Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/snl8Xi9AsSFn_De6oSsMfBCXkbM.roa
File: snl8Xi9AsSFn_De6oSsMfBCXkbM.roa (raw, json)
Hash identifier: NYgWEAxpphyl1EPs+XyF7pvk7sezImPUtbZ+WcBJAc4=
Subject key identifier: B2:79:7C:5E:2F:40:B1:21:67:FC:37:BA:A1:2B:0C:7C:10:97:91:B3
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/snl8Xi9AsSFn_De6oSsMfBCXkbM.roa
Signing time: Thu 15 Sep 2022 02:45:34 +0000
ROA not before: Thu 15 Sep 2022 02:45:34 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.96.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:34 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B2797C5E2F40B12167FC37BAA12B0C7C109791B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c9:05:d0:f7:d7:67:ba:64:d1:75:df:43:1b:
2b:86:25:08:eb:b5:28:fb:8b:43:17:9d:ff:33:e1:
73:62:fe:79:25:11:60:4b:d3:1c:df:b5:98:af:96:
68:13:be:d4:d5:94:6b:f6:92:ad:19:0e:43:14:25:
59:eb:8a:0f:fd:df:ce:a1:dc:7b:b0:9e:20:07:b8:
a9:7f:0f:28:ab:82:0b:aa:0c:ae:a4:28:75:c1:9e:
ff:0c:b5:09:7a:2a:fd:e1:ae:bb:fb:54:6e:b2:57:
6d:73:c8:5d:7a:cf:8f:76:55:69:32:d3:c6:56:2a:
80:0b:a1:81:78:96:4a:5a:b8:fd:5d:2a:0d:6d:70:
9b:d9:50:98:d6:6d:e9:17:30:b1:c1:dc:d0:98:26:
2d:7b:c4:70:29:d5:95:17:f8:b6:42:38:c1:76:3d:
f8:20:26:59:6a:d0:54:80:79:68:e6:9b:da:2b:63:
1e:fd:b1:7a:5f:7a:5d:3b:a1:5f:40:52:8d:5b:bb:
c8:c9:88:71:81:c7:34:be:ce:cf:97:c9:31:5c:68:
9d:2d:73:cd:60:c2:84:3e:4a:1d:4b:6d:f9:4b:f9:
c6:36:42:11:91:4d:c9:9b:8c:7f:28:fa:d9:6d:20:
3a:df:85:dd:91:61:01:56:8d:17:6a:5f:c1:c3:86:
70:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:79:7C:5E:2F:40:B1:21:67:FC:37:BA:A1:2B:0C:7C:10:97:91:B3
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/snl8Xi9AsSFn_De6oSsMfBCXkbM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.96.0/21
Signature Algorithm: sha256WithRSAEncryption
2a:38:8b:a3:5d:11:77:7e:64:d6:bd:20:27:f9:9d:3f:3d:5c:
e5:3a:e1:e0:8e:08:d0:7e:c7:28:36:6f:85:19:10:92:80:05:
34:b1:76:15:f3:2c:04:50:fb:7c:dc:2b:d7:e7:99:07:e8:e0:
c6:96:64:de:71:cc:4e:6b:1f:81:ac:e0:59:af:0e:df:ba:68:
49:6d:d7:a0:ec:22:10:94:0a:b9:e4:02:37:d7:58:40:3e:0e:
39:c8:15:0c:e8:bd:df:67:27:4e:b8:9a:d6:1e:89:fe:43:db:
86:0b:a0:6b:06:a6:b4:03:d2:29:3d:82:22:8a:c8:26:f3:0f:
6d:60:ad:08:51:8d:10:dc:6b:11:41:1e:b9:1d:0a:fb:25:2a:
51:4e:2d:51:71:a0:92:7d:4f:2e:49:a6:ef:3b:b0:fb:e0:d6:
07:f9:ea:a6:25:e1:b6:9e:60:00:c9:da:d4:a7:54:f9:a5:bc:
25:80:73:50:86:65:50:6d:e8:a1:7a:a5:43:7b:f5:a0:38:30:
24:b1:29:dc:69:e8:b3:b2:6c:d0:60:1c:d6:4d:aa:01:ce:24:
b8:69:ce:43:2e:8d:bf:43:6c:a3:fe:ff:59:8c:d5:c8:66:a3:
81:d0:67:4e:e3:6c:4e:35:3a:fa:af:7b:03:8d:e6:3e:8a:16:
fb:92:14:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:41 2024 by rpki-client on console-ams.rpki-client.org