Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tJxmX5nb1EXbwQhrLlOCg4rGJn8.roa
File: tJxmX5nb1EXbwQhrLlOCg4rGJn8.roa (raw, json)
Hash identifier: bh1Dti7V13ar9uM8VpsLDl645TOZ270QQTh4QWvCz6o=
Subject key identifier: B4:9C:66:5F:99:DB:D4:45:DB:C1:08:6B:2E:53:82:83:8A:C6:26:7F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1D37
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tJxmX5nb1EXbwQhrLlOCg4rGJn8.roa
Signing time: Wed 29 Sep 2021 02:48:46 +0000
ROA not before: Wed 29 Sep 2021 02:48:46 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 123.193.224.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7479 (0x1d37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:46 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=B49C665F99DBD445DBC1086B2E5382838AC6267F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f2:77:6b:3b:98:ee:48:2d:a3:83:5f:96:51:
37:3b:97:77:e3:5a:59:34:01:9e:18:ab:3f:02:25:
dd:c9:e5:00:d6:ad:ef:73:31:b1:78:fb:fb:56:4a:
85:1d:96:0b:04:41:db:f4:0f:67:d9:d5:38:9f:12:
56:c3:67:43:c0:a1:17:02:33:78:4c:3b:dc:be:33:
19:b3:5e:9b:9f:0a:cf:3d:e7:4b:04:26:6b:55:40:
bd:dd:0e:d7:b7:e2:85:e9:92:2d:83:ac:84:5b:7f:
2c:67:8f:ab:78:5c:70:79:0a:5e:c6:15:4d:ca:67:
0e:d6:76:a0:dc:f1:b7:02:ef:31:ac:7f:9a:d9:81:
1a:32:cf:11:95:88:cb:07:38:0d:a5:99:f4:7b:0b:
d7:c5:6d:d1:bb:f0:e0:4c:92:ef:6d:c0:0a:47:f7:
45:68:7e:7a:0b:8d:01:bf:a3:2e:45:d1:63:65:7e:
74:4d:b2:1b:80:dd:8d:3d:3e:9e:89:9c:58:f1:fa:
40:fe:f4:c4:ca:74:39:44:0b:ac:c4:4a:6c:72:4b:
f8:6f:f4:72:7c:50:11:1e:48:27:0a:d9:ba:d0:23:
13:2a:30:de:6f:51:ba:30:db:95:e1:b5:42:d9:49:
b9:36:f9:59:3e:87:e5:bf:f1:f4:6d:5b:7c:11:5b:
03:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9C:66:5F:99:DB:D4:45:DB:C1:08:6B:2E:53:82:83:8A:C6:26:7F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tJxmX5nb1EXbwQhrLlOCg4rGJn8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.224.0/19
Signature Algorithm: sha256WithRSAEncryption
45:19:d4:b6:03:22:e4:84:b9:63:55:b8:36:5a:0d:15:cf:1c:
91:ee:25:c7:8c:37:cf:36:46:73:fb:02:32:6f:c4:25:da:0b:
8e:17:8f:af:d0:95:9f:81:c6:c1:ff:c3:a7:bd:0b:93:95:08:
3b:0e:90:f7:23:02:d7:8e:25:b3:c8:c1:d1:15:2c:7e:0b:f3:
2c:58:6a:9d:dc:de:45:8f:81:a7:4d:2d:4c:23:26:d9:eb:5a:
bb:5d:49:bb:f8:66:1d:ed:f2:eb:e8:81:b9:f9:58:ec:d6:25:
da:62:01:be:d8:b1:60:77:67:d0:bf:79:b2:43:53:58:c2:dc:
0d:3e:85:bc:46:a3:f9:b2:7f:36:0e:6c:eb:80:92:a4:f3:b0:
3c:39:60:5a:ab:14:33:b5:36:9e:d5:b9:95:80:17:fe:46:f8:
d0:00:a9:a1:26:6c:2d:92:0f:39:9e:4e:6d:1f:b4:86:ae:32:
79:6b:11:36:52:5f:1c:88:2b:ca:b3:21:60:b0:8f:65:24:bb:
39:35:29:b4:8b:cb:de:46:e1:f9:ba:f2:ba:8f:3e:c4:87:79:
1a:d3:7a:56:07:b3:dc:6b:e7:62:7a:4e:22:a6:90:cb:cd:d1:
ca:fb:9f:dc:5c:7e:9a:ea:b2:31:49:0f:31:16:af:b7:15:89:
5d:35:25:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:41 2024 by rpki-client on console-ams.rpki-client.org