Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/icXe4f6ff1y0owu_yEmZNNP3hG4.roa
File: icXe4f6ff1y0owu_yEmZNNP3hG4.roa (raw, json)
Hash identifier: pALcVUeoNDkPtiPFkzzMRML5/5pt1gRTbpmk30MoGnU=
Subject key identifier: 89:C5:DE:E1:FE:9F:7F:5C:B4:A3:0B:BF:C8:49:99:34:D3:F7:84:6E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 205D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/icXe4f6ff1y0owu_yEmZNNP3hG4.roa
Signing time: Fri 25 Nov 2022 04:38:37 +0000
ROA not before: Fri 25 Nov 2022 04:38:37 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 123.193.192.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8285 (0x205d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:37 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=89C5DEE1FE9F7F5CB4A30BBFC8499934D3F7846E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:58:80:aa:23:ba:3d:d4:d7:8a:c2:93:40:5c:
29:09:15:c5:7b:d5:65:70:4f:5b:83:6f:fe:bd:17:
59:25:2e:fa:b7:e2:5f:99:01:e1:84:32:33:e3:94:
20:69:6b:01:68:35:6f:59:c7:ca:93:5a:20:41:f0:
d3:d6:f5:66:21:10:0c:36:06:7b:8b:1d:35:35:b7:
98:27:cf:cb:2e:7c:ed:c8:16:ca:4d:86:2e:cc:0d:
02:06:03:3e:5f:f4:a2:e1:28:33:2f:a1:c2:94:6c:
52:1e:a2:24:ef:5b:05:a4:d6:8a:b3:cd:7b:21:9f:
cd:29:de:43:96:a5:db:f9:d5:4d:52:ea:b9:6e:0a:
22:96:7e:e9:08:b8:8d:e8:cb:97:04:7f:bd:71:d9:
9a:b2:32:4c:9f:65:42:19:04:9b:97:df:c3:a9:bc:
d2:9b:19:13:df:db:35:f9:d0:b1:ef:35:32:43:8b:
4e:70:7a:a7:4c:d0:64:fc:73:bf:8c:bb:ce:41:37:
26:91:15:47:30:dd:ad:a2:f1:e3:dd:b1:83:a4:09:
bb:c1:dd:cc:37:6d:c7:77:e2:73:d6:ac:6d:1c:4e:
2b:0b:1b:11:45:5a:1b:36:fc:49:e6:c9:f7:93:da:
df:cb:5c:3e:7b:ca:65:7d:8b:1b:eb:8f:c1:21:c7:
0e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C5:DE:E1:FE:9F:7F:5C:B4:A3:0B:BF:C8:49:99:34:D3:F7:84:6E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/icXe4f6ff1y0owu_yEmZNNP3hG4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.192.0/19
Signature Algorithm: sha256WithRSAEncryption
a7:8a:83:dd:86:aa:93:bb:6f:0a:4d:2b:e4:b0:4a:06:95:c3:
08:07:8f:69:23:5c:a9:cc:fc:6b:0e:5b:44:82:ff:ee:0b:c6:
25:6a:5c:80:fb:43:5b:b9:54:0b:4d:c5:af:4d:8f:0a:19:78:
76:ed:96:ec:ec:cc:96:55:88:02:88:cc:91:f1:90:41:a8:bf:
3d:ff:a8:cc:dc:ca:a8:d2:5b:26:10:71:06:a0:45:7f:a1:d4:
9e:7f:59:9d:57:c9:e5:43:aa:de:6f:ff:21:27:a1:f1:96:20:
f8:7e:9b:51:69:b0:f7:75:2c:63:46:78:fb:fa:f0:74:40:8c:
3a:e5:b1:97:66:77:c1:73:fd:f4:c4:02:f6:ba:1f:d5:26:04:
89:3b:9a:60:52:2d:24:89:a2:99:b9:79:71:9a:2a:84:26:4b:
2d:bc:a1:8f:61:3f:52:55:ad:95:c6:75:8a:88:93:b4:eb:40:
53:9a:13:53:ba:9b:ca:2a:ea:89:00:3c:a0:4a:b1:b3:76:af:
51:5b:4a:6d:dd:0a:60:14:14:aa:79:9a:d6:61:7a:3c:bc:04:
5f:d6:9b:c7:ef:ca:81:6b:38:71:0b:a0:83:e3:e0:34:9f:44:
42:89:bc:50:76:cf:69:88:bc:ee:45:e9:4a:e1:e3:fd:39:ce:
e9:bd:e5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:38 2024 by rpki-client on console-ams.rpki-client.org