Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gJU8gHUiHr4n9igENw3IwhBpLMY.roa
File: gJU8gHUiHr4n9igENw3IwhBpLMY.roa (raw, json)
Hash identifier: mkDEhCqVn8YeMlfcMNCt3DS4WFysEMNlMGmkDo2jsG8=
Subject key identifier: 80:95:3C:80:75:22:1E:BE:27:F6:28:04:37:0D:C8:C2:10:69:2C:C6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1E6D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gJU8gHUiHr4n9igENw3IwhBpLMY.roa
Signing time: Tue 03 May 2022 03:51:00 +0000
ROA not before: Tue 03 May 2022 03:51:00 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.195.176.0/20 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7789 (0x1e6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: May 3 03:51:00 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=80953C8075221EBE27F62804370DC8C210692CC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:58:0b:44:98:6b:84:cf:6c:51:1f:d0:8a:6b:
27:7f:f3:d1:3c:df:7d:b6:98:83:ed:59:e4:10:db:
3c:bd:42:0d:ce:a3:e2:a5:48:c3:e3:03:02:20:5b:
da:d4:b8:3c:ab:a9:6b:27:f0:17:63:d5:95:87:3d:
9f:d2:f4:00:52:c9:75:71:dd:46:1d:1b:94:f9:e9:
71:28:cb:32:9b:93:eb:57:84:98:24:4d:9f:92:e0:
38:cf:46:ad:d9:1b:6f:67:2a:f7:37:f2:59:66:59:
55:3c:e5:4c:a0:30:97:d0:b5:4e:d8:53:7c:b0:73:
68:fa:dd:09:69:4a:89:14:d6:96:eb:9f:38:07:a4:
9a:82:ea:1f:9c:fe:6f:3b:2d:5d:bc:1e:1c:36:ce:
b1:9c:66:58:75:6a:71:35:4a:99:17:ac:b8:b2:8c:
f4:08:f7:7c:71:dd:a2:fd:ac:18:ac:c8:69:3d:40:
4b:fa:73:be:e2:82:62:54:a0:04:f7:30:62:bb:10:
c0:e2:57:71:4c:69:1b:48:f5:85:8b:bc:28:22:81:
c7:a3:2a:c1:59:20:05:b7:a8:eb:9a:9b:98:31:da:
72:fc:fb:50:91:41:bb:90:21:60:ff:47:a2:99:98:
34:85:09:86:37:82:53:1a:ad:c4:75:1c:4f:6b:38:
5a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:95:3C:80:75:22:1E:BE:27:F6:28:04:37:0D:C8:C2:10:69:2C:C6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gJU8gHUiHr4n9igENw3IwhBpLMY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.176.0/20
Signature Algorithm: sha256WithRSAEncryption
4f:4f:c2:98:0f:9a:05:98:25:06:81:d4:52:48:5d:f7:4b:4a:
57:bd:40:06:61:b0:76:5d:a4:87:70:15:ae:f1:22:e1:22:db:
18:ac:85:14:c5:46:a3:16:dc:12:2c:e7:72:ff:64:47:9d:cd:
52:5d:f7:70:6e:04:6f:0c:89:c0:99:a8:a2:01:89:74:ae:91:
49:f0:ea:cd:a4:38:ba:2c:f7:38:45:a1:24:de:f1:0b:a8:81:
1e:01:99:b0:44:f8:29:62:30:5e:06:f0:77:67:a8:c7:bf:9e:
fb:5c:20:12:31:24:94:67:e7:c1:e5:9c:3e:29:46:c9:30:74:
fe:d8:cd:1f:3e:66:4d:8c:35:75:f0:3b:6b:c6:60:be:30:83:
53:96:f9:57:7b:d3:4c:2a:2e:21:d7:35:e4:19:39:94:37:bf:
aa:34:d7:a3:58:64:bb:f8:f6:0d:2f:f4:40:90:71:08:63:c0:
84:ea:b0:fb:b8:ae:e1:f5:8c:19:78:8c:4d:af:ec:87:2a:a8:
02:5d:3e:8a:f2:23:d8:42:da:1c:97:69:76:b9:7c:66:b6:45:
8c:e8:5b:bd:73:a0:7e:9d:fc:da:07:f6:f8:71:98:4b:65:3e:
60:32:c3:11:0d:7e:7a:eb:ea:69:a5:06:42:77:82:c3:8f:d1:
0a:d6:68:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:56 2024 by rpki-client on console-fra.rpki-client.org