Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kZxn532fu4THnW8yBVEO3cMtrrY.roa
File: kZxn532fu4THnW8yBVEO3cMtrrY.roa (raw, json)
Hash identifier: WL/x1XjVU3UHCWdw9KfQKqoHN2aquYXhm5OEbzf9Hx0=
Subject key identifier: 91:9C:67:E7:7D:9F:BB:84:C7:9D:6F:32:05:51:0E:DD:C3:2D:AE:B6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1E9B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kZxn532fu4THnW8yBVEO3cMtrrY.roa
Signing time: Wed 04 May 2022 06:51:13 +0000
ROA not before: Wed 04 May 2022 06:51:13 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.193.192.0/19 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7835 (0x1e9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: May 4 06:51:13 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=919C67E77D9FBB84C79D6F3205510EDDC32DAEB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4b:67:61:ec:78:00:14:0d:1b:bf:be:c2:b0:
f2:02:87:90:68:67:06:76:6e:3b:6f:eb:76:65:75:
14:12:df:b7:04:79:99:3d:11:46:2f:d5:6f:63:f0:
ce:0c:1f:3f:bd:cc:c8:e0:86:88:45:20:0f:23:84:
65:da:d6:b5:64:d7:7d:fe:5c:33:1f:5f:13:ac:3e:
35:76:6c:f0:ca:1e:fe:d8:23:81:0e:70:18:ab:6b:
dc:47:6f:3b:1a:f0:0d:ae:29:23:70:25:2d:c8:23:
45:ff:d2:2e:1c:00:8e:4f:9e:5a:77:df:e2:45:7c:
10:a3:1b:cd:bf:8f:49:92:e6:ef:34:0f:85:48:38:
47:57:bf:ca:23:b3:34:62:b6:ad:3f:b1:64:7b:93:
b2:d0:96:38:f0:4e:2d:ac:f8:d2:42:2b:b4:e7:83:
bd:dd:74:10:ab:7a:6e:09:86:57:a0:cb:74:c8:5b:
d8:bb:df:8b:ef:b0:bb:9b:4c:75:bb:00:ca:e9:98:
e6:e0:17:0c:31:3d:f3:0c:1a:22:36:62:22:e8:fc:
70:a3:6b:d6:9f:32:de:d9:05:14:41:d8:8d:10:36:
2a:a0:c6:a4:ff:6a:09:23:a8:80:97:ee:d0:6b:1e:
37:73:b0:14:a9:e5:75:03:8c:41:01:26:3d:40:00:
ca:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9C:67:E7:7D:9F:BB:84:C7:9D:6F:32:05:51:0E:DD:C3:2D:AE:B6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kZxn532fu4THnW8yBVEO3cMtrrY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.192.0/19
Signature Algorithm: sha256WithRSAEncryption
3f:3d:59:94:57:fa:72:cb:5f:e3:9b:37:0d:6e:d8:1b:02:6e:
a1:74:4c:7a:7f:cf:f3:3e:64:60:8f:21:64:8b:b9:96:3e:1a:
c2:e1:b1:3a:8c:08:9a:84:31:f1:77:af:0c:21:f1:37:6f:f7:
eb:b5:c2:c2:e1:35:cf:18:50:e4:e7:6b:06:32:2b:e1:52:5f:
fb:60:c5:8d:51:d8:9c:23:24:53:ad:18:40:5b:23:d6:39:40:
2b:a8:94:3b:7b:56:d5:0b:0f:b1:a1:89:22:13:ad:af:18:8a:
dd:1a:37:36:30:67:5b:cb:3b:7a:cf:ad:a1:2e:e2:e6:76:68:
4a:04:2e:23:95:1f:ff:8c:78:70:f1:bc:dc:70:e1:ab:ab:b8:
9d:2b:04:48:3b:14:f5:e6:ce:73:f3:75:95:7a:cf:ec:c5:b3:
e4:0f:51:e0:f3:e1:4f:54:26:f0:1b:22:0e:d1:21:6b:19:b0:
8e:21:dc:93:a3:7e:bc:6c:48:38:70:98:d9:cd:04:d4:22:cc:
cb:38:45:2c:89:17:60:64:90:db:22:fe:e2:73:a4:8f:20:2b:
4c:57:05:36:70:03:7e:d7:2b:76:a7:fe:0a:70:e5:5c:d5:81:
84:e0:65:7d:11:64:be:f0:cd:53:de:26:58:d2:b7:9d:84:2d:
4f:98:fe:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:57 2024 by rpki-client on console-fra.rpki-client.org