Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ooz5TdzAmhBu0JU5BZC2tKhm7zg.roa
File: ooz5TdzAmhBu0JU5BZC2tKhm7zg.roa (raw, json)
Hash identifier: rgOyHD5jWO6byJEKeb/juMV1BzEQcRe2uwejIPYL+xM=
Subject key identifier: A2:8C:F9:4D:DC:C0:9A:10:6E:D0:95:39:05:90:B6:B4:A8:66:EF:38
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ooz5TdzAmhBu0JU5BZC2tKhm7zg.roa
Signing time: Thu 15 Sep 2022 02:53:41 +0000
ROA not before: Thu 15 Sep 2022 02:53:41 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 123.192.0.0/14 maxlen: 14
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:41 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A28CF94DDCC09A106ED095390590B6B4A866EF38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:61:42:9c:b5:8d:30:8b:30:a5:89:fc:16:22:
77:63:86:52:19:9c:0e:2a:29:f2:8b:89:5f:1e:63:
cb:e6:b5:2f:00:7d:14:3f:04:ce:c4:68:13:b2:00:
42:dc:eb:a9:0b:37:a3:aa:09:71:ac:ce:b8:17:54:
ff:de:34:9c:38:7c:ed:e1:df:5b:4f:80:98:0d:4b:
46:8c:32:ce:1f:67:c7:0d:a6:fa:02:90:e2:e0:c0:
3d:76:4b:9d:47:44:78:a6:82:2c:e1:32:3c:a5:00:
05:45:ba:33:64:03:83:56:44:d9:98:bf:40:ac:74:
d0:b1:38:c7:63:bd:f7:24:2d:72:f8:2a:50:83:93:
7f:a1:36:55:d3:39:2b:be:b8:55:62:4e:88:d6:ad:
9d:06:b0:3b:41:03:d2:51:68:5c:70:f0:be:e5:dd:
ba:85:25:58:66:18:ce:44:ce:9c:8a:24:e1:53:1f:
9b:e5:4a:05:cd:39:ee:af:ed:a4:5f:39:3c:ae:9f:
c0:7d:68:5a:75:7b:27:ab:39:d8:de:3b:c4:fb:cc:
fc:df:dd:57:fd:21:a6:88:10:25:1e:20:06:6c:cc:
ea:fc:6a:1e:e8:d3:c4:57:fc:a5:48:2b:a3:2b:c2:
02:3d:09:ba:af:87:8c:70:cc:1e:25:7f:87:b8:f9:
26:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8C:F9:4D:DC:C0:9A:10:6E:D0:95:39:05:90:B6:B4:A8:66:EF:38
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ooz5TdzAmhBu0JU5BZC2tKhm7zg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.0.0/14
Signature Algorithm: sha256WithRSAEncryption
38:60:7c:9f:e8:fe:bc:37:68:7d:73:aa:9b:04:08:42:c7:c8:
ee:b0:f4:e6:9b:ea:bb:b2:c8:f0:0d:ca:77:4d:77:71:d4:c0:
a0:cb:71:61:b8:c6:9c:75:c9:87:d7:86:a3:55:51:07:a9:6a:
7a:89:5d:52:1e:d8:58:8c:4c:5e:6f:c9:cb:85:01:94:6c:49:
79:53:84:e8:f9:0c:4b:8c:37:7b:63:70:17:79:e0:8d:05:2a:
8e:11:c9:cb:80:c4:75:0d:0e:9f:80:88:3a:10:34:f3:be:63:
da:58:cb:78:9b:a2:9f:fb:44:96:f9:1e:1b:f6:57:50:36:e2:
24:19:51:25:1b:15:c4:00:38:9f:1b:95:c8:43:9c:3c:b1:15:
0e:6b:84:50:55:1d:ac:4e:1b:75:13:f1:9b:1c:28:f2:99:6c:
a8:9b:1a:d6:a0:ae:bb:6c:f4:04:20:bf:0b:52:e2:44:0c:8c:
fd:ce:36:82:bc:07:0f:f6:b1:5f:29:a4:8b:ae:5e:c2:c3:5e:
96:1f:c2:08:14:da:a5:9d:b5:4f:da:75:14:87:c5:aa:c1:bc:
68:2f:e9:91:86:ac:b7:5e:75:bd:b8:59:d0:96:fd:77:30:de:
dd:2e:ea:99:18:5f:b7:84:12:f3:c8:63:e4:7e:bf:c8:7f:d5:
a1:1a:f5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:40 2024 by rpki-client on console-ams.rpki-client.org