Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Zr947TJaU8q00bOrqu17vrDJHxI.roa
File: Zr947TJaU8q00bOrqu17vrDJHxI.roa (raw, json)
Hash identifier: uqvoBBvopVzWL66Of8QR9pqdz79c/ULl/3tpKiJOKBQ=
Subject key identifier: 66:BF:78:ED:32:5A:53:CA:B4:D1:B3:AB:AA:ED:7B:BE:B0:C9:1F:12
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Zr947TJaU8q00bOrqu17vrDJHxI.roa
Signing time: Thu 15 Sep 2022 02:52:36 +0000
ROA not before: Thu 15 Sep 2022 02:52:36 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:36 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=66BF78ED325A53CAB4D1B3ABAAED7BBEB0C91F12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:04:ac:76:c5:28:51:c3:7d:1a:ae:c0:c5:08:
3b:09:8a:00:fa:3a:bd:d4:fd:e5:f5:1c:87:56:1c:
08:fa:0f:25:3f:c0:88:7f:46:40:7f:b4:4b:2f:f7:
e5:b7:e0:db:86:ce:8c:a9:ab:02:69:69:c5:a1:cd:
49:44:4d:f9:05:af:0f:9a:90:a9:59:ab:ab:cd:21:
e8:51:7c:84:30:a9:be:30:fb:16:2d:4c:d2:7a:66:
de:3c:bf:b8:5c:d3:b6:89:13:75:24:a0:25:2a:a4:
a8:7c:af:9b:37:5e:3d:2f:10:3e:26:0a:fa:7b:bd:
9a:c1:12:8f:8a:d5:bc:70:49:7a:67:cd:a3:39:10:
0c:f8:d5:13:f5:76:d1:42:1c:7a:ba:db:61:6e:9d:
7d:49:7d:b3:c6:2d:2a:a6:50:5a:91:b2:bb:4f:76:
53:0e:c4:86:0c:ae:4d:d9:8e:68:38:cf:37:69:24:
9d:98:fd:fe:3f:25:db:5f:2e:e0:ed:a7:13:95:5b:
1d:0f:6a:95:8f:49:e8:b1:c3:70:67:18:ce:58:be:
49:ee:f3:16:9b:fa:9e:c0:ce:6a:37:74:55:b6:25:
b6:a5:20:20:50:c5:29:ba:73:47:41:56:29:46:0f:
2a:a5:be:27:8a:0c:88:9c:d5:9a:06:8e:6a:4b:d1:
7c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BF:78:ED:32:5A:53:CA:B4:D1:B3:AB:AA:ED:7B:BE:B0:C9:1F:12
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Zr947TJaU8q00bOrqu17vrDJHxI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.95.0/24
Signature Algorithm: sha256WithRSAEncryption
07:8b:d5:3a:74:3a:aa:47:12:a7:de:21:5d:43:6e:5b:dd:17:
ea:e5:c1:6a:a2:47:df:77:81:94:1b:5c:75:a4:0c:28:2c:d1:
ea:95:df:03:8f:bc:94:14:54:8d:de:8d:10:e4:5a:22:a5:05:
b9:80:85:71:d1:fe:e8:47:fa:ab:cf:bb:88:b4:5d:e2:5a:30:
ed:64:7d:55:3b:a6:5b:85:12:4f:08:b3:f9:9c:db:5a:b3:06:
9e:b7:a7:fb:2c:32:ad:a7:9a:32:4b:a1:03:c3:fe:1d:56:5f:
dd:a8:db:20:2e:56:f5:04:5b:97:98:fa:50:43:c6:c1:fd:74:
1d:e2:a1:1a:f1:43:1e:f9:67:87:04:d7:ce:a9:63:59:80:d3:
5a:77:be:74:1a:f6:27:4c:e7:79:1c:11:7b:b6:ab:7a:69:7c:
b3:1c:eb:43:da:a8:73:9f:db:34:05:6d:b7:a2:fd:1e:b8:90:
e6:7b:e0:39:f8:37:09:46:f3:95:ad:78:30:71:56:8c:6a:90:
d1:6a:be:f9:17:ca:04:0b:17:18:85:2f:0f:b3:25:c4:cb:31:
f6:f9:0e:4b:72:d4:1f:88:76:e1:43:cc:ee:25:f1:fc:51:e2:
2c:80:0e:7a:eb:01:7a:78:4c:c7:82:14:fa:24:07:21:71:a1:
c7:db:8a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:34 2024 by rpki-client on console-ams.rpki-client.org