Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/j7L5muVvsvr8flLUgCdbzZXSLXM.roa
File: j7L5muVvsvr8flLUgCdbzZXSLXM.roa (raw, json)
Hash identifier: nW2kU8XHBJoM4kCmBIVeXF6Ic55gEqg/7DwHeDCwucg=
Subject key identifier: 8F:B2:F9:9A:E5:6F:B2:FA:FC:7E:52:D4:80:27:5B:CD:95:D2:2D:73
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/j7L5muVvsvr8flLUgCdbzZXSLXM.roa
Signing time: Thu 15 Sep 2022 02:45:14 +0000
ROA not before: Thu 15 Sep 2022 02:45:14 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 123.195.128.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:14 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8FB2F99AE56FB2FAFC7E52D480275BCD95D22D73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c2:f0:a0:5d:75:94:b2:d8:99:72:eb:35:6c:
ce:fd:e7:d2:7c:51:18:e5:32:53:5f:a8:ae:de:cf:
b3:da:cc:54:d3:50:ee:87:95:6d:57:e7:4f:5d:c6:
c3:e2:18:1b:cc:7b:31:1d:61:44:3f:bc:15:f4:46:
32:fa:75:70:5c:09:f2:c5:5d:79:82:8d:65:48:ec:
19:71:49:0d:cd:09:ed:b1:6b:49:98:f5:e8:bf:8e:
ca:f4:94:aa:6c:3d:d8:80:63:01:cf:52:07:8d:c6:
78:27:af:44:76:8f:ae:72:31:88:d8:5b:f6:d7:56:
b9:0d:4f:a3:17:e1:ed:fb:de:6a:3d:a5:4e:c0:86:
fc:32:bc:47:cc:01:a9:24:49:b9:18:30:41:02:da:
9e:f7:e5:6b:6f:dd:ba:3f:90:ed:12:6a:23:34:cc:
b3:2e:17:9b:42:da:f0:64:9f:62:84:02:6b:8c:f7:
cc:f7:b2:67:9f:db:7e:15:b9:9d:b2:6f:79:be:ee:
1a:48:aa:f9:3f:8b:c5:a0:82:45:d7:d4:a9:34:b7:
dc:b1:b9:e8:7d:72:ce:a5:1e:10:f7:d0:81:7d:f3:
33:57:4d:c9:4b:05:74:f8:c5:66:e3:78:1e:51:2c:
f4:74:04:0c:0b:e9:1a:11:83:a6:58:0b:a3:96:80:
7d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B2:F9:9A:E5:6F:B2:FA:FC:7E:52:D4:80:27:5B:CD:95:D2:2D:73
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/j7L5muVvsvr8flLUgCdbzZXSLXM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.128.0/19
Signature Algorithm: sha256WithRSAEncryption
25:56:af:7d:9e:98:1e:b6:65:9e:25:56:2f:2e:1d:36:25:f4:
23:da:93:52:b2:4b:19:25:b7:01:95:9a:e2:87:07:cc:a2:7b:
cd:fd:cf:f9:56:bd:23:85:de:f3:2c:7e:65:f2:3d:cb:77:8c:
f8:b1:27:dd:93:86:e8:71:26:47:3e:a4:c3:ae:6d:08:3d:6f:
ed:92:db:f1:28:7c:c3:e4:54:bf:d9:81:b8:58:65:9c:63:4f:
63:1f:5f:81:d4:c2:99:9c:28:8a:09:84:25:24:d9:3e:ba:04:
07:ee:16:3b:c7:43:1c:a8:39:0c:28:73:4a:96:0f:82:bd:a0:
5a:29:28:aa:01:74:f9:e7:7d:89:a6:1e:28:3f:1a:a3:b5:e2:
e6:39:e2:43:c3:81:17:27:54:fa:b0:3a:b4:ac:ed:22:f3:92:
9e:05:ad:32:87:ab:94:60:14:c6:e6:ad:94:59:5a:e2:6b:8f:
1c:fa:e1:53:eb:2b:31:8b:28:7b:87:a5:28:29:79:2b:d0:6d:
31:70:c8:a7:6a:ea:79:59:a7:fb:6d:78:25:c6:3a:b8:7a:2a:
7b:ef:fc:0c:dd:d2:7c:ed:1c:6d:79:a6:42:c2:f8:32:de:55:
19:02:49:9e:88:85:95:3e:27:db:fd:f8:4b:45:ed:18:0c:a3:
4e:26:04:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:57 2024 by rpki-client on console-fra.rpki-client.org