Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tRoCw3_fp539Smge3gju2PE1IRc.roa
File: tRoCw3_fp539Smge3gju2PE1IRc.roa (raw, json)
Hash identifier: zyuUkWAU2sMZVoeGCDTQTAlQbAHtnsk7VBe29QhV76o=
Subject key identifier: B5:1A:02:C3:7F:DF:A7:9D:FD:4A:68:1E:DE:08:EE:D8:F1:35:21:17
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1BED
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tRoCw3_fp539Smge3gju2PE1IRc.roa
Signing time: Wed 29 Sep 2021 02:47:10 +0000
ROA not before: Wed 29 Sep 2021 02:47:10 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.195.228.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7149 (0x1bed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:10 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=B51A02C37FDFA79DFD4A681EDE08EED8F1352117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:53:c6:e0:d9:80:7e:37:d8:7e:32:69:3e:b4:
df:1f:20:3b:aa:6f:e9:43:b2:d0:46:95:6a:f5:73:
34:cd:dc:d3:65:0f:11:63:7e:18:f5:3f:6d:78:07:
30:54:48:62:d7:16:60:98:03:52:4e:da:ad:c9:0e:
5b:de:73:49:84:5c:c3:7a:c6:9d:c3:5a:26:91:48:
f2:1b:40:df:6a:7f:b3:70:cd:23:a1:7e:e5:1d:55:
8a:fe:14:67:27:47:6d:8e:ba:0c:71:27:1b:d9:40:
29:18:f5:ac:9f:fb:c1:18:c1:e0:7c:f9:71:75:37:
0f:50:03:dd:2d:4a:d5:a9:30:35:0a:40:52:02:9f:
2f:34:42:16:65:67:a2:89:2a:5f:7a:de:b3:12:2a:
79:ab:88:d3:6b:55:4d:69:ee:5d:2c:52:28:ff:8f:
d4:4c:44:3e:bd:bd:28:b6:d1:6a:2b:8c:bd:05:8a:
ef:91:f7:9b:45:7a:c7:b2:69:0a:11:1c:76:45:fc:
ab:2c:9e:7d:e0:b3:37:22:5e:00:16:ab:84:f9:c0:
8d:d1:94:6b:49:76:cf:d3:70:8b:4a:c3:f3:fb:ec:
b9:5c:70:9c:3a:d9:45:6a:5e:0d:82:46:3f:2c:3a:
ec:58:7b:56:61:30:9a:88:d8:d2:ad:93:a4:98:ea:
56:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:1A:02:C3:7F:DF:A7:9D:FD:4A:68:1E:DE:08:EE:D8:F1:35:21:17
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tRoCw3_fp539Smge3gju2PE1IRc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.228.0/22
Signature Algorithm: sha256WithRSAEncryption
58:f9:fb:25:25:87:6d:b8:59:be:7f:d4:75:81:ad:b7:49:97:
6b:5c:b2:58:b4:7e:bb:64:92:0c:a8:ef:4b:8b:79:b0:43:17:
9a:31:be:f5:38:15:dd:48:35:39:d5:7c:56:77:0d:e5:19:63:
ad:14:1a:fc:29:3c:a1:1f:32:11:90:72:b4:7c:6f:1d:55:3f:
7e:9a:f4:bc:15:3a:29:6b:9b:47:80:fb:e3:64:51:1b:4c:d8:
2d:1b:fb:2d:9b:e3:5e:ed:7d:1a:cb:72:44:f8:d7:53:35:1d:
a2:51:23:46:98:14:65:21:69:b7:58:34:0d:64:dc:3f:43:be:
80:2d:44:07:d9:f6:41:50:29:a6:90:fa:67:b5:d7:4c:9e:95:
de:3f:f8:e9:b1:79:ed:80:aa:97:43:7d:b9:f9:ca:2c:46:c9:
d9:55:1a:be:3e:d9:6c:71:f5:12:48:8b:14:27:c6:95:b2:d9:
65:61:5e:6c:0a:32:47:7f:f0:b0:38:2c:0d:88:79:da:b6:76:
18:d4:a0:95:21:cd:51:b6:a2:ce:73:02:38:ba:16:3d:0d:7e:
ed:02:f9:ee:26:91:fd:7a:37:22:ea:86:47:bf:d8:04:6c:ab:
db:ee:46:ac:34:dc:6c:5b:a7:1b:ef:10:c7:f1:84:1f:cf:f4:
f4:86:88:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:41 2024 by rpki-client on console-ams.rpki-client.org