Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eRxPfXXHzKkghqpU6OrbCsklXxM.roa
File: eRxPfXXHzKkghqpU6OrbCsklXxM.roa (raw, json)
Hash identifier: pH9fJTnCYNISHr7AmAC9mLzH0ZbLGklFL0TKjzGFG2A=
Subject key identifier: 79:1C:4F:7D:75:C7:CC:A9:20:86:AA:54:E8:EA:DB:0A:C9:25:5F:13
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1E4A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eRxPfXXHzKkghqpU6OrbCsklXxM.roa
Signing time: Tue 03 May 2022 01:20:20 +0000
ROA not before: Tue 03 May 2022 01:20:20 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.192.0.0/17 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7754 (0x1e4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: May 3 01:20:20 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=791C4F7D75C7CCA92086AA54E8EADB0AC9255F13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:07:ad:43:ee:a6:64:7a:04:e3:43:d5:01:91:
f4:d8:9c:c9:21:76:e4:eb:32:3d:32:b8:7f:94:dd:
8c:24:b8:d7:cd:38:eb:b6:3d:79:1a:b0:b6:ae:00:
ae:ba:87:b7:9c:24:4d:cb:04:2b:7e:5a:dd:29:0e:
85:0e:7b:dc:7a:dd:6e:84:8f:ee:f0:13:27:c3:29:
dd:18:76:96:9b:c7:90:8b:6d:05:0a:2b:9d:71:e8:
0a:28:db:c7:5d:1c:eb:ca:19:fa:06:0a:e9:bb:21:
f1:c7:db:ae:f8:25:2b:0b:da:4d:28:9c:49:24:6a:
ec:f7:1e:34:d7:63:41:0f:64:85:4c:de:46:4d:4a:
11:74:af:d0:e8:dc:c0:1a:23:c0:2c:19:e0:88:ef:
24:d6:b1:57:09:1d:c0:c3:33:2e:df:f2:77:72:68:
01:7d:f5:38:b0:52:ed:f0:e1:49:3c:5a:89:f3:a1:
b9:20:7c:5e:19:58:ed:85:19:dd:32:91:3a:67:c1:
46:b4:5f:18:b8:66:62:4b:ae:1f:94:52:cb:98:04:
14:e8:05:aa:56:0b:e7:a5:14:cd:6b:7e:2a:ce:12:
b9:05:5f:29:a7:e5:9b:82:4a:66:60:30:fc:20:63:
a8:16:9f:5e:2d:95:3f:d6:52:97:9a:e4:2a:2e:37:
26:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1C:4F:7D:75:C7:CC:A9:20:86:AA:54:E8:EA:DB:0A:C9:25:5F:13
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eRxPfXXHzKkghqpU6OrbCsklXxM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.0.0/17
Signature Algorithm: sha256WithRSAEncryption
45:d9:73:9b:90:8c:bb:8f:ae:fd:17:95:e6:03:8b:fc:73:83:
25:a3:9a:52:b1:eb:fe:1f:de:d2:a4:47:5e:ed:87:ed:b8:37:
92:64:c5:ae:15:00:6e:5c:90:92:72:2e:e1:ca:66:8a:6b:d5:
b0:8e:17:9e:d8:7f:d8:0d:ae:f7:b7:63:ff:ac:88:79:f3:1d:
e9:24:0d:85:d0:d1:ff:5c:ca:0f:3d:d8:a2:92:8c:5a:e1:3a:
18:a2:fe:7c:3d:79:08:2b:2d:d6:ac:98:6b:69:31:2a:32:6b:
ad:83:16:09:59:4b:b0:21:34:53:ba:0b:b1:fd:a2:29:1e:5d:
1e:2a:3f:d7:5f:a5:4a:f7:7a:90:d0:17:ff:f0:e5:f0:31:8f:
ad:0a:bf:81:f9:87:76:33:99:c1:20:cd:89:66:14:9d:d4:07:
c1:91:fa:40:2a:d0:fd:10:6f:ab:ed:78:ce:27:98:ac:14:d4:
0a:3e:11:ae:bd:0b:c8:39:5d:6b:d5:fb:58:51:ef:78:42:33:
03:69:b2:fe:fc:d8:13:21:d4:df:f4:57:76:37:b3:8c:28:5d:
88:ad:33:a4:de:cd:6a:86:a5:da:7f:15:b5:41:9b:1f:01:16:
fe:74:90:06:71:be:16:b5:32:d9:0e:cd:58:5f:a9:e4:2e:52:
ca:74:11:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:56 2024 by rpki-client on console-fra.rpki-client.org