Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hx64mcUBsSerndjGJFximEJgXow.roa
File: hx64mcUBsSerndjGJFximEJgXow.roa (raw, json)
Hash identifier: gSNnqV0zscBCgCFYv5ZgYDzFqOnT6gm6VAW1042cDXo=
Subject key identifier: 87:1E:B8:99:C5:01:B1:27:AB:9D:D8:C6:24:5C:62:98:42:60:5E:8C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hx64mcUBsSerndjGJFximEJgXow.roa
Signing time: Thu 15 Sep 2022 02:53:45 +0000
ROA not before: Thu 15 Sep 2022 02:53:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.160.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:45 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=871EB899C501B127AB9DD8C6245C629842605E8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:29:f5:27:cf:e1:63:bb:f7:82:4a:ed:1d:f5:
4e:38:2a:d2:c0:69:ae:b4:c1:7a:84:91:62:3b:75:
af:83:4b:69:66:e3:ff:48:e7:e3:c5:b3:27:9f:ae:
ea:2d:24:01:20:55:ee:e9:da:cc:99:46:ef:66:14:
00:d0:36:fc:c5:01:ff:5d:8d:6b:c0:fc:95:0a:f8:
90:ff:05:be:ab:7b:4c:6d:99:74:e5:be:28:83:67:
7d:70:ae:c5:4a:a5:20:ed:16:e0:0b:d0:a2:70:b3:
87:fc:ab:bd:25:e6:5b:50:cd:c9:72:3a:73:5d:cc:
0b:77:9f:da:50:c8:09:1f:21:1b:b0:36:a1:42:b3:
ab:52:68:51:2a:ce:b9:b4:d5:13:a3:44:5a:ea:27:
15:98:54:1b:2b:21:0e:95:49:6e:9e:ee:70:30:ee:
36:7c:95:5d:87:bc:fc:95:aa:d6:4d:da:a8:45:c9:
2f:c2:f1:9c:fa:b2:7a:da:5e:07:50:be:6b:d0:91:
fe:60:91:03:ea:6c:45:c6:13:f9:39:75:0b:1e:55:
a9:d5:59:b4:bb:22:b6:3b:2d:96:ec:e9:6e:b0:88:
9e:c5:ab:67:dd:ac:6f:6b:e1:53:6c:06:3a:bf:b7:
ef:1e:98:13:b8:68:a3:f2:dc:45:e1:c5:04:1d:31:
ce:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:1E:B8:99:C5:01:B1:27:AB:9D:D8:C6:24:5C:62:98:42:60:5E:8C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hx64mcUBsSerndjGJFximEJgXow.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.160.0/21
Signature Algorithm: sha256WithRSAEncryption
66:f7:90:26:eb:99:6c:b2:ef:d8:26:9b:e2:28:66:d8:01:40:
f1:67:dc:32:30:f6:4c:cc:b9:1d:ef:bb:ea:ab:9a:24:4d:5f:
86:05:7e:51:a5:52:d2:fe:7a:b1:69:70:9a:46:93:44:6d:23:
08:00:8e:75:50:74:fc:41:0d:fd:c4:4d:22:f6:5d:7d:4a:45:
b6:d4:82:f3:99:4a:8e:3c:5d:cf:53:62:aa:01:7b:96:11:ce:
7e:24:68:bd:12:c3:bf:d0:94:58:82:4c:dc:c4:1b:a7:f9:33:
cb:12:0e:6c:70:73:31:eb:86:60:13:2a:11:dd:a6:e8:b8:ec:
84:05:81:5a:bf:ec:5a:45:37:73:4d:c9:cb:b1:fe:4f:20:85:
f4:91:cf:bc:76:2c:c1:e2:ba:32:b7:47:3c:14:a1:dd:fd:0c:
81:73:99:f8:e0:42:d0:0c:4d:f8:b5:31:c6:8d:83:9c:93:56:
43:02:eb:e4:d9:f9:a9:43:90:9a:5a:7a:c4:30:6a:5e:da:78:
c6:d7:7c:a4:2b:5e:7d:c6:dc:45:ad:c0:77:c2:c8:f9:d2:a4:
4e:ef:1d:ce:20:5a:22:62:20:00:02:b0:f1:c3:d6:7f:96:6c:
6d:a6:1f:1c:6d:48:b2:86:0f:65:c5:51:69:56:a7:4d:be:a0:
91:a9:96:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:37 2024 by rpki-client on console-ams.rpki-client.org