Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XCNKndCL1jAWgxrpUFwzC3D6Des.roa
File: XCNKndCL1jAWgxrpUFwzC3D6Des.roa (raw, json)
Hash identifier: W3mC9y+ENR/bREPdeYaup0t9rXr0I69/KF31YlHA3vE=
Subject key identifier: 5C:23:4A:9D:D0:8B:D6:30:16:83:1A:E9:50:5C:33:0B:70:FA:0D:EB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XCNKndCL1jAWgxrpUFwzC3D6Des.roa
Signing time: Thu 15 Sep 2022 02:46:21 +0000
ROA not before: Thu 15 Sep 2022 02:46:21 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.8.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:21 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5C234A9DD08BD63016831AE9505C330B70FA0DEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:01:19:84:a0:97:4e:81:32:7f:a1:45:27:21:
cb:af:29:3a:69:06:ff:40:73:36:18:c5:8f:8a:70:
92:f5:ae:8d:52:97:6f:b1:a2:70:27:7e:64:09:f2:
13:4a:20:15:b0:97:62:12:2b:e2:e1:e3:6b:8b:79:
b0:ee:b7:72:ea:89:42:6f:6b:ba:24:6e:7c:7c:e7:
2b:61:97:4f:68:47:54:e6:d9:30:32:13:58:3d:c3:
6e:b3:65:ef:83:c1:26:a9:b0:74:9f:5c:3b:92:a8:
1e:ce:6b:51:23:6e:e9:ff:98:b4:41:e1:81:68:bd:
f1:ec:f9:db:cd:94:c8:9f:3b:cc:d4:c1:8c:17:65:
56:8b:e1:ba:60:6b:4d:12:43:57:c5:2f:9f:22:52:
e2:c6:7a:5e:94:c3:13:24:ac:66:c5:8d:a4:87:99:
cb:b8:b4:49:d5:81:85:ab:a0:d6:21:19:51:57:45:
88:05:71:25:89:59:6b:31:8e:40:ff:f3:04:68:49:
59:bf:2b:72:f1:cd:ff:fa:92:15:5e:8b:6d:25:54:
09:27:1b:49:12:9f:5e:bc:3b:80:dc:98:52:a6:c0:
87:9c:3b:f8:26:67:76:9c:cf:fa:f7:9c:e9:a7:69:
c2:00:b9:be:24:30:0e:a0:03:5c:8d:af:a5:5e:85:
dc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:23:4A:9D:D0:8B:D6:30:16:83:1A:E9:50:5C:33:0B:70:FA:0D:EB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XCNKndCL1jAWgxrpUFwzC3D6Des.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.8.0/22
Signature Algorithm: sha256WithRSAEncryption
60:dc:3b:a7:e3:99:15:5e:c4:8a:c7:ad:60:30:74:a3:6f:2a:
f3:7d:44:96:56:69:18:a6:c0:2e:6c:35:9e:8a:46:cf:24:99:
b0:36:8d:25:35:b5:4e:0a:7a:a5:9d:3f:8b:76:8f:e6:d2:fc:
29:5e:80:ef:e2:b6:fd:b1:4c:3e:83:0b:40:26:ff:d7:e0:da:
2e:70:28:50:1b:c6:32:c8:aa:73:f3:52:c0:7e:0b:85:63:b1:
67:ac:cf:0f:e3:56:10:26:54:3f:0b:3a:e6:fd:a9:81:3d:9b:
a7:dc:75:68:68:2a:21:f8:c0:c7:65:8f:e3:ac:2d:ad:73:2c:
72:3a:fa:7f:f0:68:6f:1b:1f:78:e1:13:df:aa:10:be:11:61:
1f:23:f9:59:42:3e:ad:69:4a:dd:03:16:c6:5f:61:fe:40:be:
ae:39:d9:35:17:e2:33:1c:f3:d0:66:56:8d:2c:fe:bc:9c:17:
c0:1a:12:27:bc:1a:21:11:be:ee:24:24:a1:93:e3:ca:4c:8d:
4c:0c:93:46:c6:fa:a4:7c:ab:42:04:95:48:fe:22:d8:95:cb:
e2:86:c8:5d:6e:83:17:9b:1b:df:c1:d0:21:4e:cb:f8:91:c5:
a3:4e:3b:3a:8d:df:7e:e4:d2:3f:a0:89:b9:46:42:ee:16:27:
06:99:73:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:33 2024 by rpki-client on console-ams.rpki-client.org