Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YIKOyg99WOaFmPU9m5n-aBm9Qu0.roa
File: YIKOyg99WOaFmPU9m5n-aBm9Qu0.roa (raw, json)
Hash identifier: bzWqat5bEswqXD+nGCX/nacUOaVyPaFaPfqCWD35cVQ=
Subject key identifier: 60:82:8E:CA:0F:7D:58:E6:85:98:F5:3D:9B:99:FE:68:19:BD:42:ED
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YIKOyg99WOaFmPU9m5n-aBm9Qu0.roa
Signing time: Thu 15 Sep 2022 02:44:44 +0000
ROA not before: Thu 15 Sep 2022 02:44:44 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.148.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:44:44 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=60828ECA0F7D58E68598F53D9B99FE6819BD42ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c4:3e:91:c6:8f:a3:78:c6:af:23:5d:1a:ab:
14:98:b1:4e:e0:3b:3a:33:6b:07:de:aa:da:a1:10:
70:a5:7f:02:7d:3c:24:33:bc:5c:37:95:a6:97:9a:
b1:81:6b:dd:8a:f8:31:3c:af:7a:eb:4d:1b:f1:8b:
78:7a:e2:5b:0a:e5:56:6b:33:06:49:4e:c5:33:08:
af:02:d9:01:a5:17:15:57:78:9d:03:b4:94:9f:c7:
50:09:72:4d:55:4b:f9:d1:a5:2a:54:60:f1:c3:c4:
c0:18:30:94:8a:4d:4d:a6:11:26:a8:72:13:f6:07:
2d:58:57:d2:24:ab:c2:a4:df:b1:ea:be:96:21:a0:
b8:28:9e:8c:88:69:c1:f4:27:cb:9e:1e:40:56:55:
5a:16:ec:19:11:a7:c2:ee:81:f0:a8:e0:9a:fe:84:
f4:a2:57:77:65:b3:65:13:82:a6:96:f4:e4:52:08:
43:2f:4e:0d:d2:0e:be:ce:97:fc:dc:e3:24:d0:dd:
b0:be:4e:ee:a0:40:12:d3:cc:36:9d:92:f0:9b:7a:
26:54:28:f4:e4:7d:53:bb:8b:0c:a8:40:29:1b:31:
cf:f6:ad:3a:c9:3d:33:a0:94:73:32:18:74:9f:12:
25:83:3e:f4:85:8b:ef:80:e0:fa:65:c8:1c:56:65:
d1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:82:8E:CA:0F:7D:58:E6:85:98:F5:3D:9B:99:FE:68:19:BD:42:ED
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YIKOyg99WOaFmPU9m5n-aBm9Qu0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.148.0/22
Signature Algorithm: sha256WithRSAEncryption
73:00:f4:af:e1:be:2c:99:28:b8:2e:ac:11:89:e0:90:d7:72:
7a:5e:92:8c:34:5f:66:a7:d8:2b:13:aa:c0:f0:a9:98:9f:48:
76:76:4a:33:13:90:6f:ba:98:2c:e2:2b:84:4c:eb:b2:c1:19:
52:d5:ec:42:45:2f:d5:6d:61:cc:7b:4d:33:4a:8a:32:cf:eb:
dd:c4:1a:f4:a6:2d:99:5f:06:1e:ad:4d:cd:50:ff:4c:b9:48:
86:9d:98:02:bb:c3:bf:06:a4:39:a2:61:09:36:de:dd:0d:ed:
51:0d:d7:83:5b:a5:4a:47:6a:f0:01:97:b4:11:8f:33:b4:7e:
66:ae:a6:c8:44:76:fa:21:e9:02:11:56:31:c6:34:14:48:4e:
69:da:ff:e4:8c:af:dc:c1:59:55:c6:a0:97:85:ae:63:92:c7:
61:3f:e7:cb:04:ec:ed:33:aa:cd:1f:35:18:d3:3b:74:3f:04:
23:e8:19:7f:c7:20:ce:05:58:31:04:29:88:f7:bf:ff:39:57:
5c:bd:be:c2:55:ac:fe:2c:d5:8a:08:c3:d3:29:e6:80:f2:3d:
e1:7e:2b:59:40:90:7d:68:87:c4:ce:af:3d:6e:99:51:fc:de:
85:16:f5:3c:32:22:12:b8:da:02:1e:4e:d3:0f:cf:44:e5:f5:
8a:bb:40:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:33 2024 by rpki-client on console-ams.rpki-client.org