Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/j6AYBAUtDon3Q4-gM7D5NluDrkw.roa
File: j6AYBAUtDon3Q4-gM7D5NluDrkw.roa (raw, json)
Hash identifier: U6x3/QpZkWzx9yXednmMpa4Y+DUJGztzFNDdWdJFwXI=
Subject key identifier: 8F:A0:18:04:05:2D:0E:89:F7:43:8F:A0:33:B0:F9:36:5B:83:AE:4C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/j6AYBAUtDon3Q4-gM7D5NluDrkw.roa
Signing time: Thu 15 Sep 2022 02:46:03 +0000
ROA not before: Thu 15 Sep 2022 02:46:03 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.20.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:03 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8FA01804052D0E89F7438FA033B0F9365B83AE4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ba:64:91:92:0f:1c:a5:1a:3d:fd:54:4d:86:
4a:96:1e:8f:f6:e0:bb:f5:45:63:9d:17:4b:a7:17:
23:63:36:0b:7f:d8:67:e2:dc:d2:c3:e9:ce:dc:e6:
d3:3c:1e:81:50:2f:a2:73:0c:d3:42:e2:f0:b6:5c:
89:b0:fc:0e:fc:18:8b:df:21:47:73:8d:93:7e:72:
10:1d:5d:3f:e1:90:c6:34:6d:cf:36:71:0c:5b:8f:
3c:a2:2c:92:3c:6c:35:59:47:3f:84:16:e5:b5:ff:
78:b5:d6:5c:93:dd:3c:d6:43:05:8a:9b:b8:f0:05:
32:97:a4:01:27:c9:f9:3a:c5:c1:fa:f1:c7:cd:aa:
90:de:27:97:36:f4:69:4b:22:78:ab:7b:22:d7:7b:
2d:70:88:26:9c:4a:3c:7c:66:42:f0:aa:d0:b9:23:
80:c4:91:d7:05:1f:5d:63:25:67:37:ec:11:9c:35:
20:37:e2:dd:f8:06:ef:38:f5:1d:00:dd:80:ac:01:
a9:f8:b4:d6:7d:95:ff:92:09:11:8e:b6:1c:15:4d:
5c:b0:06:34:75:b0:48:32:e7:54:fc:28:67:75:5b:
ce:6b:0b:88:05:d9:2c:53:04:59:5b:71:3c:6c:d8:
7a:7f:73:ef:c3:75:aa:ef:71:e5:81:50:df:3b:3c:
ad:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A0:18:04:05:2D:0E:89:F7:43:8F:A0:33:B0:F9:36:5B:83:AE:4C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/j6AYBAUtDon3Q4-gM7D5NluDrkw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.20.0/22
Signature Algorithm: sha256WithRSAEncryption
77:f3:f5:ea:9d:d4:1c:a8:d2:cf:6e:73:db:6f:f3:ce:de:61:
a6:d7:f4:7d:c1:48:69:30:0e:d8:cc:22:f1:7c:0e:91:77:db:
e3:ee:38:55:e0:5b:78:e9:96:12:b8:b1:2e:f1:45:00:4c:2d:
66:0c:b1:e5:ef:63:cd:fb:a4:7f:0b:2e:2e:7a:d7:79:0e:12:
7a:6c:6c:b9:cd:b2:8f:18:b0:47:49:f8:44:48:6a:de:87:6c:
6b:56:4f:2f:e3:23:36:55:87:fd:fb:f2:27:b9:5f:bd:e6:96:
3e:55:b3:04:70:4e:e2:1e:7d:62:6f:e8:8d:25:e2:b2:a3:b6:
a4:e8:5c:05:e3:8b:e2:b1:3b:20:ca:8d:d4:8a:6c:30:16:d8:
9d:5d:0c:56:95:1e:8a:d8:3b:3e:33:3f:79:b6:a1:07:6e:0a:
57:bd:7f:5d:22:a8:49:61:e6:6d:fd:5a:b3:25:0e:9b:d0:4d:
dc:ed:47:9b:b3:4c:45:22:bf:cd:92:6a:35:5a:dc:8e:da:b1:
32:a3:c3:2a:85:ec:b6:7a:93:50:0f:6a:56:9b:7a:6b:6c:c7:
15:2e:c5:f6:6a:3d:07:33:5b:f7:e3:48:98:e3:14:82:12:b7:
b1:91:cd:68:f6:0e:56:28:86:77:c8:67:be:20:6b:87:7a:2f:
4e:65:df:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:38 2024 by rpki-client on console-ams.rpki-client.org