Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dzQnhxaUIu3S58iyWlTZIeDMJSc.roa
File: dzQnhxaUIu3S58iyWlTZIeDMJSc.roa (raw, json)
Hash identifier: CR9gzMzQLwf4kBr3HPby1SwqyKWMEUoY20CPUTxXsbI=
Subject key identifier: 77:34:27:87:16:94:22:ED:D2:E7:C8:B2:5A:54:D9:21:E0:CC:25:27
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dzQnhxaUIu3S58iyWlTZIeDMJSc.roa
Signing time: Thu 15 Sep 2022 02:45:44 +0000
ROA not before: Thu 15 Sep 2022 02:45:44 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.248.0/21 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:44 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=77342787169422EDD2E7C8B25A54D921E0CC2527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:54:d3:19:b3:da:8d:55:8d:29:71:dc:40:a8:
59:24:a9:29:c2:41:48:b0:a0:66:39:43:b9:1b:d5:
ef:1f:e9:14:79:2c:78:77:26:8a:92:26:ae:f1:1d:
18:1e:3d:b6:bb:e4:86:f7:30:9f:6e:d9:e7:9c:85:
9e:04:d2:22:85:eb:3e:de:a8:34:f4:89:82:be:12:
b2:48:52:6a:f0:e2:3e:b8:bb:b8:c6:d1:a3:ee:89:
e8:22:53:70:f0:4c:fc:60:1f:0a:47:50:86:37:f8:
96:38:11:f1:df:6e:7e:54:50:f1:ae:23:42:1e:7b:
75:88:36:67:0a:68:ac:2a:10:b2:f1:f6:56:0b:c6:
45:b8:b8:89:96:2b:49:fa:ce:5e:d4:79:c9:dc:38:
3e:75:56:66:f2:54:e0:34:99:f0:0c:50:d6:04:7b:
9d:c5:23:00:44:1a:38:65:e4:50:5c:82:d6:0f:97:
f6:a8:d8:f2:5c:24:03:c2:30:8d:1f:56:d1:55:65:
93:8b:ce:fa:0e:29:54:79:be:3e:ce:f2:6f:3a:d3:
17:48:b9:91:77:74:3f:ea:34:13:43:a0:3e:f2:1b:
c3:a3:02:70:d3:f3:90:cd:a4:85:6b:eb:14:f2:db:
b8:da:d6:e3:55:72:0f:99:75:c9:d3:78:3c:55:c1:
c6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:34:27:87:16:94:22:ED:D2:E7:C8:B2:5A:54:D9:21:E0:CC:25:27
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dzQnhxaUIu3S58iyWlTZIeDMJSc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.248.0/21
Signature Algorithm: sha256WithRSAEncryption
36:a8:82:c2:0a:d1:99:43:ac:13:52:e3:f5:91:01:40:53:03:
6c:ed:f8:ed:74:cf:89:84:40:33:48:7e:5e:6c:8f:52:bd:9e:
8f:ac:2a:65:a9:9b:70:4d:c8:19:6c:a8:ba:b8:47:fb:c4:4f:
f1:39:b8:10:e1:78:76:d5:9c:5e:0c:31:14:c5:00:54:d3:af:
05:19:74:bd:ac:e9:18:91:42:c0:2b:ff:26:47:82:cb:7d:6d:
a6:27:79:c9:a0:b0:5b:35:a4:bc:c1:67:69:28:6b:47:af:1e:
3f:47:36:8b:1d:20:55:d5:c5:91:f5:42:67:c0:9d:51:63:3f:
4c:e0:26:2a:2e:cd:a3:29:a0:ef:fd:44:ff:c0:f4:ba:27:b4:
85:4d:47:76:4a:4e:ed:ed:4c:64:45:05:1d:f9:27:a4:b3:1d:
9b:e5:a4:84:00:e2:a0:f5:dd:81:88:8a:79:16:ed:39:73:2d:
5e:07:73:94:0d:e3:37:8f:cf:50:33:05:2b:fd:37:ad:26:19:
7a:c4:00:8f:43:6f:eb:15:dd:9d:6d:1f:b7:a5:2b:ef:d4:62:
33:c3:1d:ad:95:c1:8f:58:ce:36:da:80:86:7c:e4:c9:bc:3a:
db:b0:9d:dc:73:2f:27:34:5e:a6:c7:1d:d4:16:99:3e:2b:9f:
28:64:dc:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:56 2024 by rpki-client on console-fra.rpki-client.org