Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rA-FgUIMeyK_6R-yr5BvCnI9xoo.roa
File: rA-FgUIMeyK_6R-yr5BvCnI9xoo.roa (raw, json)
Hash identifier: 31h8c//QO67ur4DRQtTpdGb4ptGXDYg+Tf4WvKlpGoY=
Subject key identifier: AC:0F:85:81:42:0C:7B:22:BF:E9:1F:B2:AF:90:6F:0A:72:3D:C6:8A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 22B4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rA-FgUIMeyK_6R-yr5BvCnI9xoo.roa
Signing time: Fri 25 Nov 2022 04:41:32 +0000
ROA not before: Fri 25 Nov 2022 04:41:32 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.64.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8884 (0x22b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:32 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=AC0F8581420C7B22BFE91FB2AF906F0A723DC68A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7e:24:ad:5c:f6:93:4f:5a:f5:72:4c:ba:77:
29:dc:a0:ec:8e:b1:a9:04:23:6b:d0:f6:39:31:36:
21:e2:07:16:3d:78:b9:f0:0e:ad:e6:0d:aa:fa:23:
78:ae:4f:e3:c9:cd:3d:4b:ca:41:f4:9b:11:47:0a:
d6:82:a0:09:3d:79:f5:09:e0:b1:6b:7c:99:15:d6:
15:cf:f0:e1:06:1f:3c:d2:2b:fa:04:01:12:72:a8:
e7:d8:a5:e6:a2:46:6a:ea:3d:26:66:ad:f1:36:b2:
61:2f:5f:13:b8:b8:e0:f9:75:9f:45:61:2a:56:c0:
00:51:d4:a7:4d:96:ee:40:f0:cf:f1:bf:3f:94:79:
82:40:4c:f8:61:ca:bd:80:1d:59:a6:da:f7:3c:1d:
a1:70:15:6e:c8:ac:bb:c7:0d:3e:67:a5:db:cd:87:
92:e9:31:71:71:63:6f:db:81:62:47:cd:6f:20:cc:
52:6b:1e:ca:b0:d9:cb:34:e2:31:13:fb:73:87:31:
78:45:28:da:40:dd:42:ab:77:ff:59:25:c9:a1:b4:
62:16:83:f1:3c:26:5a:2c:62:dd:f5:21:6c:40:b3:
74:4b:28:32:c5:cb:26:fd:ae:89:fb:39:0a:92:d9:
5a:de:83:10:ea:1b:83:0e:2f:d0:57:6c:86:1a:13:
5d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:0F:85:81:42:0C:7B:22:BF:E9:1F:B2:AF:90:6F:0A:72:3D:C6:8A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rA-FgUIMeyK_6R-yr5BvCnI9xoo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.64.0/20
Signature Algorithm: sha256WithRSAEncryption
99:79:1d:ca:f4:29:84:ae:c1:81:d2:11:f0:44:42:e5:37:66:
c6:31:48:7b:1f:00:dc:52:f5:37:ac:a4:b3:8b:65:4f:db:40:
66:fa:8e:97:75:2a:cf:ef:31:3e:10:05:8c:1a:b8:d6:77:5f:
66:ac:06:6a:b7:c7:a9:13:4f:a2:fd:2d:4e:74:0e:51:8e:ec:
fd:8a:65:2f:2d:a6:ba:55:f9:14:f0:d6:47:8f:c8:7b:46:ea:
64:2c:22:cf:18:6d:ab:cb:f2:94:79:05:dd:17:ea:e3:63:9d:
0f:97:02:9f:c8:6c:a2:51:aa:1c:2f:59:63:28:f8:32:63:49:
3b:7c:54:d5:4a:ef:7b:2a:66:d3:4c:74:92:2c:ba:4d:51:c3:
b1:ac:1f:ba:16:89:7a:e5:1c:da:f3:f4:49:37:bd:ac:8a:3e:
96:31:73:e9:ec:e4:ad:b6:6b:c9:03:85:f0:f0:e6:c3:f0:7d:
19:49:5e:08:3a:40:c2:f3:dc:f5:03:1f:80:6a:e8:1d:49:e3:
e8:1c:77:1c:88:8f:f3:bc:73:4d:b2:cf:fd:af:3e:dc:ec:8c:
35:a0:12:f5:fa:e5:c0:44:f8:18:53:1c:a2:f8:d9:75:1a:5c:
b7:01:63:eb:af:20:ff:91:68:45:4d:27:99:94:f9:96:0f:79:
48:41:6d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:59 2024 by rpki-client on console-fra.rpki-client.org