Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bOL3_fDC8UAXVTKpIhmorLbVdZk.roa
File: bOL3_fDC8UAXVTKpIhmorLbVdZk.roa (raw, json)
Hash identifier: Phd5M0XVsN28ZFJaJlzn/EaI+1h6sIDVgpPc9xCOaCY=
Subject key identifier: 6C:E2:F7:FD:F0:C2:F1:40:17:55:32:A9:22:19:A8:AC:B6:D5:75:99
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1C3A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bOL3_fDC8UAXVTKpIhmorLbVdZk.roa
Signing time: Wed 29 Sep 2021 02:47:30 +0000
ROA not before: Wed 29 Sep 2021 02:47:30 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.194.20.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7226 (0x1c3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:30 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=6CE2F7FDF0C2F140175532A92219A8ACB6D57599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3b:c2:5d:12:bd:6c:a2:81:f8:8b:16:a7:bf:
a5:08:c6:e6:af:c7:a8:d5:75:80:91:90:61:73:48:
57:7e:aa:30:4d:94:b9:b3:98:b9:a9:80:03:41:ac:
f2:1c:fd:4f:b0:53:81:20:4b:7c:f0:8a:a1:de:99:
ec:21:e7:8b:5a:cd:91:ec:64:c6:f1:b6:81:ee:5f:
f4:66:02:5b:34:b4:f8:a9:d9:1c:f2:d7:00:d5:b8:
d5:2c:08:46:24:f1:d4:70:09:0e:31:9e:57:d1:a6:
ee:e5:a9:77:25:e4:2e:94:19:5c:9f:6c:78:f3:47:
3c:4f:55:21:c1:81:a5:b1:3b:ec:19:58:a8:bb:00:
ce:c9:f1:6d:53:ba:89:6c:a7:ad:cf:86:23:06:69:
a2:5c:59:cd:a9:d3:6d:af:09:42:6c:76:35:30:17:
0c:fc:a3:31:d2:b4:3a:85:14:80:51:ad:87:7b:27:
e5:e9:57:d2:d1:68:64:7a:28:c6:89:d3:3a:e8:cc:
88:cd:ea:0a:51:51:69:68:66:bf:3a:f7:58:42:a3:
49:58:c1:9c:73:34:a6:a3:cd:89:ec:19:52:c9:22:
f1:fe:e9:f8:0f:b8:d2:c7:57:a5:48:42:35:4d:1f:
56:69:8b:5c:77:f4:52:b0:c3:29:9f:23:31:cd:b6:
93:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E2:F7:FD:F0:C2:F1:40:17:55:32:A9:22:19:A8:AC:B6:D5:75:99
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bOL3_fDC8UAXVTKpIhmorLbVdZk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.20.0/22
Signature Algorithm: sha256WithRSAEncryption
08:0b:af:3b:73:f4:3a:b6:8a:f1:b2:d7:11:e8:e7:e4:0a:91:
1a:05:82:42:b9:f1:a4:b6:28:f3:33:96:76:53:19:09:14:48:
2f:0b:1f:0a:cb:31:fd:0f:d9:db:8e:bb:b9:bf:19:b5:ec:38:
e3:36:d1:90:3c:68:e8:09:a0:bc:ad:8c:dc:b9:c9:b3:27:bc:
26:94:6c:85:6b:a3:07:ba:aa:93:97:aa:ed:79:78:c9:2c:85:
9c:07:55:a7:b2:a3:51:ef:f9:10:5e:5d:8f:9f:4b:a3:84:dc:
7a:31:f5:80:dc:69:e7:94:b7:5e:fe:af:59:66:64:7f:0c:e6:
e3:b7:bf:46:33:7d:f5:99:39:61:e2:45:8e:58:f8:45:27:76:
55:90:25:5d:83:60:23:2c:fc:89:64:5e:e3:00:27:fc:21:e5:
df:9c:84:03:ce:25:6e:85:d5:16:5d:f5:e1:98:2b:f8:77:22:
a6:c9:b0:ef:69:bb:31:19:fd:95:d5:41:04:db:aa:1c:2b:6c:
49:d1:94:64:63:e0:87:f0:5f:1d:0a:6c:ba:0e:c6:2d:67:95:
b2:39:e8:01:3b:8c:18:b1:8b:7b:7a:a0:b5:90:3d:1c:c3:fc:
33:2f:6a:44:01:c6:15:d7:f8:40:f0:27:37:62:9b:a4:0c:1e:
09:a1:1b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:35 2024 by rpki-client on console-ams.rpki-client.org