Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_9Nl5xDAblWjGEvA9QroGfEn2e4.roa
File: _9Nl5xDAblWjGEvA9QroGfEn2e4.roa (raw, json)
Hash identifier: VmYQnXjEuTQsVcSCBZyn3ByUBMsaRhKYyUj9rH0Zjxo=
Subject key identifier: FF:D3:65:E7:10:C0:6E:55:A3:18:4B:C0:F5:0A:E8:19:F1:27:D9:EE
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_9Nl5xDAblWjGEvA9QroGfEn2e4.roa
Signing time: Thu 15 Sep 2022 02:45:02 +0000
ROA not before: Thu 15 Sep 2022 02:45:02 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 123.195.192.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:02 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FFD365E710C06E55A3184BC0F50AE819F127D9EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:18:ef:68:7d:37:67:af:17:78:0d:d9:f0:10:
f9:6e:ee:4d:c8:33:19:65:f6:9b:0b:aa:76:94:a7:
94:a9:91:4b:c0:4c:9c:7c:65:ea:d0:aa:42:d4:79:
b0:c1:a7:be:f1:98:f8:26:9d:1b:b8:cc:88:16:a2:
72:72:c9:35:90:91:cf:15:47:3a:c8:8e:59:90:0c:
db:57:b1:5d:ef:a4:90:d7:eb:fb:1f:0f:c6:71:40:
4f:2e:8c:e2:85:bd:dd:bd:d4:f1:06:96:89:52:17:
46:e8:a2:d5:8f:e0:c0:82:45:5e:6b:c4:60:f7:5b:
48:bf:9d:a7:0d:f2:59:cc:6b:b0:8c:aa:56:b7:71:
83:df:c9:3d:53:bd:13:4b:3a:44:87:99:67:ac:11:
db:c6:7e:f5:0e:3d:3a:bb:9d:06:fb:6a:78:31:df:
d8:d0:3c:4e:e6:3b:40:ad:a1:f9:f2:1b:a4:0f:1b:
b9:14:46:a7:45:31:1e:00:36:42:c1:9f:fd:70:32:
ea:73:e5:65:3c:99:fa:2f:63:21:a9:ef:07:63:cd:
76:11:33:05:71:cd:f6:3d:7b:9c:f8:37:d7:ed:62:
85:a7:de:80:16:3c:82:ec:fd:ac:e5:27:f9:76:62:
f2:c9:4b:d4:9b:29:45:bd:17:56:4a:2a:49:5f:9f:
79:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D3:65:E7:10:C0:6E:55:A3:18:4B:C0:F5:0A:E8:19:F1:27:D9:EE
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_9Nl5xDAblWjGEvA9QroGfEn2e4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.192.0/20
Signature Algorithm: sha256WithRSAEncryption
67:26:c5:3a:ab:9d:40:6d:aa:af:d9:d7:6b:e4:7c:69:b3:c8:
a0:33:c4:31:32:86:62:a8:cf:c1:37:13:e1:bc:3d:c3:1f:5b:
a8:1b:ea:02:6b:04:f6:96:53:fa:0d:ce:33:b0:b6:33:0c:b2:
d6:9c:c2:dc:ff:73:13:3e:e1:18:44:37:e4:2e:8f:60:da:c9:
ef:54:c6:2c:ec:80:51:5e:a9:40:91:54:d8:9e:e1:27:b1:e1:
c5:7b:ba:9e:f9:86:da:75:ac:da:5c:9e:ad:6b:0a:e7:b4:e3:
06:1c:d7:a9:d1:bc:57:1a:e2:02:86:9f:bc:ab:f2:57:da:9b:
e0:82:de:d2:7c:ba:db:1c:9b:fb:cc:6c:cc:ff:58:c8:67:a7:
00:be:70:46:66:5d:57:cf:ac:15:e0:f8:dc:88:01:00:85:23:
fd:54:f0:fe:38:97:29:1f:be:03:04:ab:b8:80:e8:88:bf:c2:
2f:fe:b0:50:dd:95:e0:f5:1b:fc:af:aa:9a:f0:f2:58:f6:4e:
f9:da:52:26:9c:e3:e7:96:5e:2e:da:fe:9a:4e:44:af:10:0f:
7a:a0:1f:a6:8e:f0:6f:18:15:e8:81:fb:af:35:19:03:37:7e:
c7:29:ad:de:03:8d:c9:23:a3:e7:53:7a:5c:0d:6e:57:96:3c:
a8:36:e0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-fra.rpki-client.org