Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iAiI-CXJIMvn44qSRrJ5mBn7J3c.roa
File: iAiI-CXJIMvn44qSRrJ5mBn7J3c.roa (raw, json)
Hash identifier: QdsPdpzRprIqQEWYiflJcwJiPIk3e4PZbU6VWdRk9Pw=
Subject key identifier: 88:08:88:F8:25:C9:20:CB:E7:E3:8A:92:46:B2:79:98:19:FB:27:77
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1ECD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iAiI-CXJIMvn44qSRrJ5mBn7J3c.roa
Signing time: Thu 26 May 2022 03:25:55 +0000
ROA not before: Thu 26 May 2022 03:25:55 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.194.104.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7885 (0x1ecd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: May 26 03:25:55 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=880888F825C920CBE7E38A9246B2799819FB2777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:20:ea:7e:9d:88:72:37:96:7d:ba:20:89:1d:
22:86:55:2e:0a:02:c3:16:05:d8:8b:ac:bc:76:5e:
8b:e9:d1:c1:d2:b1:b4:dd:ff:df:ce:ed:bb:06:f1:
4b:f6:7b:ff:ae:19:40:66:19:12:20:50:22:8c:14:
a7:53:be:fd:85:d8:5b:d2:e7:16:97:69:be:0a:dd:
b5:af:c6:2f:7a:86:5a:3e:be:db:6b:e0:af:a3:43:
d1:7c:dc:4a:ac:b1:06:7e:42:7c:6c:cc:af:a9:d4:
d9:87:a6:60:53:cc:95:5d:ec:07:78:f1:8c:cb:aa:
98:21:ed:8c:04:16:90:30:5a:79:70:25:32:58:a2:
7d:e5:f6:f4:dd:47:93:2c:38:10:b7:0c:c6:01:5a:
0e:78:85:e6:66:6a:db:8a:57:2e:27:fc:77:6c:90:
63:a0:f4:35:2f:50:7d:c8:18:37:26:85:d6:c1:bd:
fe:9a:81:04:07:32:ee:25:c0:df:11:f9:0d:4f:28:
b1:e8:8a:7c:f8:4d:0c:c1:6f:ef:9b:52:7c:74:53:
08:2d:df:3f:70:37:7b:15:c5:ac:84:94:5f:b5:fb:
cc:9c:50:79:f5:49:09:67:a2:bc:40:bc:6c:63:59:
dd:da:fd:ad:09:15:76:85:86:57:00:bd:b1:8e:0b:
19:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:08:88:F8:25:C9:20:CB:E7:E3:8A:92:46:B2:79:98:19:FB:27:77
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iAiI-CXJIMvn44qSRrJ5mBn7J3c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.104.0/21
Signature Algorithm: sha256WithRSAEncryption
0b:bd:1a:55:23:cf:36:fa:47:94:06:ac:79:08:ec:e5:c7:74:
92:0d:27:5d:0b:57:b2:0e:9c:ce:8c:d6:00:f4:33:96:a8:34:
b8:00:d3:03:22:6c:30:7c:5c:cd:ab:e5:cb:7f:9d:76:94:e8:
e1:ab:00:88:b0:ce:d4:64:ee:e3:b1:94:c9:d3:ab:4f:a3:e0:
41:7b:97:85:15:59:06:da:b6:38:5d:64:48:08:f1:9d:78:70:
c1:01:dd:c7:f0:16:a4:12:8b:ce:65:66:30:9c:ba:53:d5:55:
f2:65:9d:68:db:78:05:fc:2c:b3:93:eb:b3:44:d7:ac:c4:be:
9f:4d:fd:19:ba:4c:c2:cf:52:66:7c:78:da:72:6e:42:0f:de:
67:b9:02:4b:11:20:be:9d:3d:91:7f:5c:89:c1:02:36:34:21:
ab:9f:40:7c:0e:45:34:19:11:19:c5:4a:28:0c:3c:34:ef:6c:
c9:f7:12:e2:fb:bf:9c:25:0e:ce:7b:6e:a3:9e:11:f2:63:fb:
40:55:f9:47:98:1c:ed:15:18:8c:d5:41:86:a4:5f:e3:eb:fb:
9d:18:2e:01:95:d5:d8:82:07:91:1b:36:00:8b:28:38:be:fa:
57:ff:1c:db:b2:bd:15:f2:d0:14:88:dc:c3:f1:d9:9a:0d:1e:
38:c8:13:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:26 2023 by rpki-client on console-ams.rpki-client.org