Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lAHSSI2xdvH3GJvxGKTVqx01GfE.roa
File: lAHSSI2xdvH3GJvxGKTVqx01GfE.roa (raw, json)
Hash identifier: OTgRH8v0KuzKrpjDYXAXB0uBMTHIU/q6KW7gWemFmrg=
Subject key identifier: 94:01:D2:48:8D:B1:76:F1:F7:18:9B:F1:18:A4:D5:AB:1D:35:19:F1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lAHSSI2xdvH3GJvxGKTVqx01GfE.roa
Signing time: Thu 15 Sep 2022 02:52:35 +0000
ROA not before: Thu 15 Sep 2022 02:52:35 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.232.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:35 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9401D2488DB176F1F7189BF118A4D5AB1D3519F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:98:f1:b7:cd:7b:f9:60:65:6b:3f:e2:e0:ee:
9d:e6:97:b0:52:22:2e:5e:cd:a2:30:27:72:98:97:
72:9b:b8:d2:a1:76:27:4b:20:27:e2:b9:91:31:67:
e5:72:11:2f:46:08:5f:92:6b:4b:78:b6:50:0c:cf:
5b:67:27:45:bb:0f:3a:e0:94:63:03:d8:2e:77:77:
68:ae:b6:98:87:b7:5a:9b:8e:40:d0:e0:09:04:2a:
d1:a2:3b:c7:cb:92:68:b5:d9:3a:ae:ae:c6:8d:0e:
02:b5:32:f4:77:99:93:42:fd:5f:2f:8f:97:8c:9a:
b3:28:49:fe:b2:68:dc:45:c7:c6:46:b4:c8:ce:52:
41:68:9f:c6:bc:5d:e8:d5:2b:92:30:35:7b:23:4c:
86:11:ab:03:2d:31:37:34:9e:27:ed:84:84:1c:b9:
1f:49:6e:d4:b5:04:6c:50:af:52:9d:80:fa:6b:de:
b9:45:00:97:15:32:b5:cf:c7:92:75:04:64:c2:64:
aa:eb:3a:ae:35:f2:45:80:da:4c:93:7c:b6:de:eb:
04:56:99:66:cf:e0:0e:fd:24:86:fa:74:7d:62:c8:
bc:09:bc:0c:eb:60:5c:7f:0d:f6:97:78:62:8c:4d:
b2:af:e9:ac:db:dc:9a:7c:e3:24:b4:5e:a8:c9:39:
6f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:01:D2:48:8D:B1:76:F1:F7:18:9B:F1:18:A4:D5:AB:1D:35:19:F1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lAHSSI2xdvH3GJvxGKTVqx01GfE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.232.0/21
Signature Algorithm: sha256WithRSAEncryption
91:0a:54:6e:cf:17:2a:a1:ae:de:9d:99:9d:57:52:66:57:09:
a5:29:3a:c3:a1:7e:fe:59:cd:68:57:71:e3:b5:f5:02:eb:ca:
50:c9:74:64:af:d4:26:44:19:58:1b:5d:a6:f3:b9:98:af:74:
de:ce:71:64:98:24:3a:b8:db:17:bb:a3:f2:ae:ae:ee:47:2e:
ba:f1:e1:39:bf:3d:6d:de:92:80:ca:60:33:24:f0:09:86:c9:
34:1e:82:8b:3c:e5:9e:7a:81:b0:c3:eb:dc:d0:1e:3d:2b:04:
19:1e:40:86:1f:b7:35:19:26:65:ab:71:7e:0c:e7:a3:6e:99:
a7:e2:f5:e6:24:a8:47:be:6c:c4:20:bf:5c:ed:e4:4c:87:86:
7b:8e:e0:eb:12:46:64:4f:55:82:3b:f8:43:b7:98:a4:bb:4e:
22:06:77:80:36:85:f8:1d:3e:da:79:35:a3:26:6e:47:96:fb:
c0:49:21:b9:05:0c:af:a7:3a:c0:1b:3e:56:8d:33:ba:9c:80:
02:5e:0e:32:56:18:40:73:d1:c6:62:51:e2:39:03:e1:f4:e6:
3d:0a:ac:80:aa:25:8e:44:2c:4a:c1:30:4c:fd:6a:cd:0b:d9:
9e:31:62:ed:3f:c5:61:2f:70:2a:0c:53:b9:62:2f:99:07:ec:
53:0d:53:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:57 2024 by rpki-client on console-fra.rpki-client.org