Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hhesT_Yf3jWYk2TG7qSXFORZwac.roa
File: hhesT_Yf3jWYk2TG7qSXFORZwac.roa (raw, json)
Hash identifier: Mm9LMqdPzIaIv6y4LVLMS8ofVcTNDuIpuMMCyGOy1dw=
Subject key identifier: 86:17:AC:4F:F6:1F:DE:35:98:93:64:C6:EE:A4:97:14:E4:59:C1:A7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hhesT_Yf3jWYk2TG7qSXFORZwac.roa
Signing time: Thu 15 Sep 2022 02:46:08 +0000
ROA not before: Thu 15 Sep 2022 02:46:08 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.160.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:08 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8617AC4FF61FDE35989364C6EEA49714E459C1A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d4:91:0c:76:1c:73:59:2f:fd:68:f1:c5:f6:
6a:b0:d2:a3:f8:52:1b:15:cf:dd:c8:6f:cd:1b:37:
ec:e2:35:63:96:df:da:a5:5b:2c:e8:7c:f2:88:b6:
75:36:1b:72:8e:e0:1e:27:33:d4:07:ff:f5:47:e7:
1a:57:3f:aa:eb:98:f6:f0:d5:de:e0:c1:ed:b2:2d:
f3:f4:06:fa:bc:b3:b6:8d:49:6a:07:8c:b1:cc:e5:
5d:3b:5a:5c:5b:b3:cd:78:3e:c9:2b:ef:0b:d3:fb:
3e:eb:1d:7e:f5:69:71:b9:c4:4a:f2:cf:a9:df:e9:
41:b3:96:69:c1:a8:67:c3:2f:95:42:1f:e8:10:7e:
b9:20:7e:78:83:7b:45:7d:e2:22:7c:a7:01:db:bf:
05:35:89:f0:0f:11:84:99:41:30:65:19:55:f9:8d:
51:a3:da:a4:be:66:f6:a1:f4:6a:fb:18:a6:b7:e6:
83:9d:7f:9d:bc:10:73:d1:81:c6:96:bb:f1:98:e7:
ea:14:4f:2f:38:3f:a8:0c:c0:8f:27:2b:02:2d:b0:
3d:65:a8:8c:7d:a3:2e:60:bc:84:66:1a:6e:f1:9b:
9c:2a:5c:cb:54:49:cb:1e:f6:3a:6e:d8:41:7f:41:
aa:6f:e7:56:67:07:da:c2:3e:a6:75:25:0f:23:b4:
61:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:17:AC:4F:F6:1F:DE:35:98:93:64:C6:EE:A4:97:14:E4:59:C1:A7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hhesT_Yf3jWYk2TG7qSXFORZwac.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.160.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:89:0e:98:89:e1:c9:91:d6:6c:5f:35:ee:3f:79:85:b4:60:
b6:5e:2a:1c:f2:71:3a:1f:05:f6:25:9e:98:34:3d:c0:2d:29:
4f:2c:8d:a6:cb:4b:7b:84:95:17:15:8b:83:70:7a:e7:23:c5:
d8:cf:f9:06:34:a8:d7:1b:4d:4b:b8:ea:84:1e:14:c7:6a:29:
24:32:c8:7e:6c:02:18:b3:cc:81:a5:50:7d:06:c3:91:8e:aa:
c4:0b:24:33:ae:a9:3e:79:cc:75:e4:6e:6b:0e:c8:43:a4:8a:
f7:10:ad:a7:2b:f5:cd:f6:45:cd:d2:c2:8a:73:25:d2:43:97:
c1:07:13:6d:16:8d:8b:4f:e3:40:d5:6b:3d:d2:90:84:3e:0e:
73:e0:d2:c6:ba:cc:9e:3c:4b:71:5d:3e:6b:81:de:e3:e0:1d:
df:0f:29:35:17:8b:5c:28:6e:53:72:14:3a:e3:ba:20:04:65:
d0:7c:05:d7:fa:8d:36:80:c3:bc:d3:6f:54:8e:ab:82:9f:7e:
be:af:1a:f7:ef:41:45:10:8b:bf:e0:8f:ad:42:b5:9b:3c:20:
1b:9b:ec:de:f9:dd:c2:c1:86:5a:d8:fc:d1:08:e9:55:f0:4b:
28:ff:ee:19:50:67:ec:02:f1:df:1a:8d:5c:a5:4f:19:bd:1c:
67:08:be:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:56 2024 by rpki-client on console-fra.rpki-client.org