Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/n0snC8CRi2ukPHiJSxSeZ4wbLis.roa
File: n0snC8CRi2ukPHiJSxSeZ4wbLis.roa (raw, json)
Hash identifier: dBLvosrUYROK+IwlzBeNRRbTQB7yTfRdJkPTQOambbE=
Subject key identifier: 9F:4B:27:0B:C0:91:8B:6B:A4:3C:78:89:4B:14:9E:67:8C:1B:2E:2B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1E89
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/n0snC8CRi2ukPHiJSxSeZ4wbLis.roa
Signing time: Wed 04 May 2022 06:41:46 +0000
ROA not before: Wed 04 May 2022 06:41:46 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.192.240.0/21 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7817 (0x1e89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: May 4 06:41:46 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=9F4B270BC0918B6BA43C78894B149E678C1B2E2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:36:2d:f1:3e:49:96:3f:0a:e5:ca:76:04:96:
38:1c:8f:df:5f:8c:58:8d:bd:eb:fa:26:6e:51:4e:
dd:0f:ad:54:3e:20:f0:ec:3a:82:e9:f1:6b:96:33:
2e:60:d6:cc:e0:36:21:39:55:b6:1a:dd:b5:d0:51:
b9:b3:57:71:81:b8:d9:a8:47:8b:26:c3:25:a2:b0:
ce:8a:42:d2:86:6e:a7:15:9c:26:ef:fe:11:9f:7c:
3a:18:db:d8:5e:8f:58:1c:e8:66:cc:25:06:8e:9d:
15:f9:57:70:ae:ea:8f:0e:87:25:f0:8d:04:9f:9b:
9a:43:4d:3c:a3:da:aa:e7:87:97:d3:02:b9:2d:5f:
26:d0:81:30:fc:e8:9b:0f:ca:94:dd:56:12:de:47:
7c:e1:d7:80:a7:0c:ec:23:fa:2c:6c:32:8a:85:f5:
a9:c0:70:45:e9:52:17:98:7d:f0:64:7d:27:f1:57:
59:3f:99:fb:03:b9:27:e5:c5:49:73:a9:6a:db:86:
bc:51:6b:12:3a:16:84:1c:0f:83:bf:c5:be:88:7a:
46:be:74:04:70:1c:e3:9a:bc:02:e3:51:a6:8f:8f:
f0:16:ef:7a:56:d1:48:a5:86:ce:6f:8d:6d:93:f6:
e8:15:26:10:e0:45:1a:b1:0a:4f:4c:79:af:60:f5:
d0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4B:27:0B:C0:91:8B:6B:A4:3C:78:89:4B:14:9E:67:8C:1B:2E:2B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/n0snC8CRi2ukPHiJSxSeZ4wbLis.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.240.0/21
Signature Algorithm: sha256WithRSAEncryption
52:75:cd:75:ae:95:7e:77:c9:10:98:97:97:f9:44:ba:0b:c3:
c3:a9:ba:3d:89:1d:14:74:1c:31:33:a5:a7:42:40:c4:b2:dc:
7f:26:36:08:95:5d:34:45:7b:b2:54:62:fe:ec:72:67:47:51:
73:03:ba:66:52:e5:cb:87:e7:97:fc:c3:45:27:a6:44:52:ab:
89:c0:24:83:80:6e:06:27:f4:16:56:70:0a:74:c5:71:dc:99:
f7:27:d3:47:77:ed:e1:27:fb:e7:71:02:98:28:33:1d:24:25:
66:d4:06:52:5a:4c:2f:e4:a4:e0:e2:a1:17:ee:b4:8f:16:3f:
15:90:1c:62:40:ca:5e:d9:68:75:5b:b5:ff:5d:15:b3:08:14:
d1:8e:68:37:87:38:1a:4d:b5:8d:74:b7:c2:1b:03:e7:6d:98:
08:47:9f:d5:65:6a:91:09:54:3e:0b:c5:fb:a9:a4:b0:6c:64:
21:d3:d8:27:54:4c:2b:d7:0c:0f:a4:84:15:87:ce:3a:ec:ff:
21:89:bd:f7:55:36:ac:6a:ee:f7:67:fc:d7:53:e4:8c:06:a0:
c3:c2:42:50:aa:c3:f4:8a:53:74:b9:3f:04:43:2d:e1:dd:b6:
f9:b9:67:fa:d8:8a:bb:49:69:1c:a7:a0:7d:78:b1:c0:68:09:
c6:65:29:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:39 2023 by rpki-client on console-fra.rpki-client.org