Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZqCHD20YEVPiOUlHqkuvJaLFPEw.roa
File: ZqCHD20YEVPiOUlHqkuvJaLFPEw.roa (raw, json)
Hash identifier: Hz59igtamLtvoITmWQiOI/pdDHgjLJt5MuJB1a9exLw=
Subject key identifier: 66:A0:87:0F:6D:18:11:53:E2:39:49:47:AA:4B:AF:25:A2:C5:3C:4C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2243
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZqCHD20YEVPiOUlHqkuvJaLFPEw.roa
Signing time: Fri 25 Nov 2022 04:40:58 +0000
ROA not before: Fri 25 Nov 2022 04:40:58 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 123.195.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8771 (0x2243)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:58 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=66A0870F6D181153E2394947AA4BAF25A2C53C4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6e:82:99:39:98:a2:62:bc:a8:a7:6c:d1:43:
bd:8a:ff:5f:e5:a8:6a:de:7a:09:3d:fa:b0:ab:92:
9a:82:18:fc:30:2f:49:2f:bc:a7:3d:85:7b:e4:ee:
7d:9d:fb:4a:18:4a:7e:ff:db:9c:76:35:4f:23:f3:
68:8a:f0:bc:5b:48:cf:0e:91:b6:c9:40:6c:83:c1:
a4:2c:b2:ee:85:d2:a4:73:3e:be:82:08:1a:39:62:
30:9e:d2:44:dd:86:9b:ed:c8:95:e2:92:4a:02:cd:
34:19:63:6e:8b:c2:b0:02:e0:b4:5e:fc:e7:4a:00:
6c:11:36:e8:fc:35:c0:dd:a1:07:21:97:b1:c5:dc:
30:78:69:da:e5:40:16:cc:0b:30:f7:6e:62:8f:13:
28:f7:a6:08:67:c0:dd:ba:50:1f:e2:d7:3c:d0:83:
a2:9f:01:2b:61:98:c8:5e:4c:0f:af:8d:c8:d9:fe:
36:ac:c9:17:5f:90:92:ae:6c:d1:91:7e:e0:e4:55:
1a:2e:70:1f:c0:ae:6a:d6:6a:cc:74:52:11:4d:d7:
e7:53:e9:f9:2c:e7:77:96:a5:3a:81:a2:88:d2:d0:
d9:e0:b6:c4:de:4a:63:e4:dd:0f:7d:a4:18:3a:64:
cf:e5:1d:3f:e6:82:5e:ac:1b:cf:84:b9:92:c2:ec:
85:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A0:87:0F:6D:18:11:53:E2:39:49:47:AA:4B:AF:25:A2:C5:3C:4C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZqCHD20YEVPiOUlHqkuvJaLFPEw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.208.0/20
Signature Algorithm: sha256WithRSAEncryption
84:be:40:56:e3:65:2e:05:73:ba:75:c4:1a:31:73:3e:ad:d5:
4f:43:ff:e1:2b:bb:79:74:fb:84:b8:0c:d4:de:c8:ed:d0:97:
08:f5:14:10:b3:a8:24:ce:4b:8b:88:45:a2:ee:bf:8e:ce:92:
d6:b2:fd:e8:a4:1a:a7:bd:67:f5:c0:db:2f:ab:2f:07:a0:26:
81:96:c9:a7:b5:0c:64:4d:68:3c:21:78:ba:ff:1f:36:d3:00:
90:5c:3b:05:b7:54:f8:1f:a2:b1:be:e2:51:6c:92:23:d6:4e:
b2:b8:ac:30:7f:43:43:f2:17:d9:e2:5f:99:67:a5:0c:b7:0a:
3a:42:b8:4e:65:3f:75:3b:7f:36:24:92:bc:3b:16:61:4d:a7:
24:dd:45:e5:9d:b1:fc:69:2e:b1:d0:f6:b9:d7:43:09:67:9d:
a1:16:6c:9a:db:c7:d5:8d:4d:4a:f2:51:75:be:23:51:3e:88:
cb:f2:5e:14:d9:12:32:c6:76:b3:09:8c:46:d8:4a:f8:63:79:
24:f7:da:b1:95:e0:76:7c:e9:1c:cc:db:39:8b:52:3d:35:f9:
17:f0:6d:2f:ca:19:f0:43:c5:de:3a:95:ce:43:3d:f3:52:95:
32:a7:46:7c:e9:aa:ad:df:13:ef:d9:97:eb:9f:f2:3f:fe:54:
4f:af:c7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:34 2024 by rpki-client on console-ams.rpki-client.org