Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fZE14D-QUpC-nRY2w4C6L0jX0hc.roa
File: fZE14D-QUpC-nRY2w4C6L0jX0hc.roa (raw, json)
Hash identifier: mPZ4LcY5PB55KJl8PV/9XBg+Y0XODoDAbcu8p/Ao2Ew=
Subject key identifier: 7D:91:35:E0:3F:90:52:90:BE:9D:16:36:C3:80:BA:2F:48:D7:D2:17
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1A93
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fZE14D-QUpC-nRY2w4C6L0jX0hc.roa
Signing time: Wed 29 Sep 2021 02:45:30 +0000
ROA not before: Wed 29 Sep 2021 02:45:30 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.192.100.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6803 (0x1a93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:45:30 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=7D9135E03F905290BE9D1636C380BA2F48D7D217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b5:a2:43:d9:1b:72:0a:9a:ab:38:c5:d7:75:
ee:ae:c4:9b:7c:0a:cb:58:a8:db:80:81:06:a1:6e:
66:44:20:ce:4c:34:f9:a3:23:76:ce:30:82:f5:60:
dd:cd:cd:19:f0:f1:96:c5:ca:ec:ac:82:92:25:3d:
87:cf:b1:b3:88:fa:0a:32:e0:d3:0a:d6:ec:4f:9c:
01:52:34:09:35:95:6e:2a:d0:f8:b6:5d:7a:ae:6f:
f9:02:d3:b1:5a:45:87:29:da:da:f0:49:66:98:9f:
09:33:3f:bb:c5:b4:c3:01:73:9d:2a:e7:e3:36:20:
3b:64:f5:a2:29:3d:6a:8d:78:6d:22:4c:30:72:8d:
e8:98:5e:14:f7:58:a9:50:18:d7:24:80:b2:03:e0:
23:07:eb:78:2f:03:bb:3b:96:3a:d4:83:41:ee:89:
ae:8f:d7:64:e0:45:f8:8f:77:37:97:f5:ac:c0:87:
0e:5b:66:3c:42:02:f6:c1:e3:45:54:b4:31:46:a1:
72:aa:7c:50:75:07:60:09:83:ce:99:3c:91:7f:4e:
38:e6:80:5f:ad:59:32:97:16:93:9e:3f:48:7a:6f:
5d:7f:8c:fe:8f:47:5f:4a:34:1f:d2:02:70:35:dd:
eb:ff:ad:50:d6:c4:3a:d5:e9:75:3d:fe:ae:bb:67:
d4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:91:35:E0:3F:90:52:90:BE:9D:16:36:C3:80:BA:2F:48:D7:D2:17
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fZE14D-QUpC-nRY2w4C6L0jX0hc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.100.0/22
Signature Algorithm: sha256WithRSAEncryption
54:80:10:c9:96:dc:a5:83:44:f1:c3:b1:61:14:9d:90:19:3a:
32:59:13:65:63:79:a3:28:19:05:76:db:f0:a4:6e:b1:c5:23:
23:e3:91:c5:3d:2b:3a:b2:34:f2:e0:8b:1a:20:2b:53:06:22:
23:f6:4e:54:e2:54:45:b6:0b:30:eb:05:e4:f8:17:7d:f2:b6:
8a:ae:5c:c8:04:20:a6:72:50:93:ed:41:42:32:30:5e:bf:9f:
78:06:5b:38:05:0c:37:e8:e8:58:d4:fa:1f:dd:8c:a1:2a:db:
b9:42:32:a6:58:4c:78:56:c4:bc:bc:cb:19:c8:e4:e1:8a:e7:
34:77:ec:9e:51:35:5b:92:cd:2d:af:af:73:98:29:7d:a9:4d:
89:13:4f:bb:84:4b:93:fb:d9:e1:46:c6:bb:0c:5b:98:2f:a4:
b9:dd:28:9e:41:0c:37:29:d7:5e:a1:27:80:72:8b:b5:a8:61:
c0:1d:d4:3a:8c:2d:ac:f6:a8:80:88:cb:13:8a:0b:10:4b:c7:
85:46:55:fc:57:8f:f9:bc:f4:28:f4:b7:9b:cd:ac:30:0a:45:
0c:6a:b9:31:56:01:6f:06:f6:dc:3a:69:1e:07:1b:0c:93:5c:
1b:c1:1e:19:8c:31:77:ef:1d:07:0c:c9:f9:46:b9:58:27:d2:
89:63:cc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:25 2023 by rpki-client on console-ams.rpki-client.org