Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ioQnwvr4HXYfD_t9RtOLR21riA4.roa
File: ioQnwvr4HXYfD_t9RtOLR21riA4.roa (raw, json)
Hash identifier: BqZtk26sk2O7RJCEQziN3kh1J1dxY7cLmmaNO93KvmU=
Subject key identifier: 8A:84:27:C2:FA:F8:1D:76:1F:0F:FB:7D:46:D3:8B:47:6D:6B:88:0E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ioQnwvr4HXYfD_t9RtOLR21riA4.roa
Signing time: Thu 15 Sep 2022 02:53:40 +0000
ROA not before: Thu 15 Sep 2022 02:53:40 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.223.128/26 maxlen: 26
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:40 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8A8427C2FAF81D761F0FFB7D46D38B476D6B880E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1e:eb:ef:5f:2b:18:22:1d:4c:2f:83:83:07:
d8:7e:9a:ae:de:e8:67:66:ec:18:61:d6:b2:80:4d:
14:d3:ff:d9:e4:36:21:ac:c5:d6:8d:e7:1f:1d:9a:
7c:98:62:a3:31:ba:05:14:c0:dc:89:ef:26:4d:11:
77:96:66:32:d3:5a:a2:31:59:9b:b7:19:ee:de:7d:
d0:e4:a3:5b:35:ae:8e:03:28:53:9d:a4:61:46:f0:
52:da:d7:59:56:26:ee:35:0a:14:d0:42:63:c4:e1:
8f:63:2c:e7:86:0a:a1:58:92:75:0d:64:05:c5:c2:
c1:10:29:42:af:61:ab:74:f6:bc:5b:f8:c9:35:18:
55:b1:c3:94:38:49:28:81:d6:d1:83:ba:06:b3:da:
ef:24:a4:67:da:f7:2e:6a:94:ab:91:c5:35:70:ae:
46:26:f2:ea:d0:d9:90:7d:2b:56:5a:3d:7a:8b:e8:
8a:99:67:f5:f4:66:6a:86:2a:c2:f1:6f:c0:56:c0:
3b:a3:f4:3c:85:d2:b1:82:dd:9b:0c:ed:6a:fc:b1:
5f:67:32:49:88:b7:e3:c5:75:3d:cc:0a:ba:6a:e5:
22:20:22:cd:a6:67:23:bb:e3:91:46:ba:e1:cf:73:
40:6e:35:e6:c5:d7:08:0e:e6:a7:20:e9:17:e1:a4:
8d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:84:27:C2:FA:F8:1D:76:1F:0F:FB:7D:46:D3:8B:47:6D:6B:88:0E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ioQnwvr4HXYfD_t9RtOLR21riA4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.223.128/26
Signature Algorithm: sha256WithRSAEncryption
2a:e1:ac:e6:bb:23:45:d9:b9:93:44:05:31:8e:90:91:76:cd:
8f:65:22:97:ba:e4:e9:d3:d8:e2:68:ed:3f:1f:53:71:6f:76:
7a:5b:60:5e:f6:79:ae:31:f2:d8:e7:4e:cf:5f:28:c9:d2:e8:
e6:1d:32:3b:df:79:a5:db:fc:21:1e:8b:7b:ec:67:1a:19:84:
79:db:fa:26:11:89:04:33:78:be:76:db:34:56:32:aa:d3:aa:
94:dd:24:1b:de:26:11:04:da:07:60:54:1f:00:85:a9:d2:d2:
44:1c:de:75:54:9a:71:80:ac:66:eb:ee:b0:01:fc:2d:2f:14:
2a:b2:aa:46:9d:32:05:13:13:e1:0a:11:9c:ff:70:b7:7d:da:
2d:a8:f4:81:b6:c9:60:36:d5:01:9b:9f:c4:0e:10:af:f3:94:
b7:ed:f1:84:3b:3d:ac:e2:cd:7c:af:f0:92:76:33:d9:c4:6b:
ef:17:86:a2:8a:7e:54:16:64:0e:07:ad:80:fc:40:5c:a3:92:
51:86:74:ab:3b:2f:82:82:a5:58:7f:85:01:5a:99:96:29:d4:
1e:99:8c:43:de:30:26:c1:40:3b:d9:e1:b1:14:04:76:8b:c2:
0c:07:e8:ed:93:5b:f3:93:2c:fe:ca:69:7b:b2:cb:d6:32:86:
4a:75:86:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:57 2024 by rpki-client on console-fra.rpki-client.org