Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Xvx8el-7ojgbI0v7pzz1C6TwUKk.roa
File: Xvx8el-7ojgbI0v7pzz1C6TwUKk.roa (raw, json)
Hash identifier: uKow9XR4sW6jwDxSpaaRu8/FahC1uf7nzpoHk6Izxxw=
Subject key identifier: 5E:FC:7C:7A:5F:BB:A2:38:1B:23:4B:FB:A7:3C:F5:0B:A4:F0:50:A9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Xvx8el-7ojgbI0v7pzz1C6TwUKk.roa
Signing time: Thu 15 Sep 2022 02:46:11 +0000
ROA not before: Thu 15 Sep 2022 02:46:11 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 123.193.64.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:11 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5EFC7C7A5FBBA2381B234BFBA73CF50BA4F050A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7b:5c:bb:8b:6b:1d:e7:12:4b:6d:8a:47:46:
94:7a:1d:18:2d:e5:c3:20:06:a5:fc:75:fc:7b:2b:
84:25:4b:63:58:a1:b1:b6:aa:7d:a0:0f:22:c9:26:
85:6e:fc:f1:2a:70:37:92:44:5e:2c:d0:6c:59:f9:
61:f0:90:83:e6:c8:66:00:0d:76:52:31:21:68:11:
91:04:32:c0:7f:72:02:9b:9d:aa:ce:31:10:8c:32:
67:ec:95:0e:42:bb:25:f2:c0:fe:81:57:ce:8d:e7:
59:08:a6:11:76:d3:67:fa:8a:2c:35:90:16:22:c5:
ae:4a:88:c1:b2:5f:a8:3c:1f:4e:fb:71:7d:3b:76:
a8:fb:6f:08:b0:9f:3a:4b:2b:1f:4c:c1:c2:48:80:
ed:26:d1:08:99:ec:de:7d:f4:a9:77:aa:f2:32:c1:
7f:8e:60:79:19:69:94:7f:f0:56:37:fd:e4:97:04:
7f:31:d5:ed:87:f5:43:18:26:e2:0f:11:25:c8:86:
e7:8c:67:0a:e8:e0:3a:a3:2b:23:49:aa:40:4a:e8:
5b:e9:61:e8:8d:99:dc:85:bd:68:a3:f6:77:1b:9a:
12:18:03:2f:82:d2:b1:ee:4e:77:db:3e:f6:29:0f:
fe:53:0a:0a:61:50:29:8e:fd:e3:25:72:34:09:87:
82:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:FC:7C:7A:5F:BB:A2:38:1B:23:4B:FB:A7:3C:F5:0B:A4:F0:50:A9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Xvx8el-7ojgbI0v7pzz1C6TwUKk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.64.0/20
Signature Algorithm: sha256WithRSAEncryption
b8:c8:fb:4f:b2:3c:d9:ea:d4:45:d5:20:b0:96:22:f3:6e:e7:
c3:30:2e:37:d5:f8:f7:32:14:9e:43:73:b5:e1:85:d5:c1:59:
7b:6f:65:fc:64:f9:96:49:3d:34:c3:0d:ff:b6:23:0e:6c:d4:
16:08:37:b5:d3:30:3e:bb:e2:c9:98:c8:75:39:1a:a4:d3:9f:
e6:41:eb:17:0b:ba:dc:87:a0:f6:ae:74:6d:d2:86:e5:9a:a1:
32:2a:f7:4a:47:25:b1:1c:01:0a:c0:dc:4b:a7:67:73:93:57:
02:84:3e:c8:31:23:2a:79:16:7c:bb:a0:31:7b:22:2b:76:b4:
72:d8:cc:db:cb:36:64:81:13:3b:1b:7e:da:8c:3f:61:a4:bf:
aa:8b:91:1c:9b:28:28:19:e1:0f:b3:ad:f2:42:ae:14:50:52:
fe:dc:b0:f7:16:1f:c9:71:89:5a:ae:b2:88:2c:56:28:fd:3b:
c0:c7:50:b3:c4:64:a2:d6:a0:46:a6:50:17:ef:43:2a:e7:de:
c9:fb:28:8d:8a:b5:6a:c0:28:52:37:a7:d4:12:11:31:be:cb:
76:7f:39:ef:91:dc:ca:ed:43:b8:f4:13:11:54:1f:a2:3f:f2:
9b:53:2c:8c:a7:b7:37:c8:ff:a9:9e:41:b9:44:a8:db:f9:3f:
31:36:bb:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:33 2024 by rpki-client on console-ams.rpki-client.org