Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gVJ4OsT4k42LLUyhnihrRMnQ8uc.roa
File: gVJ4OsT4k42LLUyhnihrRMnQ8uc.roa (raw, json)
Hash identifier: PQ5Hkur1QRQzzIxwDYHua46iTU3nF4lbdLuFMUiwBg8=
Subject key identifier: 81:52:78:3A:C4:F8:93:8D:8B:2D:4C:A1:9E:28:6B:44:C9:D0:F2:E7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1CD6
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gVJ4OsT4k42LLUyhnihrRMnQ8uc.roa
Signing time: Wed 29 Sep 2021 02:48:16 +0000
ROA not before: Wed 29 Sep 2021 02:48:16 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.192.248.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7382 (0x1cd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:16 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=8152783AC4F8938D8B2D4CA19E286B44C9D0F2E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:dd:2c:ce:76:ca:1f:c6:98:36:20:4b:cc:1c:
ad:05:5b:1e:8c:f2:f1:88:38:75:de:f2:6a:18:66:
05:4b:b7:b4:81:ba:a6:d4:69:0d:43:a3:83:86:19:
fd:0d:42:d5:7e:b5:40:a2:b2:e6:d4:90:25:62:6b:
4e:8f:12:3e:36:0d:da:a9:0d:be:96:f3:4b:d2:7b:
11:b5:1b:6b:71:21:23:36:b2:8f:c4:94:e6:67:f3:
83:0f:06:04:a2:b3:5f:57:2a:9d:f7:a8:af:f1:dd:
c2:81:76:14:12:07:99:c7:f5:4b:ff:e4:36:18:d4:
f5:48:5e:8d:8a:62:b5:42:c4:2d:0f:b6:74:80:52:
3a:8b:1c:be:f4:e6:69:62:fe:47:ff:1a:f5:35:8c:
99:eb:4c:a4:76:21:9b:59:37:81:55:41:00:00:32:
46:be:1c:0d:b9:93:ad:b1:23:ab:00:42:3e:6d:96:
ce:c4:ee:4e:03:98:fa:b6:58:a0:82:3e:64:53:b2:
ad:dc:a6:8a:84:93:b2:14:77:55:4d:bf:19:04:e6:
d8:6a:ac:4c:c5:11:4b:54:de:52:28:63:f9:fc:5f:
7f:aa:c2:c6:94:db:b8:8b:8c:75:54:0c:64:aa:1b:
69:4f:08:3b:93:48:ae:70:b3:27:d5:a6:76:6b:b5:
65:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:52:78:3A:C4:F8:93:8D:8B:2D:4C:A1:9E:28:6B:44:C9:D0:F2:E7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gVJ4OsT4k42LLUyhnihrRMnQ8uc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.248.0/22
Signature Algorithm: sha256WithRSAEncryption
85:7c:6f:d3:73:ca:e1:e4:3f:e3:84:3a:f7:5c:89:77:d4:3f:
6a:ed:05:1c:4d:46:f0:a3:b0:f2:2d:ba:31:80:ab:6f:a2:2d:
3e:57:b1:75:cc:bd:04:e2:48:bf:f8:a9:9a:c6:f7:f2:1f:e4:
66:bb:a9:3c:8e:b3:4e:ae:fc:99:31:84:a1:b1:da:29:cb:39:
3f:9d:be:08:1e:70:97:a4:33:fb:98:02:d8:56:f2:ad:ef:29:
76:c0:a1:a3:9f:c2:02:77:fc:0d:9c:56:cd:ed:a9:e3:38:bd:
65:0e:28:7b:3d:68:90:0a:25:aa:3c:ca:96:0a:15:24:36:10:
7d:21:12:eb:8e:a9:57:49:41:c8:c9:8e:94:19:d4:d4:00:4d:
7f:79:64:3a:9f:5b:73:50:a4:9d:9e:87:bf:d4:9e:20:24:94:
37:e5:8e:2c:d2:61:b7:57:3e:bf:e2:d1:44:96:72:37:a1:40:
01:ea:7a:e6:2b:4c:7e:bb:39:6e:b8:20:bf:83:05:31:e2:d6:
93:8d:a1:07:cb:3f:66:08:38:88:97:69:e6:f7:13:30:c8:42:
5a:aa:1b:41:8e:6b:f9:92:95:a1:c6:ef:15:8f:7d:7c:eb:ea:
d2:3f:48:c3:c1:bd:9a:2c:32:83:8b:db:c7:28:bb:51:ae:9f:
5b:b3:ce:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:25 2023 by rpki-client on console-ams.rpki-client.org