Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/okKtyP2t6dQsVL2H9WTFh47ysTU.roa
File: okKtyP2t6dQsVL2H9WTFh47ysTU.roa (raw, json)
Hash identifier: GmJ+JQv7QV4q15oUlZvPaWR/IPhgRkJYZ46V/RyjG4A=
Subject key identifier: A2:42:AD:C8:FD:AD:E9:D4:2C:54:BD:87:F5:64:C5:87:8E:F2:B1:35
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1B8E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/okKtyP2t6dQsVL2H9WTFh47ysTU.roa
Signing time: Wed 29 Sep 2021 02:46:44 +0000
ROA not before: Wed 29 Sep 2021 02:46:44 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.194.88.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7054 (0x1b8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:44 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=A242ADC8FDADE9D42C54BD87F564C5878EF2B135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:75:76:06:26:05:e0:51:81:77:02:87:b4:85:
b8:af:e3:75:54:f6:ea:82:e1:87:72:7b:f1:60:12:
ef:61:03:31:34:b8:83:f3:f5:04:fa:fd:20:10:db:
30:d5:e1:a7:a4:f2:42:04:13:08:30:18:6d:79:d4:
ec:e3:4c:d5:d5:f8:62:71:15:f6:d0:77:fb:e6:f6:
ac:82:f1:0e:1f:56:f3:6a:94:05:39:04:42:cf:4e:
78:19:ca:5f:47:8f:39:44:1b:bc:9c:59:b0:88:7f:
9b:d7:7a:46:1c:03:a5:4b:c3:77:b2:6c:91:77:a5:
b9:53:55:bf:81:5d:23:d6:c3:e1:64:c5:d0:63:2d:
49:96:a3:fa:ca:15:2b:b0:66:8d:9d:1d:90:30:46:
02:64:d1:7f:5c:dd:fb:c8:a4:96:22:e3:f7:97:a6:
f7:46:23:39:99:30:e3:7a:12:9b:90:c2:16:a6:d0:
51:7a:c8:2b:f5:cb:a6:36:61:8b:a6:5c:86:3d:8b:
1d:f2:a4:cc:e4:75:dd:3b:3a:6b:bb:42:f1:6d:35:
f1:ae:5d:2f:9d:23:6b:c8:d4:18:5d:20:ad:e0:9f:
a1:55:45:d9:56:5f:b0:09:83:32:e6:f7:45:6d:e3:
4b:58:15:cc:90:53:62:03:8a:26:9a:bf:4d:8a:f8:
80:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:42:AD:C8:FD:AD:E9:D4:2C:54:BD:87:F5:64:C5:87:8E:F2:B1:35
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/okKtyP2t6dQsVL2H9WTFh47ysTU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.88.0/22
Signature Algorithm: sha256WithRSAEncryption
24:a7:28:87:9f:7e:b8:78:aa:9b:02:2e:0c:db:5a:d3:87:03:
f8:ea:05:a7:d9:07:6e:97:90:68:34:c3:b6:65:aa:a7:76:94:
fb:79:bb:fe:f0:88:4a:a8:e1:18:51:f4:5a:e2:7f:34:c9:83:
37:88:ad:79:cf:e5:7e:31:bf:5b:66:23:e4:f2:d1:97:a9:d8:
e3:ca:27:10:f0:e8:df:7d:00:9b:bf:31:f2:7a:75:60:71:e2:
cf:a2:58:bf:4c:6f:73:6e:bd:be:78:2d:be:ff:2e:fc:1a:a0:
83:c4:80:91:4d:fd:30:73:16:cc:2f:8e:3f:74:7f:f8:41:56:
a4:6e:2d:fa:fa:34:37:76:c2:96:89:ce:60:8d:91:13:59:5d:
a2:49:c0:36:59:87:2e:87:3f:65:f9:0a:0a:82:58:01:05:cc:
1d:7a:c2:f5:8a:aa:a2:f2:90:de:e8:89:a7:05:38:1e:15:d3:
9d:82:35:aa:8f:7e:84:80:f8:1e:07:9e:05:05:af:c8:2e:28:
14:42:4d:72:73:7f:b6:ce:90:aa:3f:80:dd:c2:07:1b:38:5f:
66:c4:91:da:01:19:94:bd:90:02:47:95:fd:a8:c4:79:b0:46:
8b:41:f0:2c:25:2c:39:51:f8:a8:db:97:2d:96:c4:44:d5:db:
81:da:9d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:28 2023 by rpki-client on console-ams.rpki-client.org