Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fBKLrHMlrjGavW0FywPOfNWcn1c.roa
File: fBKLrHMlrjGavW0FywPOfNWcn1c.roa (raw, json)
Hash identifier: 9EoLqzTbjz58mydT6uuWENukZVE5ttqFeA4kTJDTwzI=
Subject key identifier: 7C:12:8B:AC:73:25:AE:31:9A:BD:6D:05:CB:03:CE:7C:D5:9C:9F:57
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fBKLrHMlrjGavW0FywPOfNWcn1c.roa
Signing time: Thu 15 Sep 2022 02:53:08 +0000
ROA not before: Thu 15 Sep 2022 02:53:08 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.96.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:08 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7C128BAC7325AE319ABD6D05CB03CE7CD59C9F57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:20:9f:26:37:ba:ab:c2:d4:e9:71:44:7a:93:
24:96:5c:6c:b0:9a:c3:08:07:9d:a9:80:d4:a4:47:
d0:3b:93:28:cd:2e:0f:d0:c0:a8:ff:e5:5c:c5:31:
da:d2:49:5d:ac:37:1c:f7:d8:d4:ff:55:13:0c:9f:
39:b3:cd:f2:48:3b:2b:94:18:b0:d3:87:a5:c3:a0:
34:cb:df:83:55:a2:d9:b4:8d:59:b6:a9:ae:08:1b:
7b:bb:7c:af:bc:15:a0:27:f5:1a:70:12:8b:46:72:
fb:97:48:2a:50:53:96:52:85:4d:b4:ae:be:34:5b:
34:68:b5:c9:04:10:14:c5:b2:81:1d:f6:16:3b:89:
e9:54:4c:b5:cf:c5:ee:24:62:41:49:ae:26:64:40:
80:7f:52:37:ef:99:2a:60:8b:67:f8:a6:87:6a:03:
74:4b:5d:59:c6:dc:ee:5b:c9:27:95:27:10:5b:a9:
e0:1b:28:e9:a2:bb:26:58:0e:d1:20:23:ff:48:69:
0c:22:dd:9a:53:d9:f7:b5:73:4b:16:66:bb:b9:ac:
6e:91:63:4a:53:a7:02:0b:28:da:8e:36:66:5d:0e:
69:c8:1e:b3:bb:ec:40:ed:4f:2c:e1:5b:93:11:b7:
7b:27:35:83:25:4f:bc:ba:94:8f:67:62:2f:65:c8:
bc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:12:8B:AC:73:25:AE:31:9A:BD:6D:05:CB:03:CE:7C:D5:9C:9F:57
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fBKLrHMlrjGavW0FywPOfNWcn1c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.96.0/21
Signature Algorithm: sha256WithRSAEncryption
8f:5c:4e:24:50:c6:3b:21:22:d9:22:03:62:e0:b2:e3:70:04:
57:db:60:4d:11:30:78:35:ea:0d:8c:b4:69:ef:aa:bb:75:17:
40:b7:5a:2e:d8:b5:d8:f1:a6:26:74:09:24:7f:43:69:de:ce:
0d:a8:af:66:ea:c4:ba:5c:17:4d:b1:0c:ff:ca:4f:17:fe:fb:
f7:27:5d:52:f0:70:32:85:46:7d:98:79:bc:1c:9b:e9:f0:10:
27:6f:02:51:c7:29:4c:68:73:c4:32:e8:e2:71:d4:73:3d:63:
57:26:85:dc:f0:23:5f:3a:a5:12:6a:f4:53:d9:48:63:e0:03:
59:53:8e:a0:3c:60:7d:24:33:69:d4:fd:23:39:98:b6:aa:d4:
48:35:31:54:da:3e:78:0f:b3:bf:b5:91:24:51:6b:16:51:94:
78:2b:4a:6a:b0:60:b0:e3:72:37:5d:86:a3:b6:c7:80:67:f2:
5b:23:e0:a0:f0:11:e1:35:6b:ce:4f:6e:a6:7f:4e:9f:61:90:
9c:b2:f6:0a:72:d8:e4:25:e6:0a:82:a8:15:a7:74:64:3c:f9:
66:ad:09:b4:e2:28:16:a7:15:ab:86:64:52:65:26:c8:28:32:
9d:80:c2:a2:1d:4c:20:05:16:d9:a4:5d:b6:20:a9:3c:1e:80:
dc:e1:df:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:56 2024 by rpki-client on console-fra.rpki-client.org