Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ltTbvrcsDAra-LhuQE4LyhZRaJ4.roa
File: ltTbvrcsDAra-LhuQE4LyhZRaJ4.roa (raw, json)
Hash identifier: lVbbAVvaW/S9xrDTmQo3HSYcCmf814abASf0viHwD5g=
Subject key identifier: 96:D4:DB:BE:B7:2C:0C:0A:DA:F8:B8:6E:40:4E:0B:CA:16:51:68:9E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ltTbvrcsDAra-LhuQE4LyhZRaJ4.roa
Signing time: Thu 15 Sep 2022 02:45:20 +0000
ROA not before: Thu 15 Sep 2022 02:45:20 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.178.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:20 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=96D4DBBEB72C0C0ADAF8B86E404E0BCA1651689E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:26:8a:a7:fa:0b:c2:43:4b:4d:5f:d5:cb:ac:
8e:36:93:a5:87:d4:76:d3:6d:2f:3c:25:d4:83:e1:
a3:a4:5e:44:04:40:c4:f7:19:c0:41:c7:ea:69:32:
31:37:09:5b:e6:db:98:9f:6a:8e:92:d8:b2:ce:40:
fc:11:94:f6:99:40:27:31:dd:0e:e2:f3:92:7a:e0:
ea:61:76:f2:3e:16:75:8a:55:e2:fc:67:f5:c9:f6:
d2:14:2e:02:c2:83:98:83:1c:b6:63:77:53:15:e9:
dd:ab:2c:7b:70:3c:bb:75:28:d6:5e:1f:93:94:ad:
26:a9:31:20:18:de:6c:17:3e:e2:a2:26:9a:73:ae:
f4:87:e9:23:cb:29:56:6d:cd:3e:9b:bb:a2:07:51:
83:b1:1b:4b:b4:af:96:57:cf:9c:12:9b:32:47:18:
22:03:f7:a1:52:c3:33:a3:bc:81:bc:66:17:14:2f:
ba:41:43:74:1f:98:1e:15:49:ff:3f:64:08:6f:82:
ec:5d:4b:ac:df:2d:5c:db:c3:41:8f:45:b0:e3:e6:
b0:be:39:16:06:19:16:51:a9:b1:67:b9:79:0e:1b:
f5:2c:cb:23:64:f3:13:6e:a6:3a:7d:e2:b1:ad:61:
28:6b:c8:52:83:21:40:a0:12:41:96:a9:6a:76:ad:
42:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D4:DB:BE:B7:2C:0C:0A:DA:F8:B8:6E:40:4E:0B:CA:16:51:68:9E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ltTbvrcsDAra-LhuQE4LyhZRaJ4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.178.0/24
Signature Algorithm: sha256WithRSAEncryption
66:0b:4c:43:fb:e4:8a:92:0f:e6:e4:8d:d7:a9:78:3d:41:13:
ee:7c:87:bc:59:e4:aa:19:f2:ba:20:84:83:9d:f1:5d:f5:4f:
c9:34:5a:0d:43:71:b7:56:7c:6f:54:2a:45:57:d9:bf:b8:a1:
e0:a2:59:26:97:3e:2b:25:d1:70:73:4b:5c:65:96:7d:8b:c1:
e3:83:04:6d:cf:95:ee:27:9e:7c:cd:f5:9a:f7:fa:69:1b:42:
ce:69:11:e1:9f:f8:8d:88:3b:b6:e3:64:98:a6:c2:b3:d8:ec:
5d:54:20:e0:32:f2:a6:9c:04:6a:aa:0b:e8:f1:c2:5c:1b:61:
06:c1:97:6a:0c:1a:ef:31:ad:1c:d5:6c:ec:62:d5:70:9f:72:
cf:20:5f:73:75:df:fc:cc:88:86:03:80:1a:5f:6f:d0:12:1d:
79:2b:87:13:a4:fd:ec:5f:06:e4:c1:31:e4:bf:0e:00:e5:43:
f8:d8:d3:2d:50:5b:ee:78:55:7b:32:fc:0a:3c:9d:c4:9e:93:
5b:1a:0e:d8:8b:43:19:49:8d:7f:d3:3b:a7:81:21:d6:56:fe:
bf:ac:e6:9a:61:32:0f:3c:03:5a:40:c0:18:d4:31:e1:6d:71:
ed:c8:8d:8e:a4:97:68:33:c0:66:b6:a4:18:57:93:f4:e1:46:
cd:21:24:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:57 2024 by rpki-client on console-fra.rpki-client.org