Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZzGvoARhFuxeMJtLTYMXsdjFsYA.roa
File: ZzGvoARhFuxeMJtLTYMXsdjFsYA.roa (raw, json)
Hash identifier: XUuO4Ls3VU7LWyEaKbtIA23c3MkOL9OPP3for2WfBQ8=
Subject key identifier: 67:31:AF:A0:04:61:16:EC:5E:30:9B:4B:4D:83:17:B1:D8:C5:B1:80
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1CD9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZzGvoARhFuxeMJtLTYMXsdjFsYA.roa
Signing time: Wed 29 Sep 2021 02:48:18 +0000
ROA not before: Wed 29 Sep 2021 02:48:18 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.193.132.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7385 (0x1cd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:18 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=6731AFA0046116EC5E309B4B4D8317B1D8C5B180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0b:fc:3c:7c:81:7b:d5:96:2c:9f:f6:f4:98:
a4:39:c8:74:a8:21:9c:ac:61:e4:39:0d:f6:c9:dd:
6d:2c:e4:9f:30:72:07:19:92:3a:61:16:c4:dc:9c:
2e:87:ff:ec:5e:65:a5:cf:ef:4e:47:f2:15:65:43:
36:9c:6c:29:ea:63:62:63:d4:85:eb:16:82:df:2d:
9d:58:45:ce:e8:da:26:1b:06:de:45:68:18:0d:f0:
da:2d:11:9c:43:c6:42:f1:f2:00:89:2b:61:41:ce:
43:85:f1:88:88:8f:69:84:ae:75:6f:98:1b:20:9c:
ae:35:0d:18:7e:50:c5:50:08:be:80:7e:be:9c:e8:
60:85:de:4a:ea:dc:58:40:82:a8:b0:f7:5a:84:1c:
08:bf:3f:14:ad:99:2b:f8:df:41:06:3c:b8:91:77:
99:e9:0d:e5:69:23:b3:8f:ad:8f:ab:54:de:21:9f:
4d:e9:05:ab:e3:1d:f8:66:65:d9:03:79:1f:2f:44:
e7:cb:66:76:ca:3e:49:d4:e5:c4:f3:b6:80:dc:6a:
54:f1:7b:33:83:61:9e:5a:0b:c4:a5:bf:0c:24:48:
e9:12:13:66:a3:67:28:83:e2:0f:ef:f4:04:ed:17:
67:60:d0:63:d5:a8:1b:9f:86:34:91:bd:b3:55:2e:
29:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:31:AF:A0:04:61:16:EC:5E:30:9B:4B:4D:83:17:B1:D8:C5:B1:80
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZzGvoARhFuxeMJtLTYMXsdjFsYA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.132.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:96:38:bb:f6:95:a8:5b:be:2b:dc:06:78:55:00:bc:46:59:
cc:9e:81:df:a4:b9:f2:b4:bd:30:07:ba:a8:69:97:61:27:81:
a2:ff:63:93:6a:d0:33:df:3f:d0:2e:41:26:eb:20:1e:1f:80:
db:e8:f4:0b:ef:3a:40:4c:af:28:e0:7c:93:27:a4:71:ac:35:
95:d9:17:3c:0a:e0:59:29:e9:26:e3:35:d5:ac:f2:2d:9c:c3:
ea:24:17:da:2a:34:01:b4:d0:4c:dd:33:91:2f:b5:c2:6a:a9:
e3:dd:6e:65:f8:56:aa:8d:08:39:ae:d0:f4:b5:22:a2:34:37:
cb:80:0d:94:27:5a:b1:74:e4:b2:7b:57:7b:e7:f1:a0:aa:35:
cb:13:55:e1:33:13:0d:7a:fe:a3:d3:64:6c:71:36:df:b7:5f:
05:20:e4:4d:ab:2c:d0:11:7c:3e:39:43:a9:a2:48:b1:46:ba:
ba:e7:8b:60:4b:e4:7c:4c:6a:a6:47:56:cf:15:99:30:3e:f8:
16:b9:b7:c3:2b:ba:87:d7:dd:a6:83:9e:71:d2:8a:26:a9:e9:
76:31:9c:62:14:2e:83:ba:34:c1:52:59:5a:3e:5a:07:28:3d:
28:e6:a2:f5:95:30:40:b7:aa:21:8b:29:8e:ce:85:77:8a:fa:
e5:5d:df:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:34 2024 by rpki-client on console-ams.rpki-client.org