Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/n6-L7_iE6lBqt8wjf7eYCBQnWs8.roa
File: n6-L7_iE6lBqt8wjf7eYCBQnWs8.roa (raw, json)
Hash identifier: E6c4+yFArJigrHim3BXy4TskdoZKwdCFZ0I0+NQftzE=
Subject key identifier: 9F:AF:8B:EF:F8:84:EA:50:6A:B7:CC:23:7F:B7:98:08:14:27:5A:CF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1DD2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/n6-L7_iE6lBqt8wjf7eYCBQnWs8.roa
Signing time: Tue 07 Dec 2021 08:20:20 +0000
ROA not before: Tue 07 Dec 2021 08:20:20 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.192.160.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7634 (0x1dd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Dec 7 08:20:20 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=9FAF8BEFF884EA506AB7CC237FB7980814275ACF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c0:26:41:fc:65:2b:91:43:99:27:bf:3d:32:
d1:f7:e5:f2:a9:5c:4a:db:16:4e:4d:2d:88:a1:5c:
4a:6c:8c:45:de:57:1c:ac:ea:6c:20:a2:9f:3c:97:
50:b9:03:69:f5:75:d6:c1:b9:68:ad:b2:6b:a5:56:
c8:1c:e0:60:6a:2e:e0:3a:bc:87:00:2e:b3:89:f1:
d6:b3:23:6f:84:c5:88:48:b6:17:54:c9:eb:1d:b2:
45:1a:74:60:a9:58:8b:8c:bc:16:f2:5e:8d:2f:87:
5c:e5:93:2e:21:4a:1f:fc:b8:e6:fc:a9:f0:99:ce:
97:1c:a0:55:ee:1d:c3:6f:61:5c:c9:d3:e3:48:19:
1f:60:78:1b:4f:9b:8a:ec:e5:97:2e:8e:65:ae:5e:
ab:09:32:cb:6b:a5:55:ad:83:44:e3:92:42:52:9f:
8e:39:4c:df:e7:e1:34:a1:dc:2b:22:11:3f:61:7d:
b6:23:91:8a:2e:14:7d:50:54:3a:14:4a:47:d9:b0:
e8:8b:81:ab:6f:c2:38:11:35:df:ef:5e:8e:55:17:
82:30:1d:aa:b3:f9:dc:b4:27:01:ff:d1:66:0b:df:
7c:9d:7b:d4:0b:4b:a2:86:db:61:75:5e:4b:0a:52:
30:14:5c:8a:74:d9:a3:4f:d1:64:5b:6d:b9:1e:58:
73:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AF:8B:EF:F8:84:EA:50:6A:B7:CC:23:7F:B7:98:08:14:27:5A:CF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/n6-L7_iE6lBqt8wjf7eYCBQnWs8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.160.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:46:05:53:a5:41:7f:8e:21:3e:8c:30:52:dc:4a:00:d2:6f:
a4:10:05:a3:86:60:01:f5:f9:7a:21:84:53:13:75:68:ba:4d:
38:d3:89:d9:24:1f:8e:c0:0d:10:d5:df:35:be:7f:5b:87:a5:
a8:8a:98:91:9e:7d:2c:30:3e:f0:87:e0:c4:b8:a6:97:c1:ea:
64:e9:b7:a5:65:2b:ce:98:e4:5b:5b:9f:6f:b6:cc:14:0d:12:
9b:f5:93:9c:34:8b:ba:d8:04:4c:56:ad:8b:ec:81:d5:31:96:
af:fe:37:22:9b:f5:33:36:be:73:69:92:08:1f:5b:e7:bc:86:
74:47:0b:2d:22:e1:d2:a4:06:ef:58:db:11:70:49:a4:be:38:
c7:aa:9e:3a:87:85:d2:61:c6:6e:2d:58:b8:c5:c6:ad:49:60:
b0:b1:70:df:8b:c5:c6:1c:01:14:e4:79:bc:53:1a:b2:4b:9a:
e7:de:5f:a6:4f:41:52:77:03:53:ff:61:a3:0d:23:5f:b5:48:
0c:3c:47:16:04:72:0d:ef:8d:fd:7c:8a:f3:ac:0e:a4:9f:6b:
13:e0:9b:33:99:7f:e6:ac:3f:22:20:b8:4f:bc:ed:b4:bd:36:
61:8a:ed:8a:8b:e1:c1:58:9d:30:e3:61:15:10:f0:84:61:a4:
72:70:b4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:28 2023 by rpki-client on console-ams.rpki-client.org