Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/n8HTvjJnq7vL0EHgJJQfVvQOSzs.roa
File: n8HTvjJnq7vL0EHgJJQfVvQOSzs.roa (raw, json)
Hash identifier: jtmyeraLvb+WgvmGvkm/6OJHgvWeUJpTv3pLNkPijDw=
Subject key identifier: 9F:C1:D3:BE:32:67:AB:BB:CB:D0:41:E0:24:94:1F:56:F4:0E:4B:3B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 232B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/n8HTvjJnq7vL0EHgJJQfVvQOSzs.roa
Signing time: Fri 25 Nov 2022 04:42:08 +0000
ROA not before: Fri 25 Nov 2022 04:42:08 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.236.0/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9003 (0x232b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:42:08 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9FC1D3BE3267ABBBCBD041E024941F56F40E4B3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7a:0f:1f:07:c2:6b:9f:7a:67:19:fb:2e:30:
80:c6:a1:40:01:8c:89:ab:56:c4:d3:ad:3c:6e:ea:
20:9a:c8:87:dd:ae:37:d2:bc:a1:3f:f4:57:fd:4e:
7e:2a:19:eb:a0:82:89:6e:01:b8:48:34:f0:59:ff:
78:1c:8b:f3:82:ca:44:92:7d:9c:20:62:d3:41:77:
d3:ce:1f:f6:de:6b:60:5f:ee:f3:13:7a:f9:dc:0e:
e9:02:3c:03:75:56:34:89:a3:b5:fe:d9:91:6c:be:
1b:80:b7:58:60:4a:8b:c2:4e:d9:ab:08:51:e2:94:
63:5b:36:5b:09:c3:ee:82:6b:cb:ae:ff:b7:fc:5c:
f4:d7:50:cc:d2:f0:f5:98:ea:2e:72:3b:fc:56:ab:
46:1e:e5:d3:6f:34:5c:d3:f2:75:6a:9b:ed:63:47:
5d:c4:09:09:72:d5:66:6e:5c:6f:3a:dc:98:33:a6:
e3:8c:0d:99:c0:5b:87:ab:85:37:6c:b8:a0:9c:c9:
43:54:97:7e:a3:07:71:49:0a:91:19:f8:f1:fd:44:
dc:47:20:59:35:31:a0:ef:e5:23:57:99:c6:cb:95:
36:06:ff:dd:b1:b3:29:a7:23:de:06:de:ee:70:0c:
37:eb:b3:e3:c9:d4:dd:43:1b:a6:05:43:fc:f3:c5:
a5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C1:D3:BE:32:67:AB:BB:CB:D0:41:E0:24:94:1F:56:F4:0E:4B:3B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/n8HTvjJnq7vL0EHgJJQfVvQOSzs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.236.0/25
Signature Algorithm: sha256WithRSAEncryption
66:6a:97:f9:2a:d6:bb:b8:2b:04:65:c1:0e:69:b6:24:87:76:
60:b9:10:28:d1:4f:c2:af:01:a9:3e:33:fb:e5:26:f6:d4:33:
2a:07:34:f7:fb:6c:4a:d9:b0:19:a2:ce:28:fe:3f:93:43:21:
a6:c5:06:5f:81:2e:7e:ae:5e:21:66:71:86:a4:8f:54:ab:ef:
73:f1:2d:08:d4:19:84:ea:37:6d:2a:35:57:20:63:da:09:2f:
0b:e4:6b:46:48:50:cf:77:6d:30:12:15:ce:f1:5e:66:ac:3a:
39:7b:26:28:7b:99:e1:80:9b:fa:32:0d:d8:32:ca:c0:e3:28:
68:5b:a6:2a:e3:6c:ff:ea:13:78:bf:4b:93:83:09:c1:e8:f2:
2c:eb:37:28:47:b8:0e:bc:0d:62:bb:f1:a7:46:db:0f:34:3e:
78:45:6b:91:7c:86:97:51:df:ca:49:d1:2c:39:33:51:69:4b:
3a:98:06:f1:d2:4c:c7:89:4d:6f:b1:8a:ec:97:1a:ed:2a:eb:
8b:85:da:d1:09:1e:9a:23:9c:c2:5c:3c:08:bb:ab:a0:5e:5f:
cf:eb:7c:cf:ee:d6:d0:12:93:eb:f3:96:83:31:8b:ba:a3:c7:
50:9c:28:fa:b2:cb:72:94:a9:38:93:b7:06:5c:7a:86:07:39:
c1:ad:97:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:39 2024 by rpki-client on console-ams.rpki-client.org