Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iioK_YmZu6KlDrMwaGEr8kampEo.roa
File: iioK_YmZu6KlDrMwaGEr8kampEo.roa (raw, json)
Hash identifier: 1EK+IMdCjjPagiWe75BrsNl6TAMDEXJvhTcFetqLWl8=
Subject key identifier: 8A:2A:0A:FD:89:99:BB:A2:A5:0E:B3:30:68:61:2B:F2:46:A6:A4:4A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2262
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iioK_YmZu6KlDrMwaGEr8kampEo.roa
Signing time: Fri 25 Nov 2022 04:41:06 +0000
ROA not before: Fri 25 Nov 2022 04:41:06 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 123.195.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8802 (0x2262)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:06 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8A2A0AFD8999BBA2A50EB33068612BF246A6A44A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c0:53:05:de:19:88:01:14:fc:c4:f7:b9:69:
39:15:d3:14:44:22:33:32:2f:b9:3d:8f:35:66:e9:
1a:b9:f1:b3:c9:ef:e5:8c:da:25:f7:b1:95:52:f0:
38:a9:5f:a3:d4:48:1c:b1:18:cb:c2:4f:5e:b6:58:
83:5e:e9:df:97:9c:4e:48:1b:11:60:f1:c3:98:2d:
33:71:e3:68:0d:81:93:d2:95:cf:4d:ef:21:29:0a:
7c:6f:76:c1:fd:1d:2d:6c:f3:89:8f:d2:31:e9:d4:
9c:03:fb:59:7c:8b:1b:67:25:52:9d:9e:e8:68:94:
ff:36:ed:6b:b7:3c:08:36:23:06:75:9e:d0:03:43:
f9:51:1f:e5:87:21:93:16:09:41:72:90:a4:9a:de:
6d:1d:c7:85:58:37:60:7f:c1:5b:35:a6:12:a1:cf:
ea:c6:74:41:0d:34:06:e6:20:5c:db:03:27:02:9f:
b5:54:44:1e:ef:cc:b9:b5:11:07:1b:b4:fd:1b:e8:
69:1c:54:de:d2:e1:cf:24:59:04:a9:f5:70:f2:1a:
6b:8f:61:4c:b0:2d:79:58:53:f5:23:03:f0:a5:d1:
1d:a7:9a:15:2a:5f:ca:64:fb:c4:79:03:3e:dd:19:
b3:35:bc:f4:40:cc:29:50:60:06:e9:91:b0:67:f6:
cb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2A:0A:FD:89:99:BB:A2:A5:0E:B3:30:68:61:2B:F2:46:A6:A4:4A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iioK_YmZu6KlDrMwaGEr8kampEo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.0.0/16
Signature Algorithm: sha256WithRSAEncryption
44:d6:f4:2f:f8:55:41:77:d6:db:c3:05:8a:95:81:ea:1e:2a:
10:01:51:85:11:25:35:34:e3:ca:9a:17:e1:e4:cf:58:e6:f8:
9c:e9:b3:db:cc:fc:6d:5b:c7:6c:3d:cf:b1:29:2e:e5:f9:44:
df:84:47:33:40:9d:6f:f4:47:05:61:7a:ca:03:a4:fc:25:08:
81:0d:a0:b1:a2:00:b3:00:3d:1a:ad:93:18:fc:90:2e:cf:d6:
1d:d3:50:95:71:16:3a:aa:2a:44:37:fa:00:af:57:f9:9e:59:
95:43:a2:48:18:75:4e:88:6d:c6:84:8d:c2:4f:d5:56:81:27:
f7:d1:fe:4e:27:72:a3:94:6f:41:60:7e:c5:26:fd:59:9b:bd:
1f:9f:14:83:8c:87:31:ce:ae:2b:ce:ba:f1:eb:49:63:18:69:
19:c4:47:87:d2:3d:f2:5b:be:c1:5d:82:e3:ab:0f:17:1b:15:
f3:b0:3d:71:45:29:c1:08:f1:49:37:da:ed:bc:7a:7f:87:37:
16:7c:fb:55:17:9e:50:cc:01:57:b0:df:62:87:9c:33:03:ee:
c9:61:03:74:10:25:60:b8:ce:36:2c:29:95:ed:23:ea:35:94:
8a:1f:77:c6:f3:91:42:b7:7b:b3:23:a7:b4:b0:b0:94:76:df:
68:35:19:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:38 2024 by rpki-client on console-ams.rpki-client.org