Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mcGaL4DVHYKd3Ts-cHmlS8CrMa4.roa
File: mcGaL4DVHYKd3Ts-cHmlS8CrMa4.roa (raw, json)
Hash identifier: Z2djJe6TXCKXvJvy4+M+uKg71QljddxZxvXQFIeiVgc=
Subject key identifier: 99:C1:9A:2F:80:D5:1D:82:9D:DD:3B:3E:70:79:A5:4B:C0:AB:31:AE
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mcGaL4DVHYKd3Ts-cHmlS8CrMa4.roa
Signing time: Thu 15 Sep 2022 02:45:26 +0000
ROA not before: Thu 15 Sep 2022 02:45:26 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 123.193.64.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:26 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=99C19A2F80D51D829DDD3B3E7079A54BC0AB31AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:af:65:f3:b3:ab:7a:bf:b4:50:d0:54:61:1d:
a0:0e:27:d3:11:0f:d0:60:fd:23:72:7d:40:78:19:
12:12:1f:8e:38:af:f7:82:b7:a2:bf:2a:02:06:9e:
54:7f:80:e2:a5:cd:ec:19:20:79:4d:a2:00:ea:e9:
ff:7a:25:19:ed:f1:dd:99:a1:7a:4b:7c:8d:04:22:
fc:18:e8:26:48:d6:78:90:a1:66:7b:9c:19:aa:29:
98:83:00:07:39:60:90:9a:f8:ab:5d:08:96:35:f5:
2c:1a:ae:c8:48:ca:f1:9b:48:5b:e3:7b:23:c3:f3:
3a:32:ce:fd:8c:e3:b0:e4:fa:34:5c:66:9c:8d:a3:
a2:64:37:8e:0f:aa:fb:f0:e2:cc:c4:2e:1b:1d:e4:
10:a8:bf:86:89:18:2f:b4:84:8b:87:39:0d:4d:7f:
f5:cc:97:9d:94:40:a1:65:3a:93:21:0b:4a:3d:f8:
71:f8:95:0b:df:1b:b2:5e:d4:fa:72:cb:a1:23:ef:
6e:50:10:89:d0:0e:2a:47:2b:91:19:dd:e2:01:e8:
c8:4f:aa:b3:61:4f:66:e5:f6:84:cd:01:58:d7:7d:
8f:3f:ce:69:37:49:ba:0b:d4:03:5d:ad:ac:9c:3f:
f1:e7:c1:1c:83:cb:33:e4:6a:90:32:b8:53:dc:09:
f8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C1:9A:2F:80:D5:1D:82:9D:DD:3B:3E:70:79:A5:4B:C0:AB:31:AE
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mcGaL4DVHYKd3Ts-cHmlS8CrMa4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.64.0/19
Signature Algorithm: sha256WithRSAEncryption
a0:78:d9:49:c5:0d:dd:ee:7d:cd:f8:c8:a9:a5:57:89:33:c8:
c6:99:3f:33:87:d1:84:e2:e0:7f:5a:c0:f3:a2:25:91:c7:ab:
0c:af:aa:82:b1:ed:15:38:66:ad:9e:76:3b:3b:e3:99:33:85:
f1:6b:ba:99:e3:ae:90:19:36:1a:47:bd:b8:ee:1d:ae:ec:9a:
b8:df:7c:79:61:14:11:5e:82:a5:38:b3:c4:9c:dd:4d:ba:e8:
e8:2a:0b:5b:cc:2f:6d:09:14:9d:19:88:d7:9e:57:af:35:22:
42:42:eb:fc:88:4e:cd:13:2e:4f:94:0c:0c:1b:45:28:29:29:
52:91:0f:ed:63:b4:c7:23:7f:a2:7a:a5:8e:c1:81:b3:ee:91:
97:76:21:42:d9:aa:f9:b3:23:cc:2c:02:65:33:5d:1d:eb:7b:
91:76:c3:47:6b:d0:44:27:8d:98:3a:b3:e0:0a:ba:8b:45:bc:
8e:dc:d4:16:18:ac:98:27:c3:3b:cb:41:bb:22:41:57:2f:2c:
bb:1e:82:57:ec:31:ce:f5:b8:cb:c8:fc:49:b6:a6:c0:0f:e6:
d5:e2:24:a9:db:72:89:57:ff:98:f0:81:69:01:40:59:a9:80:
10:d3:0a:52:b3:3f:76:ac:48:6c:35:5d:1d:ef:9f:ef:7a:6e:
70:3a:9f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-fra.rpki-client.org