Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_HxiEi8jE5bohb2uVLvEEZxm5cM.roa
File: _HxiEi8jE5bohb2uVLvEEZxm5cM.roa (raw, json)
Hash identifier: VjuhUo3T6VWCEtleOtbASaVvGcqaRuQ32eSaYL8T7+w=
Subject key identifier: FC:7C:62:12:2F:23:13:96:E8:85:BD:AE:54:BB:C4:11:9C:66:E5:C3
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2040
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_HxiEi8jE5bohb2uVLvEEZxm5cM.roa
Signing time: Fri 25 Nov 2022 04:38:30 +0000
ROA not before: Fri 25 Nov 2022 04:38:30 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.32.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8256 (0x2040)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:30 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FC7C62122F231396E885BDAE54BBC4119C66E5C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:64:30:85:89:99:11:a4:4b:59:c1:b2:11:10:
43:0d:eb:cd:22:2e:1a:60:9c:40:88:ce:eb:22:47:
02:f1:37:33:c9:7b:2b:3e:d3:d3:69:7b:1f:a4:00:
93:d2:b1:46:9e:7e:09:04:bb:a2:98:5b:f6:66:c6:
26:1f:52:8b:c7:17:5a:ca:b1:9f:e1:2c:2b:47:09:
5b:6e:f5:d1:e0:14:f2:a9:c8:52:83:7e:30:fa:45:
4f:12:0a:97:86:a0:e7:44:1e:5b:92:64:f5:c6:b0:
f7:54:eb:d3:17:e5:f5:06:fe:c6:8f:79:b3:98:74:
0b:6d:cd:85:50:97:a6:3b:12:f6:75:d5:1d:c6:f5:
f8:3a:2e:d9:84:0d:86:47:93:b8:5b:60:dc:38:30:
f4:45:c6:da:36:f3:4a:2a:90:0d:3c:05:81:73:1b:
ac:a9:6d:93:75:11:87:9a:77:2a:ff:fc:b2:26:84:
22:80:6d:c4:b3:e7:bf:6a:e5:f5:4a:9d:32:e4:a6:
81:be:e6:94:be:2c:2b:c5:e6:fa:77:bc:a4:e0:5c:
47:22:fc:4f:3b:23:fd:68:67:51:b2:75:39:98:ea:
49:36:ef:45:91:d4:8c:18:3f:af:3c:21:b9:c3:5a:
b6:5a:a8:91:6c:d6:77:39:b7:3b:bb:00:5a:95:cc:
83:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:7C:62:12:2F:23:13:96:E8:85:BD:AE:54:BB:C4:11:9C:66:E5:C3
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_HxiEi8jE5bohb2uVLvEEZxm5cM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.32.0/21
Signature Algorithm: sha256WithRSAEncryption
8d:ca:99:bc:18:f8:cc:f6:f5:9b:46:b9:d3:95:23:f4:63:a0:
8c:61:e5:96:e0:f5:91:1d:dc:58:ae:2a:77:78:97:af:d4:79:
64:0e:3f:2f:25:ad:55:d0:0a:42:40:59:00:8c:d9:a7:77:44:
cb:97:45:71:ea:cf:a9:45:03:07:3e:b6:a6:74:89:c8:78:9e:
43:94:15:85:f3:62:96:e1:98:15:88:78:62:6f:00:60:03:37:
5b:ec:2c:b4:ba:5f:b3:26:35:b6:d0:75:f9:85:5e:72:a6:34:
b3:8c:f6:94:c1:3d:bb:9e:95:55:03:18:a4:21:94:3b:e9:82:
d9:a6:87:00:a1:b9:cd:d7:41:03:33:1c:97:9f:f8:89:01:cb:
a3:80:0d:58:e6:85:26:46:9c:84:1b:37:f9:c4:35:5b:0a:9a:
85:24:3b:26:d0:38:00:b6:d7:43:01:e6:aa:43:ce:5a:cd:f4:
58:46:5b:1a:ab:a3:bb:7c:15:d6:da:de:17:6d:b2:eb:5e:a2:
78:61:58:a2:20:69:8a:73:3d:04:53:c4:e3:18:93:af:79:15:
19:ee:dd:4a:80:72:3c:ae:c1:31:54:ef:30:49:c7:d7:dd:9f:
fe:82:cc:35:26:5b:1f:0f:a7:23:02:c5:33:e3:c1:95:28:f3:
33:a9:97:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:34 2024 by rpki-client on console-ams.rpki-client.org