Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kzeAfCimrCx7a-IPjVC7gf7pijo.roa
File: kzeAfCimrCx7a-IPjVC7gf7pijo.roa (raw, json)
Hash identifier: B+M5gfa0VpdPSkVz+PwNxQTMNyTY6aVrqC78Pir2OUs=
Subject key identifier: 93:37:80:7C:28:A6:AC:2C:7B:6B:E2:0F:8D:50:BB:81:FE:E9:8A:3A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kzeAfCimrCx7a-IPjVC7gf7pijo.roa
Signing time: Thu 15 Sep 2022 02:46:15 +0000
ROA not before: Thu 15 Sep 2022 02:46:15 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.64.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:15 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9337807C28A6AC2C7B6BE20F8D50BB81FEE98A3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9a:f7:e3:2a:4a:ab:c4:4b:09:99:2f:60:1d:
13:9d:99:ba:90:d4:93:2f:6b:54:a9:85:12:9e:68:
3b:c0:b0:6d:1f:9d:59:d8:1f:d3:40:a4:bb:95:ec:
a0:02:1e:77:56:41:c2:57:56:1e:2a:c3:2a:1e:b1:
96:ec:38:20:24:62:43:bc:43:60:72:62:ad:cc:54:
16:4e:af:71:15:39:8d:e5:c8:35:42:cb:1b:30:75:
23:9b:d8:b7:c4:66:13:51:9d:03:12:33:88:6c:53:
76:74:b8:12:b1:be:29:12:fa:e1:0c:dd:32:e0:ec:
85:f4:b0:bb:37:dd:f7:53:12:49:be:42:80:a9:78:
91:fa:16:8c:9b:4a:cd:88:9d:2a:f7:7a:35:26:0a:
77:e8:fd:8c:62:da:b9:22:b3:37:74:76:b2:54:00:
49:66:ab:a4:78:40:04:68:0c:ed:5a:d5:f0:4a:3f:
6d:e5:47:e4:00:04:f2:06:9c:24:33:36:f1:36:26:
5e:b3:f2:d7:24:59:2a:4d:0d:e4:67:09:d3:a6:ce:
14:ff:b3:c8:9c:0d:0f:df:80:99:57:c4:7c:ec:aa:
09:55:39:17:01:92:39:d7:bc:fc:37:9d:95:c1:b5:
79:b2:ea:17:db:4e:d6:6c:12:01:93:f5:48:3e:17:
6a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:37:80:7C:28:A6:AC:2C:7B:6B:E2:0F:8D:50:BB:81:FE:E9:8A:3A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kzeAfCimrCx7a-IPjVC7gf7pijo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.64.0/21
Signature Algorithm: sha256WithRSAEncryption
b2:ea:65:61:d9:93:ec:5e:6d:54:ea:ef:e7:94:64:57:30:7e:
58:8c:84:11:54:db:42:b0:92:ea:47:bc:81:d4:5b:0c:15:11:
5e:f6:95:9c:07:84:b4:5a:d5:11:82:0d:11:f7:0a:dd:0e:0b:
35:3b:fe:19:ee:87:84:b0:27:d9:46:55:b9:bd:97:40:c6:ad:
32:36:41:b1:3d:19:06:76:fc:ad:1a:2c:8e:9b:e9:5c:a8:df:
d6:c2:87:3d:15:95:ae:83:2e:10:e8:b1:ef:bf:92:0a:32:f0:
ec:87:fd:66:3f:09:e6:ea:b8:44:f1:58:c5:ff:0a:4f:32:7d:
42:eb:aa:2a:5e:32:11:37:c3:e0:6c:a1:59:d9:41:29:22:5d:
e1:6f:3c:f6:7a:34:68:6c:84:8d:5f:17:f7:fc:d1:ad:a5:6c:
62:c7:ff:43:68:aa:c2:3e:cf:28:10:c0:fb:d4:68:64:93:7a:
3f:86:23:4d:0e:ff:6c:c6:f4:70:cf:78:07:96:b1:ba:af:3f:
64:0f:2d:09:74:fc:74:af:5a:a7:ec:d4:e6:25:77:d5:70:2d:
e0:c8:b2:8c:93:cf:e6:b1:2b:51:de:4d:a6:82:3e:0a:cd:db:
d7:a4:a4:60:fe:eb:6e:d9:96:69:12:0b:8f:b1:25:71:dd:c3:
4e:dd:0b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:57 2024 by rpki-client on console-fra.rpki-client.org