Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/a64yobjijebUrnX6XF8zTlM_KdE.roa
File: a64yobjijebUrnX6XF8zTlM_KdE.roa (raw, json)
Hash identifier: TaI/9+X3Vcz2Nr1y/aUr5JWDKnQc5Fk0QIk42fK3kHk=
Subject key identifier: 6B:AE:32:A1:B8:E2:8D:E6:D4:AE:75:FA:5C:5F:33:4E:53:3F:29:D1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/a64yobjijebUrnX6XF8zTlM_KdE.roa
Signing time: Thu 15 Sep 2022 02:52:26 +0000
ROA not before: Thu 15 Sep 2022 02:52:26 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.92.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:26 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6BAE32A1B8E28DE6D4AE75FA5C5F334E533F29D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:96:66:19:8e:12:f2:1b:5a:0a:2f:fc:3c:58:
5f:05:1b:f1:0f:cb:9f:b2:86:15:2b:c8:ba:c1:1c:
f5:00:ed:d9:10:56:b0:f8:0d:e8:bc:37:bc:9c:f0:
bb:98:91:6a:70:50:ae:bc:34:53:48:51:25:d9:9a:
9c:1e:07:b6:e4:eb:8f:77:40:68:7f:2b:0b:58:39:
a4:e8:12:da:d3:6d:12:51:30:4f:5d:ff:cd:5d:0f:
30:14:50:fb:4b:3a:be:33:47:04:0a:0e:12:cb:8c:
e4:1d:be:cc:6e:3b:67:a8:79:df:88:fa:5d:f3:c0:
d1:a3:8b:8a:f7:fe:bc:f2:9a:2e:ee:43:6b:cc:2b:
50:d0:c0:e0:dc:7c:ed:81:97:b0:95:38:5b:8a:f5:
bb:8b:48:66:b7:12:11:06:e8:1e:ca:cf:7d:df:23:
c4:54:97:20:e2:c5:ea:b1:1e:34:a8:bc:9b:fc:ed:
24:99:2f:f6:e7:7c:c3:d5:8b:da:fe:7a:1e:cf:9b:
e9:b8:2b:e9:7b:bb:10:d6:94:92:3d:37:03:b0:b7:
47:77:b1:b9:07:05:85:c8:2f:7c:a2:db:55:a4:77:
57:c0:ce:86:6d:96:25:62:9c:1d:88:96:b2:fc:10:
3b:38:5e:03:37:90:fd:04:63:bc:0a:7e:bf:22:67:
01:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AE:32:A1:B8:E2:8D:E6:D4:AE:75:FA:5C:5F:33:4E:53:3F:29:D1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/a64yobjijebUrnX6XF8zTlM_KdE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.92.0/22
Signature Algorithm: sha256WithRSAEncryption
30:9a:ab:be:83:d2:92:2a:17:d3:7c:27:b7:90:a4:3d:c3:d9:
b3:bd:f0:75:49:d4:c3:c5:a4:ea:31:98:1a:4d:91:a1:f4:32:
b8:e5:e4:4c:3b:c3:5e:cf:e5:20:9d:84:c4:b8:02:59:5b:72:
74:a5:93:9a:ab:d2:bb:1c:73:72:c5:5e:85:e1:ff:4a:10:87:
01:3a:e6:a9:d5:ff:f5:bb:dd:4c:8e:80:72:25:f7:91:50:ce:
68:1c:39:9a:1c:8f:d5:42:81:59:89:fa:ed:11:78:74:10:2a:
fe:7e:6d:b2:78:c4:27:75:46:35:5c:33:b5:a8:8e:98:e3:94:
2a:5b:45:c4:31:c4:24:f0:ff:68:26:7d:c4:54:3e:f2:a7:d5:
66:78:8a:47:bf:6c:6b:ca:2a:03:9c:2c:fe:4d:41:68:a8:50:
f3:ad:7b:1d:79:c1:ae:71:6f:f5:c1:e8:30:ec:f2:06:5c:a8:
71:90:e7:27:68:53:46:39:aa:a3:e8:a5:bc:83:eb:7a:3b:c5:
a1:80:67:ee:98:26:78:16:df:03:9c:ed:04:11:37:4a:cc:b7:
8f:30:d3:28:e9:34:c0:9a:31:9a:2d:ec:96:e6:e9:a2:ba:30:
bd:ef:39:6c:b7:d6:33:1c:47:03:99:07:13:36:96:90:59:ab:
5a:e6:4b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:55 2024 by rpki-client on console-fra.rpki-client.org