:6e:82:a1:74:70:93:af:0d:6e:ff:dc:
79:04:b7:4c:ab:fc:fe:4e:16:0a:01:d0:7a:ae:1f:
e1:78:f5:d3:4f:61:3a:e9:10:4f:bb:18:e2:eb:8c:
5f:58:27:d8:b1:cd:00:3d:9c:88:6d:b1:68:0d:08:
e2:a5:2a:cc:4b:dd:57:5a:d0:ae:2c:41:3f:d3:6b:
68:03:c4:17:45:97:36:55:6e:c8:a3:e0:14:96:df:
1d:b5:98:3e:d9:07:12:64:bc:2e:7d:fb:f1:c6:8a:
aa:12:68:bd:eb:1c:31:71:b0:cd:56:d7:42:0d:3b:
78:5c:8d:72:8b:08:16:e3:d4:5a:9b:2f:e3:6f:4a:
c4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1D:65:40:CB:6C:F8:ED:A0:45:35:1B:F6:28:74:0E:D6:10:92:CF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Wh1lQMts-O2gRTUb9ih0DtYQks8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.208.0/22
Signature Algorithm: sha256WithRSAEncryption
73:76:6e:5b:30:37:60:5d:ab:5c:a8:17:38:9e:ed:1a:ff:2a:
18:0e:7e:fb:e2:9f:4e:41:70:fe:cf:4a:ae:45:b7:4d:1b:7b:
6b:5d:58:fd:94:16:f1:78:1b:78:8e:c4:d1:4c:5d:01:55:e1:
b0:52:49:8d:f6:be:89:15:b2:78:dd:2e:bd:ff:82:8c:5e:1e:
9a:18:69:28:df:cf:e8:17:6f:be:4e:4c:4e:28:1f:28:55:fb:
e6:d6:b3:1c:b1:05:5b:c6:6d:00:c6:c5:1d:8b:d6:51:09:7d:
e6:76:ea:45:92:93:e5:1c:63:00:70:93:2d:ab:3e:44:75:ba:
38:ef:cd:bc:54:c0:68:7a:dc:4a:87:c7:43:ff:02:1c:b4:2b:
65:53:64:8b:33:15:62:fd:30:3b:69:11:a0:3d:38:92:11:65:
c2:39:53:60:69:6a:3f:7b:61:d2:48:44:16:fc:5a:8c:04:59:
8a:3a:0e:8c:55:f3:01:06:ef:dd:8e:72:9b:f8:b4:d6:b7:af:
85:c6:39:4c:4d:58:64:75:3a:2e:e3:6b:57:1c:9d:bd:17:8a:
e0:e3:c1:06:56:41:80:c3:d9:0d:68:22:5d:f0:60:e4:45:85:
be:84:95:47:13:38:3c:47:97:a2:b5:58:23:c2:47:d0:66:a5:
51:9a:cc:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-fra.rpki-client.org