Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_lHRp4CQthtL4jUJ9bFoJPlL4gU.roa
File: _lHRp4CQthtL4jUJ9bFoJPlL4gU.roa (raw, json)
Hash identifier: GrODaXLcKsFnH5By2xU0kd7BZ4mIbE+BfKthFdpV/4k=
Subject key identifier: FE:51:D1:A7:80:90:B6:1B:4B:E2:35:09:F5:B1:68:24:F9:4B:E2:05
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2078
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_lHRp4CQthtL4jUJ9bFoJPlL4gU.roa
Signing time: Fri 25 Nov 2022 04:38:45 +0000
ROA not before: Fri 25 Nov 2022 04:38:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.200.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8312 (0x2078)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:45 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FE51D1A78090B61B4BE23509F5B16824F94BE205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a0:a1:da:89:73:9c:9c:8b:c4:31:fb:36:30:
23:b5:7f:d3:c8:a4:f2:0a:e0:77:84:c1:ab:39:7c:
0c:42:d0:b3:46:e1:8f:0c:b1:a3:b6:0d:db:05:6d:
5e:70:cc:08:bc:81:18:99:5e:f3:fe:44:4e:72:04:
1b:54:94:ca:a3:c5:d2:19:bb:1b:01:5b:fe:a5:31:
03:77:72:e7:c5:6d:bb:7d:4b:0a:6d:2e:09:3f:9b:
aa:3d:bc:d0:5b:35:7f:5c:68:6c:2e:fe:a1:4e:01:
34:4c:36:9e:13:5f:f4:2b:60:a6:31:35:6a:cf:40:
40:c0:ff:80:2b:67:47:a2:db:b0:a0:3a:6f:53:43:
8b:43:17:ec:82:b9:cc:82:24:5b:ae:ef:56:4c:7d:
df:1f:9d:59:c7:f3:99:be:ac:a7:6b:8c:72:5b:4f:
af:2a:e2:b1:0f:1a:98:1b:04:6b:bf:80:29:62:67:
80:8c:cb:b9:9e:fc:b8:72:69:b7:19:c5:e0:82:d2:
8d:cb:bc:57:f9:04:a2:19:ee:bb:64:7f:38:5c:41:
56:07:c1:33:b5:97:15:35:88:a9:18:bd:d7:4a:9a:
3b:f2:c9:7a:06:b1:36:0d:25:9d:db:9e:46:f8:2e:
8f:42:af:51:ea:b3:93:61:7e:39:0c:0f:12:30:38:
b7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:51:D1:A7:80:90:B6:1B:4B:E2:35:09:F5:B1:68:24:F9:4B:E2:05
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_lHRp4CQthtL4jUJ9bFoJPlL4gU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.200.0/22
Signature Algorithm: sha256WithRSAEncryption
70:bf:5f:95:aa:5c:94:a6:15:ef:c7:f7:47:6e:be:4a:cd:ca:
d0:07:61:d1:69:15:02:0c:5d:7d:7c:dc:f7:a6:64:f1:02:7f:
7d:c1:57:52:ec:bd:a9:b6:b2:31:6e:a6:2c:63:6b:c2:d0:d4:
12:11:e4:8f:de:a2:62:76:c3:f6:cb:65:b4:41:42:3c:dd:08:
89:d2:98:eb:28:b2:9f:b5:a5:88:a8:01:32:6f:1d:23:65:a5:
b3:e5:fe:64:7f:25:4e:e6:7a:0e:b7:41:dc:6b:6e:95:2f:c1:
a6:21:63:41:c6:4f:cf:0c:83:25:0a:a7:97:67:73:b5:5d:01:
0d:63:81:cd:17:e8:ec:89:3c:a0:bd:14:49:fd:34:4c:b3:ee:
58:99:cc:6b:a8:e0:d7:df:69:66:57:37:6d:7b:dd:a2:b2:7a:
88:08:88:11:41:6d:e2:22:57:64:01:c8:d5:fd:57:82:11:19:
09:2a:8b:ad:01:82:49:3f:2b:c7:1f:87:19:09:ba:d2:e4:5f:
4b:7c:d1:83:e9:2a:2e:cb:a4:51:ce:36:e5:b4:6a:36:63:d1:
2b:08:a8:fd:94:ab:67:f5:ef:2c:6e:5e:57:e9:09:eb:82:76:
c9:71:0c:58:14:e5:41:ae:55:6a:5e:90:0b:1d:1a:74:f6:53:
d2:18:87:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:34 2024 by rpki-client on console-ams.rpki-client.org