Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/t6LLywQxRxvA6LieKiMJINiqdHc.roa
File: t6LLywQxRxvA6LieKiMJINiqdHc.roa (raw, json)
Hash identifier: VfGab2fq7ynyd+whCV/hRJ54CoRSGqPjVlqcnLY6/RI=
Subject key identifier: B7:A2:CB:CB:04:31:47:1B:C0:E8:B8:9E:2A:23:09:20:D8:AA:74:77
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 204C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/t6LLywQxRxvA6LieKiMJINiqdHc.roa
Signing time: Fri 25 Nov 2022 04:38:33 +0000
ROA not before: Fri 25 Nov 2022 04:38:33 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 123.195.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8268 (0x204c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:33 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B7A2CBCB0431471BC0E8B89E2A230920D8AA7477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:13:80:49:25:28:a0:5e:36:2d:a0:ae:04:cc:
b4:07:9e:2a:07:ca:c1:da:98:4d:e7:c2:fc:f2:47:
ad:df:88:86:0b:a7:01:23:eb:71:d2:03:8b:5d:5e:
9c:f6:a0:ee:9d:db:0c:31:ee:fc:6a:f3:94:f7:e3:
f0:01:f2:e2:56:b9:97:52:87:e8:67:6a:7f:87:bc:
c1:a7:7d:0d:47:85:e1:36:bf:1c:ce:55:90:cf:8a:
c6:47:d8:10:b6:35:90:1d:2a:75:f9:b5:92:ca:55:
fb:98:d7:11:31:ab:4c:b7:16:1d:c2:b1:01:4d:fe:
ba:98:6f:2c:83:b2:81:30:6f:b1:82:3a:ce:d0:08:
da:52:38:a1:05:04:6d:c5:7f:05:b0:db:5c:37:e6:
71:ed:ef:fe:3f:8a:65:e1:8f:a9:82:2f:07:ff:5a:
bd:17:68:6a:99:c0:b2:57:fb:53:40:a5:05:78:d6:
77:9f:84:51:4c:91:1a:c1:db:44:c5:7d:03:f7:f3:
de:2d:07:e7:74:3a:3f:1a:0e:2c:20:24:f3:e1:1f:
13:e4:c4:10:ac:e2:b6:31:ac:c6:8c:dd:47:cf:e6:
88:c1:07:83:7d:4f:a6:d2:9d:55:a9:88:a6:74:47:
6d:b4:49:65:6d:86:0d:b0:6c:96:ba:e9:da:6f:f8:
c0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A2:CB:CB:04:31:47:1B:C0:E8:B8:9E:2A:23:09:20:D8:AA:74:77
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/t6LLywQxRxvA6LieKiMJINiqdHc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.244.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:2d:99:d8:01:1d:c8:1a:6f:55:52:b2:ad:59:59:9c:9a:ca:
cc:83:8c:44:8f:ff:04:23:c1:1d:e3:eb:79:6d:81:a0:75:61:
c9:2c:01:2e:d3:ac:02:3a:d3:47:f6:ae:94:6f:10:ab:97:e0:
3e:f4:2a:37:01:dc:3a:3d:29:d5:ea:bd:e9:be:f0:e5:4f:2a:
92:be:d4:72:13:8d:20:ed:d8:fd:43:b5:06:67:c1:55:90:55:
5d:d9:a3:3c:81:5b:90:35:83:18:94:a1:5c:b7:a6:8d:63:ba:
13:76:a8:a8:0e:0b:f3:5c:4a:8b:3c:4d:b9:0c:ba:64:84:bf:
1c:a7:09:47:1a:21:8c:75:bc:4f:e6:92:66:e4:6d:ea:b1:35:
b7:64:88:c5:ae:2c:b5:b9:e1:ba:bc:b5:ae:4d:53:51:04:8f:
1d:e8:07:99:95:24:be:1a:fc:bd:c7:ad:28:45:2a:d5:11:31:
41:22:78:83:c9:2c:59:80:56:09:4f:63:d5:93:8e:e3:9d:a7:
d7:70:93:0d:ed:e0:f8:aa:58:15:55:14:d8:0d:45:b3:a0:c4:
ec:e8:02:fa:10:eb:ae:24:86:fd:7d:e5:23:d8:91:c2:4f:c5:
26:87:20:a8:74:13:9d:03:2f:23:fa:a6:cf:25:d1:6d:df:68:
1a:d2:0f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:41 2024 by rpki-client on console-ams.rpki-client.org