Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/p_J2wQuYXeQf56-0GH4ZW7LAn_w.roa
File: p_J2wQuYXeQf56-0GH4ZW7LAn_w.roa (raw, json)
Hash identifier: VIaLwsfPAwoCrcxcSDPIh/eWFQKra266pS77y6D9MIU=
Subject key identifier: A7:F2:76:C1:0B:98:5D:E4:1F:E7:AF:B4:18:7E:19:5B:B2:C0:9F:FC
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1AA6
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/p_J2wQuYXeQf56-0GH4ZW7LAn_w.roa
Signing time: Wed 29 Sep 2021 02:45:35 +0000
ROA not before: Wed 29 Sep 2021 02:45:35 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.192.64.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6822 (0x1aa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:45:35 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=A7F276C10B985DE41FE7AFB4187E195BB2C09FFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b1:ea:f6:df:b0:1e:d8:c9:ba:d3:97:24:d4:
24:91:2c:47:16:2f:e9:a3:49:fb:96:1f:9e:36:a1:
5f:01:f4:68:e8:54:10:10:d7:24:14:b0:b4:93:a8:
8c:c0:44:92:61:19:de:c9:4b:ef:53:63:0c:7c:34:
80:e2:c6:15:2c:dc:99:38:eb:82:cf:a1:d6:a4:9a:
c5:35:66:98:40:e2:29:84:56:54:d8:d6:d1:6c:31:
99:e8:ad:a9:dc:a7:6a:24:b7:1f:fa:08:56:f9:1d:
60:a2:de:94:cd:ef:7c:5c:a2:45:9f:0f:b8:3e:90:
c2:ea:ee:2b:fe:20:68:95:c5:d7:da:37:c2:50:31:
19:33:3d:72:24:6d:01:c5:4e:73:f6:eb:1d:a3:60:
3f:88:8f:db:c6:68:8d:f3:f3:e4:92:c8:af:a3:71:
5d:70:ed:cb:a8:bf:ca:68:c6:55:1c:73:a8:4b:f4:
9c:75:c3:ce:6f:5e:58:d9:1a:08:fb:0d:64:24:03:
a5:74:c1:9a:a1:d8:df:58:5e:c0:fa:df:10:ef:81:
f5:b7:ad:4b:6f:4f:cf:68:cf:a6:2a:40:1c:32:82:
80:f4:2d:12:f2:61:b5:b2:72:55:f6:eb:d4:ed:b1:
af:82:17:13:86:3d:45:c0:2a:04:1b:6e:16:64:0a:
1d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F2:76:C1:0B:98:5D:E4:1F:E7:AF:B4:18:7E:19:5B:B2:C0:9F:FC
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/p_J2wQuYXeQf56-0GH4ZW7LAn_w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.64.0/20
Signature Algorithm: sha256WithRSAEncryption
62:5e:53:2c:8a:59:7b:88:ec:7c:3e:18:b9:ed:61:4b:c4:04:
1a:1e:ea:99:3a:27:e2:dd:e9:94:cc:7e:7f:df:72:26:0d:38:
56:a7:95:30:9e:a1:b5:ce:79:aa:7d:e4:ad:68:e9:87:ff:e3:
44:d9:11:bb:df:4e:94:12:82:23:5d:f9:40:0d:f3:88:b6:c9:
40:f7:f5:93:79:01:56:63:f7:d8:b3:8d:c0:6a:9c:fa:51:e6:
48:6a:d9:be:cd:e3:2b:d3:ca:35:2d:88:f0:46:e1:1f:3e:47:
a1:4c:c6:9d:bb:8e:ff:99:40:0d:61:f2:32:7a:92:ef:50:0a:
11:34:01:8a:7a:57:c2:ce:ba:76:51:bf:79:c1:a2:8f:be:aa:
46:d1:b9:46:d3:24:14:4a:3f:2f:fd:3a:6e:38:a7:85:6c:1c:
ad:08:3f:8f:5c:bf:1f:df:e6:60:10:5e:26:5b:80:56:56:5d:
e7:08:5f:4b:38:96:fb:5e:46:de:e1:26:8c:df:b6:94:9c:8e:
35:f6:59:63:71:91:62:6b:ca:bc:ac:fb:24:5e:d8:51:61:f0:
a0:4f:3d:d6:d6:da:f1:20:c4:31:d7:05:bb:b0:13:09:c0:1c:
e6:f9:b8:00:d7:fd:38:9a:2b:40:7b:0c:75:f0:fb:06:2a:1b:
9b:b7:51:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-fra.rpki-client.org