Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gggbytX35uoCxbFeOKu4U77D7LM.roa
File: gggbytX35uoCxbFeOKu4U77D7LM.roa (raw, json)
Hash identifier: zVIrxxlxfbMJrELlMobZT2meTjGAZzja0BeIjNxVMDw=
Subject key identifier: 82:08:1B:CA:D5:F7:E6:EA:02:C5:B1:5E:38:AB:B8:53:BE:C3:EC:B3
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gggbytX35uoCxbFeOKu4U77D7LM.roa
Signing time: Thu 15 Sep 2022 02:44:57 +0000
ROA not before: Thu 15 Sep 2022 02:44:57 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 123.195.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:44:57 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=82081BCAD5F7E6EA02C5B15E38ABB853BEC3ECB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3e:fc:1b:2f:0a:66:63:2e:32:c4:b4:7a:c4:
b4:81:ef:44:2f:51:bb:f1:aa:b2:12:ae:d3:a0:91:
41:7a:88:01:3e:39:bd:31:61:d1:3d:b3:00:d7:04:
e8:96:6e:6a:14:6f:af:00:bc:91:ea:75:af:84:79:
18:75:1c:aa:62:b2:00:46:de:f1:c6:ff:f0:b5:19:
36:97:55:8a:b2:f7:70:05:01:d6:8f:9e:8b:c9:ef:
20:60:90:fe:bd:aa:cb:31:e5:8c:04:07:99:57:e5:
16:e0:8b:69:e5:c0:0a:9e:d1:f0:6e:31:86:34:d6:
ca:4d:18:1b:26:04:56:2d:a6:8a:d7:c8:bd:1c:02:
ab:75:d8:f8:69:9c:3a:2c:85:29:eb:ac:11:b8:46:
34:7d:ef:3a:a8:59:31:26:c6:8d:5b:86:dd:73:a3:
f6:80:c2:a6:d1:33:d1:78:e1:62:1c:18:d7:15:f0:
3b:49:49:73:32:69:32:8a:f1:ba:1e:84:22:ff:fe:
cb:8c:26:1c:0d:a4:97:13:7a:45:eb:21:c5:aa:63:
7a:3f:bb:24:fa:43:78:76:32:36:11:de:4c:5d:70:
24:26:9c:63:f2:0d:0f:85:9a:cd:ac:bb:82:7f:cd:
f5:30:29:72:25:2e:80:42:b6:07:f2:fa:93:51:98:
68:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:08:1B:CA:D5:F7:E6:EA:02:C5:B1:5E:38:AB:B8:53:BE:C3:EC:B3
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gggbytX35uoCxbFeOKu4U77D7LM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.244.0/24
Signature Algorithm: sha256WithRSAEncryption
20:44:64:f8:5a:55:de:80:43:45:7a:0b:d2:e1:b6:68:ee:b0:
12:7a:bd:b2:df:f9:a7:de:e2:60:09:a8:26:e8:95:15:95:ea:
57:ad:93:8f:98:10:b6:34:ea:70:24:b8:39:cd:2b:c9:11:f5:
4c:17:e1:96:00:54:bf:a6:4d:6a:d5:f3:f8:83:b6:f2:85:e5:
ca:8b:77:4a:b3:4d:c2:f6:9b:e4:ae:e7:e9:35:76:87:36:47:
04:e3:d6:27:b8:74:4c:1b:c0:a3:ce:89:d5:7d:d2:dd:a3:10:
45:a3:03:f6:61:42:65:6c:4f:8e:4d:ba:68:fd:ea:c3:b5:b0:
28:1f:a4:fc:f0:c3:f0:a8:89:f3:3d:75:f5:28:c4:9d:08:91:
04:a3:2e:1f:32:b3:e6:50:68:6b:c7:c1:a1:97:45:71:e7:4f:
16:31:3f:94:f8:fe:08:f6:10:60:96:c6:27:f3:60:d4:16:97:
e6:23:e5:a4:7d:c4:d1:44:ce:c1:9d:0c:82:69:a7:cd:6c:76:
24:2b:aa:25:b3:ae:23:7e:ea:62:bc:69:4a:5b:55:70:76:b2:
1d:cf:fe:ba:37:97:2f:9f:f9:a9:09:51:e2:52:a6:e6:2d:f3:
d3:dd:bc:05:a3:d4:32:57:e7:c8:12:88:51:7a:de:be:7f:6f:
fc:07:82:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:56 2024 by rpki-client on console-fra.rpki-client.org