Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tiFmURf7Qtc1zw-Z38crGDnoblA.roa
File: tiFmURf7Qtc1zw-Z38crGDnoblA.roa (raw, json)
Hash identifier: Qj3V5VZPuWxNeXb7Gnalt+o3C3q9yoV75gMCC/sewVk=
Subject key identifier: B6:21:66:51:17:FB:42:D7:35:CF:0F:99:DF:C7:2B:18:39:E8:6E:50
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tiFmURf7Qtc1zw-Z38crGDnoblA.roa
Signing time: Thu 15 Sep 2022 02:45:49 +0000
ROA not before: Thu 15 Sep 2022 02:45:49 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.132.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:49 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B621665117FB42D735CF0F99DFC72B1839E86E50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:54:44:88:3a:16:4e:17:40:ea:43:50:b1:97:
ff:7d:78:66:4a:82:3b:69:18:75:3e:6d:0d:de:38:
00:61:11:63:83:c2:2b:77:a8:ff:93:35:b1:21:d4:
6e:21:1d:35:77:d6:a9:2f:c3:85:ab:c8:62:e7:95:
d7:dd:d4:9e:66:50:da:f3:42:a5:04:e4:93:eb:21:
e6:2b:95:cb:47:15:80:21:9f:1e:aa:9b:eb:95:2a:
0c:71:c4:a3:fc:ae:05:02:15:c8:1d:f5:4a:08:2c:
df:08:f2:4e:4c:10:08:27:40:cd:37:4a:5c:d2:0b:
af:87:da:6d:36:6a:82:b0:ad:a0:7a:ed:7a:d8:0e:
13:23:c9:77:a3:d5:ac:9f:ab:68:79:3b:74:99:d9:
a6:39:6b:05:cb:fe:f3:80:0f:2a:46:a3:7e:f1:9b:
1f:b6:9f:03:f1:3d:1d:a2:3c:03:17:fd:1d:0b:ad:
af:33:12:58:9d:55:36:ba:73:73:e4:6a:b4:8a:fb:
a2:38:69:86:47:bd:97:9a:82:6e:9c:f7:cc:52:5c:
34:cc:56:09:c8:e8:f3:3b:83:0e:da:73:b4:ec:34:
f2:40:e0:bd:1a:7f:b0:da:0b:f1:61:4e:9f:fa:90:
07:0a:17:a4:50:24:d8:73:e0:06:a8:de:5d:ab:68:
d5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:21:66:51:17:FB:42:D7:35:CF:0F:99:DF:C7:2B:18:39:E8:6E:50
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tiFmURf7Qtc1zw-Z38crGDnoblA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.132.0/22
Signature Algorithm: sha256WithRSAEncryption
44:c5:b9:49:08:26:17:98:8e:4b:ee:ee:6b:26:d1:c7:cc:e0:
09:a7:8d:35:f2:15:1d:ab:f5:8e:ed:f4:86:77:a0:f2:4a:0f:
84:3b:d8:69:22:52:41:91:0b:9e:92:98:b8:b7:38:30:01:18:
72:c5:58:61:f0:bc:a0:39:db:84:43:c2:23:79:7a:2e:66:d9:
6c:cf:fa:86:ac:b4:46:a0:55:cb:63:26:68:70:a3:53:18:78:
0e:97:87:c4:72:ae:dd:3a:46:d1:a4:06:4e:2d:76:ba:60:ac:
4c:82:8a:f7:04:e2:f3:2e:8b:00:b5:3a:87:1f:4d:d7:61:b4:
18:2b:1a:88:f3:1c:05:44:ac:8e:29:2b:1c:99:3a:67:7f:8f:
60:0b:a5:fe:bd:c2:0c:8d:1f:88:dd:69:5d:4c:a2:fb:af:c7:
26:41:3e:2d:5f:bd:b8:59:b1:c0:2f:93:99:04:ae:16:14:97:
be:71:cd:fb:bc:74:e3:4a:cc:4e:12:ac:43:68:8f:60:16:c7:
4e:d3:b2:e8:44:89:03:67:f6:c0:6d:f9:a7:f4:53:a7:86:6a:
87:77:ed:59:97:40:70:ab:c1:09:45:2e:08:f3:e0:5d:5b:6b:
14:31:0c:9b:cb:25:1d:ce:8e:47:c2:37:49:f5:cc:f2:29:0e:
d1:86:70:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:41 2024 by rpki-client on console-ams.rpki-client.org