Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ntZZrW1XLdF-9q4YjEgsiUj0Gks.roa
File: ntZZrW1XLdF-9q4YjEgsiUj0Gks.roa (raw, json)
Hash identifier: kzmeGzLZm9ohcaOGC+4IfwDuFSOAb41tBFy+QHrE9qU=
Subject key identifier: 9E:D6:59:AD:6D:57:2D:D1:7E:F6:AE:18:8C:48:2C:89:48:F4:1A:4B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 207B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ntZZrW1XLdF-9q4YjEgsiUj0Gks.roa
Signing time: Fri 25 Nov 2022 04:38:47 +0000
ROA not before: Fri 25 Nov 2022 04:38:47 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 123.195.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8315 (0x207b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:47 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9ED659AD6D572DD17EF6AE188C482C8948F41A4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:26:d4:33:55:07:f6:d4:57:04:ad:87:53:d2:
d6:05:c8:8f:ef:1c:e5:d1:21:b1:cb:dc:b4:44:fe:
4c:5f:47:cc:02:8e:82:3b:09:80:d0:f2:7b:f3:9b:
4f:09:3f:e7:be:91:40:3c:bb:c3:6a:54:8b:00:44:
8a:14:9b:8a:e4:fd:64:f5:ba:3b:3c:03:20:53:a0:
fd:3c:3e:d5:38:b8:0d:c0:bd:44:91:ab:3b:23:c6:
be:06:52:4e:b5:87:e8:ca:f1:0b:cc:06:31:cd:d0:
06:89:d6:f8:0f:d7:3a:46:2d:69:b1:f5:9b:d2:57:
ad:30:43:dd:4e:fd:98:7f:93:d2:a7:ff:05:49:bb:
59:c5:cd:ca:06:7e:e4:39:b8:b6:e5:ca:19:26:f1:
60:9d:b3:f4:57:02:c6:72:91:ed:01:54:7d:c5:81:
39:43:d3:0c:86:95:a7:dd:7a:b5:26:56:df:2d:53:
0b:2b:b8:eb:58:84:62:9d:64:4e:15:c3:f7:b5:87:
3c:47:7f:5b:2e:a6:d9:35:b9:67:22:e1:6d:a8:44:
35:bc:0a:40:8d:a0:c5:9a:8e:78:50:ca:27:9e:ad:
f9:da:30:82:fb:73:64:51:1c:7d:1e:8f:cf:db:7f:
cb:e5:9e:2a:a0:a5:3f:fb:85:66:49:b5:1d:5b:93:
c7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D6:59:AD:6D:57:2D:D1:7E:F6:AE:18:8C:48:2C:89:48:F4:1A:4B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ntZZrW1XLdF-9q4YjEgsiUj0Gks.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.238.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:cc:70:8f:22:57:02:7d:ef:07:34:d1:75:59:ae:28:ad:48:
c6:3c:63:c7:5d:c0:7a:ee:5a:33:df:88:b4:e5:bb:11:df:c3:
8e:1c:a7:9e:9a:5a:ec:14:42:4e:dc:6b:19:9c:74:8b:dd:19:
7c:5f:23:a2:d9:22:fb:d6:9b:77:a7:a7:49:63:e5:31:93:b5:
b1:02:bd:68:dc:5f:59:8b:3d:5a:a6:61:74:75:42:64:5a:40:
9b:dd:15:c1:0a:ae:70:95:b5:22:53:2b:59:eb:35:7e:7c:9f:
d0:8e:59:5e:4b:cc:ec:9d:87:f0:a7:2f:74:bf:ee:74:c4:e0:
5d:7c:ce:04:bf:d8:7d:77:85:8e:4b:c2:ab:7a:e9:25:fd:29:
2e:96:86:fa:bd:6e:33:26:76:58:7b:67:44:2f:c7:77:96:76:
49:37:6c:1a:37:af:fb:ff:2a:3c:c1:ad:a5:d1:d3:c5:88:c8:
e1:cb:9e:19:a4:be:7d:f6:84:df:7b:30:99:b4:51:48:0c:7c:
d2:07:bb:5d:d4:3a:bf:27:74:5c:f8:da:d5:dd:ca:35:b8:1a:
ab:f1:e7:67:4f:7a:c1:c9:d7:73:42:bb:7e:15:5e:f4:4f:26:
1e:be:4c:82:67:cd:10:ca:d5:a9:9f:47:8e:f4:83:0e:c3:8f:
f6:47:e3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-fra.rpki-client.org