Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eMvJOKpiiXa8KB_tjAjjlwltG04.roa
File: eMvJOKpiiXa8KB_tjAjjlwltG04.roa (raw, json)
Hash identifier: i3hg4fNgPy1LwpSlUSzDzDndSS9xmJjs7MzFl3r/Gog=
Subject key identifier: 78:CB:C9:38:AA:62:89:76:BC:28:1F:ED:8C:08:E3:97:09:6D:1B:4E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1F0D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eMvJOKpiiXa8KB_tjAjjlwltG04.roa
Signing time: Fri 01 Jul 2022 02:06:51 +0000
ROA not before: Fri 01 Jul 2022 02:06:51 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.195.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7949 (0x1f0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Jul 1 02:06:51 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=78CBC938AA628976BC281FED8C08E397096D1B4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:fe:5a:f2:4f:e7:8b:69:2c:e2:6f:f7:58:a0:
75:ad:aa:4c:6e:fe:f6:f9:b1:81:f8:ea:7e:af:c4:
37:e5:ca:2d:8b:b1:e3:cf:06:57:da:8d:22:11:a3:
3d:0c:33:b7:bd:53:24:07:be:35:75:cf:fe:d9:27:
8a:c5:94:a8:be:33:89:f9:ff:0f:e4:95:ef:8d:b4:
0a:5c:63:c7:06:e4:58:f8:30:28:1a:ce:e1:29:e6:
73:0c:35:8a:a5:5e:8d:d2:f0:1b:bf:58:cb:5f:1e:
11:98:f2:a3:55:fe:aa:30:96:6c:00:64:2e:81:89:
45:60:9e:77:25:8f:50:4d:09:a7:1d:3a:a0:72:5d:
3f:bd:e3:b2:93:40:0d:fe:2c:f4:d4:09:7e:dc:3a:
1f:7a:59:10:07:46:a8:eb:44:4d:3a:22:bb:1d:93:
52:05:57:a0:8d:d8:08:89:05:d8:d0:e5:69:ab:56:
fd:6b:3f:c0:53:ac:e2:59:cb:42:b3:8c:4b:1f:68:
23:52:1f:a7:f5:e9:b7:e4:71:06:9c:53:54:c6:9d:
50:e6:e2:32:b1:1c:30:33:3b:2e:3e:14:b9:25:71:
a8:26:89:e1:24:b1:cc:73:c1:ef:e6:2b:9e:24:e5:
6f:96:2b:12:48:93:34:eb:ab:31:f7:89:c7:29:a7:
f2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:CB:C9:38:AA:62:89:76:BC:28:1F:ED:8C:08:E3:97:09:6D:1B:4E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eMvJOKpiiXa8KB_tjAjjlwltG04.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.237.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:a3:ac:40:3f:f1:00:ea:d1:c3:04:d7:31:50:1d:66:47:0d:
ae:be:3a:64:75:a7:dd:88:45:05:8e:ef:ff:6a:a6:31:58:be:
d9:69:fa:9a:0b:9f:77:14:cd:68:81:d2:14:0c:94:e3:5b:00:
82:73:99:18:6d:9a:58:b4:d3:09:7a:2e:2d:da:27:1f:28:45:
ff:55:12:71:f7:02:4f:d6:fe:1d:85:a8:e2:e0:14:47:57:b8:
29:fc:5d:c0:7e:7d:3f:4a:81:3a:b6:f2:2e:51:35:10:f7:60:
19:0c:d6:98:d3:35:c7:9d:4b:22:d3:88:9a:5a:bd:3c:c3:ea:
a9:1b:6f:bc:cb:8e:e8:3d:58:40:49:91:cc:b9:5f:75:2d:73:
37:7f:ee:86:66:a2:21:16:0d:4c:28:ae:ed:ce:7c:52:27:cc:
d8:4b:c3:e8:5e:c8:8a:61:ed:83:6d:f7:74:f6:5b:03:0a:10:
19:06:87:10:6c:df:56:91:1d:61:e9:ac:8d:69:89:83:72:0e:
06:86:c0:58:48:0d:9f:a4:a0:0b:92:4b:62:ab:31:f9:26:a4:
4a:61:7b:f6:17:e7:36:14:cf:d9:ad:28:63:97:71:d3:6c:0c:
bb:a1:2b:2a:33:56:9d:93:32:c7:50:6c:74:5c:cf:0f:14:c9:
e0:14:28:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:36 2023 by rpki-client on console-fra.rpki-client.org