Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/apLW4geDKFjFu0JNTOa1Hn3LXaI.roa
File: apLW4geDKFjFu0JNTOa1Hn3LXaI.roa (raw, json)
Hash identifier: 2NisGLZgriWk+iX8XbspP/X9cLqFt96hWJu9drQAxUU=
Subject key identifier: 6A:92:D6:E2:07:83:28:58:C5:BB:42:4D:4C:E6:B5:1E:7D:CB:5D:A2
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1D0A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/apLW4geDKFjFu0JNTOa1Hn3LXaI.roa
Signing time: Wed 29 Sep 2021 02:48:32 +0000
ROA not before: Wed 29 Sep 2021 02:48:32 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.194.252.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7434 (0x1d0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:32 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=6A92D6E207832858C5BB424D4CE6B51E7DCB5DA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c5:19:82:b3:79:51:1c:e7:4b:2b:8e:8a:00:
40:18:e1:bc:06:0c:f9:61:96:2f:21:e6:2b:b0:8c:
20:84:2a:46:1a:90:b5:08:ee:05:61:ad:5e:cf:89:
56:e3:f5:bf:0a:43:7b:d2:73:72:91:49:72:ba:80:
da:69:c0:45:e7:83:b2:67:1a:e8:0b:0b:f0:de:31:
a6:56:1c:aa:c3:f3:5a:bd:a9:49:9b:70:74:a5:0c:
76:72:79:44:8f:a7:3d:97:f0:27:ab:c3:6c:dd:6a:
4d:7b:ea:10:02:70:00:8b:df:c3:e3:a7:23:ae:8f:
6b:11:6f:c5:08:74:5c:6c:5a:6a:c6:c4:02:2c:a3:
da:57:cf:6a:8a:2c:6d:3e:f7:76:9c:cd:ec:6a:b4:
32:f9:44:48:83:08:d2:25:10:a2:ba:8e:47:da:f1:
b9:87:fd:6d:10:e9:48:9a:3a:d5:df:50:6f:ba:2a:
0e:7d:71:cf:1e:6d:39:2d:21:fb:e9:3e:fc:49:45:
6c:2e:bd:dc:97:68:2c:84:26:fd:c5:48:9b:ba:54:
07:d4:a0:49:cc:ac:50:96:76:e8:b1:41:44:25:56:
f4:50:f2:7c:8f:86:98:be:1c:8b:a3:5d:08:c1:21:
c0:bc:37:9b:96:29:08:0e:62:71:0b:fd:6c:35:67:
c1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:92:D6:E2:07:83:28:58:C5:BB:42:4D:4C:E6:B5:1E:7D:CB:5D:A2
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/apLW4geDKFjFu0JNTOa1Hn3LXaI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.252.0/22
Signature Algorithm: sha256WithRSAEncryption
88:54:b9:10:5b:88:8d:f7:81:79:c9:27:7b:8c:1b:db:43:7f:
0c:de:1c:9b:a4:8e:f6:91:c9:bc:39:12:60:a8:48:87:da:43:
f3:55:d8:09:20:e4:82:b0:33:43:49:35:b3:45:2d:6d:f6:f4:
02:6e:54:ee:db:e9:20:2c:ef:c2:64:dd:7b:27:f6:d6:7c:4c:
ea:6b:b5:bc:52:85:76:76:fe:ab:b4:ce:b4:6a:cc:46:b2:d3:
86:9d:c0:44:36:db:b5:ad:e7:c1:77:86:eb:6e:38:45:70:73:
0e:97:a8:33:90:88:52:6e:60:df:e4:ab:43:f7:85:46:d1:a2:
69:93:5c:ca:2c:ed:4d:04:a0:d2:5b:02:fd:2b:92:6d:ba:99:
d9:e6:d7:70:93:0c:c8:9f:e9:31:ca:dd:94:a7:45:09:56:23:
bf:35:bc:22:de:2d:c2:73:d1:4f:db:f1:1d:01:fe:fc:ce:d0:
09:94:b3:20:4a:7f:31:09:04:4c:dd:ef:17:1a:0b:81:50:c0:
3d:d0:42:7a:8f:06:e4:20:09:20:3c:e8:14:8b:be:9f:49:49:
be:78:80:aa:50:14:7d:39:fe:07:e3:ed:ae:70:c9:2d:2c:89:
2d:c6:2a:86:3d:be:d2:f1:f5:52:5a:36:d8:81:8c:5b:46:d1:
4b:58:c5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:35 2024 by rpki-client on console-ams.rpki-client.org