Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XOt4g2lAtH0zfC9hkVS25v5hlfU.roa
File: XOt4g2lAtH0zfC9hkVS25v5hlfU.roa (raw, json)
Hash identifier: idERuBmq5xcZrDwp9CLoEw0ccePxoOO8kZhHW44gafk=
Subject key identifier: 5C:EB:78:83:69:40:B4:7D:33:7C:2F:61:91:54:B6:E6:FE:61:95:F5
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1BEC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XOt4g2lAtH0zfC9hkVS25v5hlfU.roa
Signing time: Wed 29 Sep 2021 02:47:10 +0000
ROA not before: Wed 29 Sep 2021 02:47:10 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.195.224.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7148 (0x1bec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:10 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=5CEB78836940B47D337C2F619154B6E6FE6195F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6b:6c:c2:63:e9:d3:13:06:0f:d4:d5:2b:76:
ce:0b:c2:81:70:6b:aa:2e:ad:cd:44:82:f3:6f:91:
31:a9:6a:83:9f:76:c5:6d:63:1c:e3:32:cc:4e:05:
77:bb:66:f1:ea:78:7d:98:ed:75:a7:23:28:a8:a4:
e1:0e:1a:22:f5:5a:1b:8e:32:76:28:ff:89:79:39:
50:9c:0f:eb:ba:b3:ef:d7:9c:17:10:37:9f:e4:cc:
f6:54:44:c1:e8:fc:2f:5b:52:1b:18:3d:d6:2c:b4:
2f:ed:55:e6:3c:8e:00:c9:70:4e:a8:1c:81:28:22:
a9:f0:97:e3:b9:99:24:14:5f:24:11:2d:52:be:91:
ec:4b:0e:c0:66:b8:60:bc:68:6a:cc:aa:6c:03:e2:
24:e2:a6:9a:89:42:85:e4:20:b6:ed:51:9e:60:1f:
2e:0c:c2:43:52:79:1f:18:46:53:56:dc:46:47:5a:
ea:b4:da:fa:45:16:d8:88:41:4f:cc:22:a1:ef:f5:
e1:6e:e2:ff:eb:5c:23:62:95:09:69:c5:13:f8:4d:
62:b9:db:01:f8:01:5a:34:1c:57:f2:8f:58:4a:44:
d1:90:82:0d:c9:87:bf:89:e5:66:f3:b9:48:10:7c:
d7:91:0b:b0:07:bd:2c:40:6d:58:5e:55:fb:4b:bc:
a7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EB:78:83:69:40:B4:7D:33:7C:2F:61:91:54:B6:E6:FE:61:95:F5
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XOt4g2lAtH0zfC9hkVS25v5hlfU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.224.0/22
Signature Algorithm: sha256WithRSAEncryption
62:48:da:30:69:97:ef:09:05:f4:b5:5e:09:d0:30:44:74:2d:
24:d7:2d:0d:35:1e:4f:db:8e:1f:c7:3e:a1:01:fa:00:a2:ed:
43:01:20:a6:f4:8a:52:39:b1:47:f8:2b:4a:7e:d4:9f:d1:c5:
b8:23:04:8d:ef:e8:23:e2:b9:fd:67:99:02:a9:8a:bb:eb:e2:
6d:c4:97:cb:42:b2:21:66:bf:bb:92:15:3e:46:15:b7:30:10:
e5:83:16:73:3a:ef:9c:33:b7:fe:e1:fd:99:00:c4:2d:ff:e4:
a7:6c:0c:67:1d:9a:3a:e1:f4:52:35:01:b0:f2:0e:3e:e7:ad:
71:7f:72:98:e7:2e:ee:f3:ed:f8:05:5b:bf:90:47:08:31:b1:
48:c1:5d:63:d1:fa:29:13:82:fc:98:2c:5e:b3:4f:ef:41:0d:
0c:6d:cb:a9:11:e3:fc:aa:c1:44:86:a5:19:cf:8b:82:76:ce:
b4:29:1f:28:e3:dd:b2:eb:0a:8e:20:14:ea:de:53:17:ee:6b:
5a:19:e7:63:5e:f3:7d:78:20:95:c6:69:ca:70:02:7f:6a:fc:
78:dc:b4:df:6d:ea:84:de:84:56:9a:af:f3:9b:d3:dc:08:4b:
aa:4d:18:e3:d9:84:a3:f0:62:39:a2:98:b3:ec:9a:ad:43:2a:
df:a6:f1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:33 2024 by rpki-client on console-ams.rpki-client.org