Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fouU31raJJdG3jXiZhiSsn-UKZs.roa
File: fouU31raJJdG3jXiZhiSsn-UKZs.roa (raw, json)
Hash identifier: ipcXTXXpcV9qswoIcvNbZMO+THJH+wgP4KOG6yKxuvA=
Subject key identifier: 7E:8B:94:DF:5A:DA:24:97:46:DE:35:E2:66:18:92:B2:7F:94:29:9B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2344
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fouU31raJJdG3jXiZhiSsn-UKZs.roa
Signing time: Fri 25 Nov 2022 04:42:16 +0000
ROA not before: Fri 25 Nov 2022 04:42:16 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.108.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9028 (0x2344)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:42:16 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7E8B94DF5ADA249746DE35E2661892B27F94299B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9f:11:d0:6f:ca:36:f8:c0:d3:b4:93:c0:be:
dd:f2:98:ce:ce:d7:08:6b:0f:11:10:cd:af:0f:06:
d7:e7:85:22:8c:04:d3:33:5f:99:d7:2d:e7:40:13:
ea:f8:88:7c:b7:96:9a:b9:ef:84:e2:42:10:a1:69:
47:9a:af:1f:f0:8b:85:ed:dc:dc:16:6f:8c:7b:07:
db:ae:e6:17:23:57:b2:aa:43:4b:8a:6d:7b:8d:71:
8b:d4:72:e9:a6:eb:86:26:56:2d:73:93:10:1a:d9:
40:0e:97:6a:0e:e7:c3:9a:a7:e9:c7:b3:0d:39:04:
71:1d:ab:a3:8a:ae:11:b7:33:34:eb:57:d5:a8:de:
99:c5:75:f9:c5:fd:e4:b7:a8:77:88:e9:f6:a1:c4:
6c:81:3d:75:0a:3e:4d:92:23:c3:43:47:c9:da:b6:
b2:25:d6:6b:5f:05:f9:06:5b:f6:74:67:55:3e:0b:
ed:7e:3e:b6:0d:e5:24:7c:49:95:a5:0d:62:60:01:
0e:45:c9:cd:26:dc:7a:54:bb:dd:aa:97:72:ec:72:
03:10:15:3f:86:0b:f8:93:90:56:04:99:fa:d5:f4:
de:c6:88:31:85:43:39:d6:d9:77:dd:cb:b4:11:00:
c7:bb:fc:af:81:64:be:87:55:26:f9:ba:b3:25:85:
f0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8B:94:DF:5A:DA:24:97:46:DE:35:E2:66:18:92:B2:7F:94:29:9B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fouU31raJJdG3jXiZhiSsn-UKZs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.108.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:4c:6e:0c:d1:05:5b:c6:57:f5:a6:3a:ef:b1:e9:11:b7:c0:
fe:c4:cf:4f:95:7f:55:b2:a4:4e:1a:86:9c:09:94:6c:2f:37:
89:4b:7c:fb:72:14:fd:75:05:bb:b9:4b:5d:04:63:ca:1d:38:
26:a2:4d:54:06:80:10:75:eb:1b:ca:85:37:e1:0a:6a:87:b3:
b8:44:67:aa:61:b9:35:3d:81:2e:6f:a4:da:ca:d2:92:02:fd:
05:d2:f3:ac:44:e0:20:94:c7:2d:65:38:db:46:39:f1:7d:8b:
bd:22:13:d9:a6:d9:54:22:7e:c2:14:6b:fd:f8:14:02:d4:87:
b9:b7:15:ec:17:2c:ba:08:1a:bc:f6:4f:72:f8:bd:03:33:ad:
7f:3d:af:09:f0:ef:e0:30:eb:4b:35:38:49:dd:fe:6e:bb:38:
f3:fd:5a:ae:11:33:d2:72:1d:16:39:01:a2:eb:c8:d6:2f:42:
4d:4a:6b:34:e0:bf:2d:89:d3:95:31:89:58:c3:c5:46:b2:6b:
59:28:0b:35:a8:31:32:78:81:79:ae:c5:b0:cb:e2:1a:1e:79:
ae:3e:27:52:03:50:fd:4c:01:1f:07:d0:db:79:c1:b1:2b:0d:
6c:5c:60:d2:96:ac:b4:3d:26:cd:0b:17:a5:0c:a4:5e:c9:8b:
be:67:98:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:37 2024 by rpki-client on console-ams.rpki-client.org