Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pPJgE3D0OipExiH049fqviAys58.roa
File: pPJgE3D0OipExiH049fqviAys58.roa (raw, json)
Hash identifier: 7Dq8t2ASWP8XD6EMq1/skEiJy5iXrI1XZelkZnCSfdQ=
Subject key identifier: A4:F2:60:13:70:F4:3A:2A:44:C6:21:F4:E3:D7:EA:BE:20:32:B3:9F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 20E2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pPJgE3D0OipExiH049fqviAys58.roa
Signing time: Fri 25 Nov 2022 04:39:14 +0000
ROA not before: Fri 25 Nov 2022 04:39:14 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.104.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8418 (0x20e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:14 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A4F2601370F43A2A44C621F4E3D7EABE2032B39F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:52:e0:92:50:ca:51:00:99:ce:b7:91:62:c9:
4e:ee:5b:5e:2f:80:32:87:8d:d2:75:9f:01:4c:77:
68:77:97:56:02:a8:f5:79:2b:70:c3:3b:81:95:d9:
79:dc:fe:c0:2c:51:ab:d4:9b:36:05:c6:75:16:69:
dd:a5:23:8b:6c:82:29:79:cc:e6:c6:29:24:d8:36:
f2:a4:7f:b5:e8:af:26:e3:5e:82:3e:be:75:c1:45:
9b:ea:29:3b:f1:1e:fa:7b:e3:c6:b1:62:34:3f:07:
0e:c6:8a:48:3e:d9:7e:cd:ef:10:c6:f2:31:a9:a9:
9c:4a:06:e0:21:39:cb:98:b6:93:ed:79:66:b2:7a:
c0:b4:c3:43:84:ad:fe:27:92:7d:93:a1:07:04:f2:
e8:73:15:48:13:3d:77:48:fd:ef:3e:5f:29:b7:50:
30:88:55:cb:65:76:32:4a:8a:ee:80:ff:62:58:8e:
8e:58:56:96:a7:0a:ae:ff:df:91:e0:a5:06:99:ad:
f7:19:9b:d0:06:90:46:43:4c:6c:28:6e:f6:3f:fd:
e6:d5:d9:04:0a:c1:21:9d:34:99:ce:1a:ff:c3:dc:
54:50:ff:f1:90:04:83:2e:eb:23:b7:8e:ce:97:5e:
7b:67:fe:44:73:6e:df:fd:57:0d:4c:9c:4e:e3:5c:
bb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F2:60:13:70:F4:3A:2A:44:C6:21:F4:E3:D7:EA:BE:20:32:B3:9F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pPJgE3D0OipExiH049fqviAys58.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.104.0/21
Signature Algorithm: sha256WithRSAEncryption
07:0b:96:74:a4:a9:c2:c4:2c:02:e6:c8:25:08:e6:c0:07:b8:
7f:0b:5d:94:3d:ce:57:69:99:ca:be:4c:d7:64:3f:3b:50:47:
6c:d4:88:17:5e:b5:26:7f:fd:a4:67:32:e8:cd:78:23:21:34:
b9:13:19:4d:8c:c1:92:08:40:a9:df:b1:f4:db:9d:39:d9:2c:
ea:7f:84:96:e1:b4:62:88:06:8f:f8:5b:be:8a:10:5b:06:76:
64:5d:f6:88:0a:d2:7a:fe:4e:e9:5d:f7:30:39:6b:50:61:8d:
ee:42:cc:ce:5a:80:4d:76:21:42:99:9a:33:19:60:7a:c4:7f:
aa:f7:23:56:9a:ba:44:44:39:5d:58:10:8d:11:a5:af:ba:3e:
32:71:87:dd:24:ea:70:83:a6:8a:51:7a:72:20:d0:17:1f:12:
ae:57:17:a2:1e:f2:d3:04:12:41:5d:ce:2a:d5:cb:66:d4:b9:
d5:5e:82:7f:03:84:84:2a:7a:1f:dc:1a:f8:61:9d:07:1d:f4:
1c:be:35:43:4d:cf:83:48:34:97:b0:30:13:b6:67:e2:95:b6:
06:dc:53:64:e7:80:5f:a3:57:68:65:7c:36:e4:51:8e:d7:a9:
59:b2:a7:28:1d:fd:56:ce:c6:2d:95:5a:79:3c:42:c5:9a:1f:
36:8d:ba:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-fra.rpki-client.org