Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kx0Mhh-LL2DiOacsf6JcLHArcmU.roa
File: kx0Mhh-LL2DiOacsf6JcLHArcmU.roa (raw, json)
Hash identifier: T75YQrBHQAYqhn5ipvxDIv7ktFw9S5G8k54sijaG7ao=
Subject key identifier: 93:1D:0C:86:1F:8B:2F:60:E2:39:A7:2C:7F:A2:5C:2C:70:2B:72:65
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1D4F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kx0Mhh-LL2DiOacsf6JcLHArcmU.roa
Signing time: Wed 29 Sep 2021 02:48:51 +0000
ROA not before: Wed 29 Sep 2021 02:48:51 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 123.195.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7503 (0x1d4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:51 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=931D0C861F8B2F60E239A72C7FA25C2C702B7265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:66:38:e2:46:05:69:69:a8:57:f5:f1:c1:91:
bb:be:fd:24:7a:2a:8f:89:98:f4:d9:53:a5:02:f4:
66:f3:95:bd:51:dc:da:a1:51:b0:0c:ee:aa:90:8e:
d7:06:c7:49:c6:38:79:49:e2:b6:7f:6d:b8:62:fa:
2f:b4:7d:ba:16:f7:53:14:af:96:5a:a8:18:54:c7:
d1:c5:6c:d2:df:df:e4:cc:f0:13:d6:2f:dc:f3:fd:
45:f9:03:f3:18:b8:f4:e7:9b:4d:e7:44:b4:44:ff:
a5:5b:e2:01:ea:5c:cc:5d:c7:45:f6:cd:0f:79:9c:
4a:58:89:8f:3e:49:f3:d8:4d:55:36:b2:57:93:60:
6d:c9:97:4d:c6:84:b2:d3:56:d5:85:31:2b:66:1b:
ef:72:29:02:bf:73:1c:16:14:7f:e0:43:a2:52:15:
94:5e:ec:5f:eb:d6:39:0a:dd:08:c1:5d:07:35:00:
d2:d3:23:58:9e:35:77:d8:bf:90:7c:09:13:03:5b:
e3:9f:19:81:d5:87:37:13:50:82:54:9e:f8:a5:06:
0c:c5:aa:9c:37:5d:27:86:a1:91:95:fc:59:bd:b7:
5e:2b:25:d2:c4:1a:67:ff:f5:72:9f:f8:05:c7:d0:
c7:13:40:80:23:b1:44:7e:25:9c:44:bc:40:b3:87:
ba:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:1D:0C:86:1F:8B:2F:60:E2:39:A7:2C:7F:A2:5C:2C:70:2B:72:65
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kx0Mhh-LL2DiOacsf6JcLHArcmU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.237.0/24
Signature Algorithm: sha256WithRSAEncryption
57:81:c9:b2:0d:86:4b:50:6c:9f:f0:aa:a8:81:2e:10:32:99:
bd:22:c9:24:fc:81:b6:9b:98:cd:0a:83:64:ac:bf:68:cd:36:
40:a3:0b:ad:80:6b:a5:62:52:50:56:19:e3:80:fa:f1:94:3b:
8f:7e:7b:0b:bf:b2:11:d7:ee:ef:47:9f:df:5e:17:d5:13:d5:
06:8f:3a:63:75:3e:b9:71:39:eb:4e:b1:27:eb:87:82:98:a6:
a3:a8:de:43:f1:a4:e1:59:94:7a:5d:97:d5:11:0b:6d:6b:ff:
1d:1b:9b:0f:db:fa:da:3b:f7:51:e6:08:6e:25:2b:21:7e:4f:
1d:89:b8:96:2c:e8:53:0a:45:23:81:5e:5b:22:5c:a9:03:6f:
4f:aa:67:68:cd:6c:b1:8e:a4:10:a0:4e:30:8d:7b:f8:5e:35:
9f:ea:dd:82:05:36:1c:fb:26:87:a7:a4:a1:4b:60:a0:c9:b6:
ef:66:a5:d6:ba:44:f7:ee:55:42:9f:1d:eb:a3:f6:f0:b3:73:
13:3e:21:31:88:82:61:06:f6:cc:48:16:ba:36:f8:12:6e:13:
0e:d9:d1:c6:41:9e:52:22:9c:a1:79:07:c4:04:4d:fb:0b:fc:
8e:0e:fd:50:9d:72:6f:f8:95:48:d8:2d:a9:dc:5e:76:28:be:
5e:a0:b2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:38 2024 by rpki-client on console-ams.rpki-client.org