Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jGBWfMZD473TkfXUXTEn6MLbrmA.roa
File: jGBWfMZD473TkfXUXTEn6MLbrmA.roa (raw, json)
Hash identifier: Od4ShDZKr6ZVN2Am0crSP2a+wkHqVNxg3P3p2fNal60=
Subject key identifier: 8C:60:56:7C:C6:43:E3:BD:D3:91:F5:D4:5D:31:27:E8:C2:DB:AE:60
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jGBWfMZD473TkfXUXTEn6MLbrmA.roa
Signing time: Thu 15 Sep 2022 02:45:56 +0000
ROA not before: Thu 15 Sep 2022 02:45:56 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.168.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:56 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8C60567CC643E3BDD391F5D45D3127E8C2DBAE60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b2:a5:41:97:2d:03:51:31:de:a2:c8:b1:e0:
62:10:78:45:49:90:9f:8c:9f:eb:fc:89:f8:fc:5c:
2d:a4:a5:01:b9:cd:db:25:c8:a7:00:48:39:be:78:
91:58:57:85:92:47:05:cb:aa:df:5e:ca:ab:bf:62:
b0:88:32:f2:77:3b:49:72:39:80:e4:55:a0:a2:49:
3f:23:82:6b:14:02:7d:62:cd:cf:dd:de:1b:8f:e4:
0d:62:9e:83:af:fc:a0:15:6b:c9:eb:57:07:9e:65:
a5:83:1e:67:65:cb:32:30:db:86:f3:2c:f7:d7:bf:
30:20:ae:7f:cd:c4:2c:29:a5:af:62:cb:c7:7e:b3:
02:a2:a9:9a:05:29:99:22:9e:6f:4c:eb:2e:4a:cc:
d3:32:05:f5:f0:4a:90:6f:e9:0f:24:da:94:33:ea:
18:20:72:33:84:dc:ad:0f:29:2d:66:72:31:e4:f8:
79:ab:eb:ea:3b:e1:98:d1:ee:a1:a5:30:b3:2d:6f:
55:f7:de:88:c5:77:05:61:74:90:ca:ac:d0:03:6a:
9e:33:58:ea:f8:64:d0:56:c1:94:5b:98:da:c7:28:
e3:a9:b1:3d:a5:9d:ca:9e:5b:84:39:9c:b3:a9:5c:
5c:56:37:42:59:5e:63:f5:84:b8:45:92:ea:7c:c6:
26:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:60:56:7C:C6:43:E3:BD:D3:91:F5:D4:5D:31:27:E8:C2:DB:AE:60
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jGBWfMZD473TkfXUXTEn6MLbrmA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.168.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:ee:4a:c3:79:c6:38:36:70:7b:a2:62:dd:2e:12:e4:4b:90:
ed:13:ba:2a:67:5d:be:ea:e9:d9:9d:f1:dd:aa:73:36:7e:72:
82:3f:70:4c:2c:d2:51:b0:92:b7:1e:75:68:82:c3:ac:0e:60:
31:df:0a:12:f9:b9:77:27:3b:33:74:9e:c2:b2:5e:36:aa:14:
94:77:c7:40:b4:f4:34:34:81:5a:04:7c:a5:4a:5b:af:d2:64:
6e:8b:b9:4a:ec:99:c5:b1:0e:8b:15:83:53:66:83:08:f5:7a:
38:69:7a:c6:66:85:28:76:27:86:bc:ec:fa:60:de:05:c6:6f:
49:47:30:0c:e1:bb:07:75:af:77:22:cb:70:00:0b:d9:e6:b8:
4f:53:4d:90:06:38:d7:4e:0e:f9:30:61:bb:73:b2:b0:e9:1a:
72:32:3d:1d:93:7d:3b:1f:18:83:c5:cc:8c:b2:64:54:a8:2a:
66:73:0b:52:a8:9c:1b:13:27:d0:97:71:63:46:0e:8a:a9:a0:
c4:2f:b1:6b:5b:87:00:cf:a1:ae:db:42:7c:d5:45:88:b9:ae:
5d:90:68:0d:f6:a4:df:c5:75:32:ff:4f:2d:22:99:75:95:27:
78:f4:56:81:94:ae:b7:54:15:b3:bd:ea:4a:80:4d:77:fd:1d:
29:45:5f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:57 2024 by rpki-client on console-fra.rpki-client.org