Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ikIT7OegiTlK2YKCWZ0t1wRdX-0.roa
File: ikIT7OegiTlK2YKCWZ0t1wRdX-0.roa (raw, json)
Hash identifier: YYFEsyB/BtsBZByWZ3s4ca7nAJPWjpRO8Re7Hi/JwTs=
Subject key identifier: 8A:42:13:EC:E7:A0:89:39:4A:D9:82:82:59:9D:2D:D7:04:5D:5F:ED
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ikIT7OegiTlK2YKCWZ0t1wRdX-0.roa
Signing time: Thu 15 Sep 2022 02:52:34 +0000
ROA not before: Thu 15 Sep 2022 02:52:34 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.8.128/26 maxlen: 26
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:34 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8A4213ECE7A089394AD98282599D2DD7045D5FED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:55:7c:8e:7c:22:c3:14:26:17:35:01:5f:17:
f4:bf:91:ed:82:c6:35:82:e8:11:1c:e1:3e:58:18:
2d:f9:07:c4:4c:1f:4a:85:52:d0:e3:c0:5f:0a:c7:
f5:ab:f5:44:90:b1:5d:fd:45:b0:e8:8f:c8:ad:70:
ae:27:9d:31:d2:78:b4:22:28:41:cd:37:fc:fb:69:
c1:4a:be:f6:19:9d:e4:f8:e2:ea:eb:d3:ea:4c:7a:
e1:25:7b:14:7b:d7:24:60:3e:a1:82:bb:9a:15:d3:
c7:7c:2d:e8:5c:f2:18:06:cf:65:d6:5f:01:89:f7:
54:55:6e:ec:01:69:2d:bc:da:fd:18:93:2a:4f:93:
e4:ac:38:63:b1:eb:17:70:1b:88:0e:07:e8:68:7b:
0b:9f:db:07:a5:c6:06:50:af:4e:bc:c9:2b:59:89:
12:12:15:df:37:3f:03:fb:18:ab:32:b2:09:ee:e4:
3b:e5:9b:c8:f3:3e:7d:bb:87:cc:ac:ca:68:f7:dc:
73:61:00:e6:23:75:e1:e3:9a:e6:b0:e5:8c:0d:fc:
49:73:15:67:04:dd:32:88:f0:0a:eb:17:d5:85:a8:
a9:73:02:56:af:c0:ce:79:74:c6:91:7d:cd:9d:2d:
61:2b:ec:25:8a:01:d1:b9:35:dd:20:2f:ba:a4:c2:
e5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:42:13:EC:E7:A0:89:39:4A:D9:82:82:59:9D:2D:D7:04:5D:5F:ED
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ikIT7OegiTlK2YKCWZ0t1wRdX-0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.8.128/26
Signature Algorithm: sha256WithRSAEncryption
7e:7b:61:0f:e6:9d:f7:78:8c:77:f4:71:05:54:a9:3b:dd:21:
e1:ff:c9:81:4e:7e:33:c8:26:77:16:a0:17:62:52:b0:60:b4:
fb:26:1c:e8:6f:31:15:c7:12:7b:74:90:e5:6b:d1:5f:75:5b:
03:5e:66:68:0c:03:a1:35:28:5d:05:91:67:5f:ca:a1:66:fa:
bf:8d:3f:bc:3b:48:70:6a:90:42:f8:f2:2e:66:56:44:52:fd:
f1:8a:69:42:67:1f:95:bb:b9:0a:37:08:45:36:4c:f1:4a:da:
83:34:36:9b:b6:ec:3e:38:b3:04:8b:33:b4:6f:29:9b:a6:8c:
9a:46:fc:1a:8e:27:c1:ab:a9:2b:7d:12:2c:79:9b:d4:c0:5f:
6f:71:9d:b5:e4:dc:14:b1:0f:47:3e:e9:07:d4:8d:1f:ba:16:
ed:68:79:a3:71:05:50:8b:01:f8:58:4b:7a:c3:56:8b:9c:30:
df:37:40:fc:bc:80:d1:8f:7e:af:af:2c:bf:18:3a:12:27:5a:
b2:0b:20:8b:e3:bd:d9:bd:ab:54:7c:6a:6e:07:20:bf:73:e0:
cb:aa:5c:cb:48:30:5a:3a:68:3b:e4:24:28:14:db:28:17:38:
0a:73:8c:ad:38:f4:53:58:e6:57:c2:a9:24:59:26:9e:6a:62:
6d:c7:0d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:38 2024 by rpki-client on console-ams.rpki-client.org