Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/o9vWqOMGvQsdeFHifuu2bpzD974.roa
File: o9vWqOMGvQsdeFHifuu2bpzD974.roa (raw, json)
Hash identifier: iNHb8mWab0FEB3p9hVLoH50IXapXUICDxIpUE3bZShE=
Subject key identifier: A3:DB:D6:A8:E3:06:BD:0B:1D:78:51:E2:7E:EB:B6:6E:9C:C3:F7:BE
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1D45
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/o9vWqOMGvQsdeFHifuu2bpzD974.roa
Signing time: Wed 29 Sep 2021 02:48:49 +0000
ROA not before: Wed 29 Sep 2021 02:48:49 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 123.195.52.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7493 (0x1d45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:49 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=A3DBD6A8E306BD0B1D7851E27EEBB66E9CC3F7BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6c:7e:f1:b7:76:ae:0a:aa:af:02:60:50:22:
27:ae:01:1d:97:30:1f:6c:20:b1:0c:60:48:8a:b1:
73:9d:32:93:5a:d8:03:6f:b8:04:9b:f8:eb:a1:3d:
59:bc:dc:ae:e7:94:d0:3f:f9:65:e5:46:29:ae:a8:
43:f1:b6:ba:2a:30:4e:bd:3c:20:e5:66:0f:20:18:
d8:fa:9a:4f:2e:a2:3b:a0:a2:8e:e6:8e:9a:16:4b:
22:39:e2:3e:c0:70:d9:4f:dd:cf:bc:c5:66:e7:98:
02:7f:8f:e4:08:e4:86:16:96:ca:8b:e3:46:b5:ab:
55:7c:d0:03:f9:c4:8d:b8:78:5e:24:e2:11:f0:09:
a6:49:14:cd:7f:0b:ce:e5:c0:e1:e6:20:5b:4f:83:
6a:33:08:61:b6:a9:64:8b:e1:78:45:0b:94:bf:75:
c4:0b:d9:38:f4:5c:fe:fd:bc:29:a1:90:04:d0:22:
6a:8d:ee:7e:e7:dc:3a:e0:48:3f:8b:27:50:ec:ff:
8a:a1:04:bf:78:0e:e8:6e:82:e6:2e:22:a3:2b:99:
80:08:70:de:30:26:3c:d2:e2:f6:03:43:ce:45:0e:
9c:f7:2f:4f:7e:9d:cb:05:7b:ad:f1:a8:0a:b2:6b:
34:25:0c:ab:79:0d:fa:1d:ee:5c:20:aa:0b:8e:70:
d7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DB:D6:A8:E3:06:BD:0B:1D:78:51:E2:7E:EB:B6:6E:9C:C3:F7:BE
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/o9vWqOMGvQsdeFHifuu2bpzD974.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.52.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:4a:3e:55:94:3c:6e:ff:d2:97:73:08:f8:7c:92:60:50:59:
bf:18:1c:51:59:c1:16:a3:85:e7:01:60:6c:bd:52:9d:51:db:
6f:48:fa:b2:e0:56:11:6f:2b:ef:3e:4a:47:0b:b0:74:6f:75:
52:a4:fa:24:33:65:79:54:af:d5:71:9e:a0:f5:3a:2d:9e:de:
cf:9c:c7:1f:7d:5c:7d:26:f8:cf:4c:d8:8c:64:2a:f9:74:be:
db:a9:11:81:bc:4b:f5:46:86:b0:c1:58:0b:93:8e:7b:4b:54:
ad:06:04:e0:c8:87:cd:a0:c1:56:fb:02:a1:72:a7:70:2a:b1:
3c:04:2a:b7:e3:a0:76:f1:05:5b:41:ef:62:34:ab:d4:6d:7c:
e1:d3:eb:45:75:46:99:f9:9c:43:79:80:95:c9:e1:fd:42:b5:
fc:df:e8:d3:c0:74:b7:30:27:00:c0:2d:9a:2f:06:37:a9:fa:
b8:60:97:9a:52:4e:13:33:9a:c6:7f:20:0f:c1:e2:42:04:3c:
2f:3d:00:19:37:8a:6c:d2:72:9f:a2:6b:22:e5:df:00:5a:b9:
82:1f:f5:5f:cc:1b:d6:92:d9:2e:42:7e:3a:36:7f:86:7b:bf:
08:ae:78:34:2b:d8:ef:f1:65:bd:ec:db:1a:dd:81:6d:b8:c4:
a6:ce:47:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-fra.rpki-client.org