Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cwtuAlrxkz8VMyg_tuf8fRTaz20.roa
File: cwtuAlrxkz8VMyg_tuf8fRTaz20.roa (raw, json)
Hash identifier: chHcz9alU389CdFeJgsHuxu1kEwJ5mqcrNwbVimujUk=
Subject key identifier: 73:0B:6E:02:5A:F1:93:3F:15:33:28:3F:B6:E7:FC:7D:14:DA:CF:6D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cwtuAlrxkz8VMyg_tuf8fRTaz20.roa
Signing time: Thu 15 Sep 2022 02:45:52 +0000
ROA not before: Thu 15 Sep 2022 02:45:52 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.136.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:52 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=730B6E025AF1933F1533283FB6E7FC7D14DACF6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c5:5c:b2:d4:60:43:59:46:71:6f:83:01:da:
b7:8f:ca:ce:2b:98:ef:dd:d9:7e:58:9f:01:25:2d:
4e:2e:fd:09:1b:df:63:e6:6a:7e:ca:86:05:fe:4f:
c5:e7:ff:60:7e:1e:6d:51:a8:fd:41:4c:62:85:30:
43:67:a0:89:5a:d9:46:14:87:51:61:f8:c2:7c:2a:
16:d4:34:85:36:9d:e9:05:75:45:2f:39:65:76:cb:
8e:f4:2d:08:82:be:e6:57:ea:fe:25:98:e4:31:66:
bb:fb:33:3d:35:e9:fe:d7:77:49:a4:0c:67:77:bc:
2b:c6:80:7a:cb:37:13:e7:14:3d:7a:c3:ea:25:67:
8a:8a:5e:aa:02:dd:64:05:03:8c:8c:86:17:37:59:
24:41:28:72:cd:b3:74:e1:bf:73:4a:f5:da:f3:b8:
1e:39:6b:19:56:76:80:e9:05:08:de:31:0e:e8:28:
45:d4:86:ae:36:85:39:f4:ad:d2:eb:5b:c6:e4:95:
cf:ef:f6:a6:19:ff:55:3b:ac:c1:1c:ac:1d:08:55:
1d:51:29:d1:02:13:dd:d0:ea:ab:06:84:38:1f:6d:
e4:10:36:e3:c4:42:78:fa:ad:3d:66:cf:18:5d:be:
52:b6:2d:4b:9f:1e:e1:dd:ce:75:22:40:ed:47:ac:
88:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:0B:6E:02:5A:F1:93:3F:15:33:28:3F:B6:E7:FC:7D:14:DA:CF:6D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cwtuAlrxkz8VMyg_tuf8fRTaz20.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.136.0/22
Signature Algorithm: sha256WithRSAEncryption
17:7e:83:fd:bf:b3:26:47:1c:87:fa:6b:f3:fd:ab:c9:d8:9f:
9f:a3:50:b2:5b:41:8f:83:9e:95:cc:88:ab:33:d7:4d:dc:d9:
ff:53:96:4a:46:23:85:02:31:3c:2e:60:1c:64:10:98:a4:f5:
0a:c3:0d:88:66:a6:3b:94:54:e2:55:7c:e4:31:9f:d4:c4:a4:
e5:25:e4:db:48:34:8a:ea:15:50:fb:55:10:1f:ca:20:d1:aa:
64:72:fa:ce:84:65:dc:a8:39:ce:2c:60:e6:88:48:72:06:f9:
cb:05:6c:e1:d8:85:a5:bd:b3:6b:d6:9d:91:87:46:5a:5b:5b:
90:41:d1:58:5a:c8:d6:45:85:ce:93:ad:1b:4b:c7:5a:83:c5:
e6:de:7b:a7:d9:3f:46:0a:a3:76:13:75:40:66:04:78:d3:1b:
92:73:cb:a0:a2:ff:2e:6e:45:d8:41:7b:b9:b1:bf:ed:cc:3a:
67:40:4c:fe:b2:e6:3d:33:ac:49:d7:ce:74:86:d3:55:31:0b:
2b:10:d6:a2:eb:9e:7d:81:89:4d:17:34:58:29:86:9a:75:ed:
17:31:6c:4d:ec:a7:6d:be:ba:e0:f6:95:ab:7d:45:54:6f:0e:
94:15:db:74:34:42:e0:13:18:6b:3d:f4:a5:8b:aa:71:10:94:
74:42:e9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:36 2024 by rpki-client on console-ams.rpki-client.org