Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dMimYEiwBv6nIFj-lxKWre62kcw.roa
File: dMimYEiwBv6nIFj-lxKWre62kcw.roa (raw, json)
Hash identifier: MsRLyhd0L/52/luxrsTJbRQ1gi+vErDYSqd6yvKafHQ=
Subject key identifier: 74:C8:A6:60:48:B0:06:FE:A7:20:58:FE:97:12:96:AD:EE:B6:91:CC
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dMimYEiwBv6nIFj-lxKWre62kcw.roa
Signing time: Thu 15 Sep 2022 02:44:54 +0000
ROA not before: Thu 15 Sep 2022 02:44:54 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.32.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:44:54 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=74C8A66048B006FEA72058FE971296ADEEB691CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f0:d4:f1:88:49:fe:91:f0:77:bf:e5:c1:d9:
ae:3a:a2:b2:0b:38:f5:e2:fa:13:cd:77:a7:1c:49:
f0:c3:bc:1f:43:31:43:86:88:92:d1:49:f8:6e:a4:
51:e8:d0:e1:a6:4b:fc:ed:4f:68:c7:9d:74:89:03:
47:c8:44:4f:bf:34:b9:c6:b3:d8:df:d0:d0:e3:a0:
18:45:ee:96:66:8b:fd:f9:e6:f2:8a:be:6b:1a:76:
9b:da:b3:2b:de:22:d8:ed:79:f4:d0:1a:e7:28:0c:
49:1e:85:a2:40:18:0e:c9:df:32:b9:99:c0:7d:f2:
34:bf:b0:8f:94:a6:45:74:67:02:2d:07:09:3e:9a:
20:fd:1e:48:a9:fe:cb:5f:e2:45:34:94:bc:82:4f:
f1:56:c2:71:2f:56:e6:cb:90:08:02:aa:bc:13:c8:
fd:65:40:29:8b:33:5e:82:6b:84:c7:58:31:53:33:
98:19:37:70:5f:f3:3f:cb:cf:55:3d:c2:52:df:c8:
30:94:f3:75:dd:d3:83:60:ac:9d:16:b4:fc:60:d7:
0f:b3:9f:78:9d:94:2d:68:43:22:c5:a5:d0:45:97:
37:51:ce:e5:11:72:eb:ea:e4:9f:b1:a5:79:e9:de:
d5:3c:56:32:6f:08:e8:50:9f:59:a4:c8:bf:23:d1:
c2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C8:A6:60:48:B0:06:FE:A7:20:58:FE:97:12:96:AD:EE:B6:91:CC
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dMimYEiwBv6nIFj-lxKWre62kcw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.32.0/21
Signature Algorithm: sha256WithRSAEncryption
38:d1:d0:0c:08:39:2c:97:78:d0:b1:91:23:9c:42:62:22:42:
2b:cb:95:60:ce:03:26:c3:d7:c4:cc:6e:78:ce:db:af:d4:8d:
2f:ed:4c:21:09:eb:72:40:1f:c3:65:b7:49:eb:44:df:26:ee:
27:b3:7c:00:f6:17:96:1c:25:ec:65:9a:d1:cd:ea:00:db:79:
0b:3e:bf:55:12:34:9a:92:35:4c:16:60:5d:76:2e:62:88:88:
ce:86:66:a7:8e:31:fb:d4:9b:c9:3c:98:7f:a9:39:6f:37:2f:
c1:87:8b:50:24:56:4b:6b:33:d3:2b:5b:b4:ef:44:c2:2e:b5:
3d:56:ab:35:53:fa:79:21:e4:a7:1d:c5:66:69:3e:52:db:da:
c4:c6:c0:c0:8a:25:2c:69:ae:54:6c:36:f5:f5:5a:d2:de:ca:
30:dd:3c:30:90:bc:a5:39:b4:06:d7:ae:e3:c7:ac:20:f7:8b:
00:fb:6e:77:37:fb:5a:ae:c4:17:96:c6:5c:26:aa:d8:d7:69:
7e:76:f9:24:ab:3c:8f:8a:66:95:48:da:5c:3d:a2:bd:28:53:
c4:10:00:2b:a3:d1:ed:ab:1a:d1:98:98:69:e3:a4:d8:fb:a5:
1c:66:e6:6a:bb:74:cf:46:46:92:e5:46:be:34:9e:44:94:70:
66:1b:9e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:36 2024 by rpki-client on console-ams.rpki-client.org