Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YzxQ_jiKmULCn99dig4EabhwMgY.roa
File: YzxQ_jiKmULCn99dig4EabhwMgY.roa (raw, json)
Hash identifier: LqmHgIEOwoVL9Ci4r9xqXheiC6pHgO7WlSlJwezw0Oc=
Subject key identifier: 63:3C:50:FE:38:8A:99:42:C2:9F:DF:5D:8A:0E:04:69:B8:70:32:06
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 220F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YzxQ_jiKmULCn99dig4EabhwMgY.roa
Signing time: Fri 25 Nov 2022 04:40:43 +0000
ROA not before: Fri 25 Nov 2022 04:40:43 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.160.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8719 (0x220f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:43 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=633C50FE388A9942C29FDF5D8A0E0469B8703206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:38:a7:43:83:c7:6f:27:d7:68:26:99:1a:bd:
e2:af:84:81:92:0b:0b:92:4f:97:36:bd:ae:20:df:
d8:22:ce:88:bf:28:24:ab:13:65:45:2e:36:0b:5a:
12:bd:9e:75:8d:c5:99:5d:24:c6:a5:cd:6f:f3:37:
b5:e8:a5:ed:ef:1f:15:18:98:21:bc:1d:ab:19:69:
3e:0d:6d:3c:3e:f0:1e:e0:61:0c:09:0d:1b:cc:75:
3a:b1:ed:c3:6d:32:34:63:3a:ff:6e:a1:0f:fb:d9:
08:cd:93:4a:67:f4:82:82:57:70:82:e4:a2:58:3a:
3c:76:c5:c3:b0:73:0a:37:04:f4:42:a8:00:b5:d4:
2e:83:8e:46:ba:c8:f6:2c:1c:99:f4:25:df:5b:cc:
dd:a9:19:6d:c2:7c:3b:5e:4e:f4:5c:63:54:ec:9e:
cd:95:1d:81:4c:ac:b2:92:f4:45:7e:ed:b1:f9:1b:
b1:48:93:6e:37:00:07:5e:df:4d:34:e1:4a:ce:68:
34:81:12:0a:ae:1d:20:14:fc:7b:c9:1d:57:98:d6:
d9:6e:86:f0:ac:d3:d1:3a:f6:0c:78:39:b4:21:bc:
56:6c:7a:5a:64:44:2a:ce:9e:0d:02:cf:37:33:c7:
40:03:28:e6:41:be:85:a3:0b:f1:83:c2:ee:d7:4d:
52:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3C:50:FE:38:8A:99:42:C2:9F:DF:5D:8A:0E:04:69:B8:70:32:06
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YzxQ_jiKmULCn99dig4EabhwMgY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.160.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:ad:64:6e:d8:94:66:5c:35:16:b7:46:0a:e1:74:65:05:6e:
ba:32:74:6a:d4:11:8a:ba:0f:54:39:4a:31:50:80:28:1b:be:
d3:c1:3a:32:58:a3:ef:d6:18:58:ee:3e:56:c5:4c:85:93:0f:
6b:1a:83:e3:60:d4:f2:7c:4c:ce:04:3a:b3:0a:26:88:28:21:
99:27:84:43:f5:56:b8:8e:60:dc:ef:91:00:dd:ff:b7:a1:b6:
6e:73:6e:f9:be:35:4a:7c:32:b2:0f:13:7d:1e:ba:b1:9e:6e:
4c:29:82:da:f4:54:53:a1:a1:c4:07:08:9d:9b:68:5f:50:ff:
23:dd:74:58:d9:33:9a:3f:1d:0f:67:f4:a9:b4:ea:80:23:55:
81:5c:96:44:dc:79:3c:42:df:ea:c5:6d:4f:e1:97:b9:a5:06:
5b:38:8c:b4:d4:1a:87:76:a7:25:3d:23:dc:3a:92:82:0c:24:
fd:84:e7:5e:83:f7:1b:1b:8f:00:d5:ba:7b:3e:e2:c9:66:6d:
8d:6d:22:19:c9:b5:95:18:6c:f2:06:07:b1:3d:b4:27:5d:10:
e7:c7:5f:f7:81:ef:08:c4:44:d0:db:e7:9d:33:55:e9:ad:5d:
03:4c:ce:31:41:44:5c:82:a9:8d:3a:c9:50:2a:9d:09:1a:fa:
2d:46:7c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-fra.rpki-client.org