Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ttfhmC6YxaY1v70Ck1m19lbK8o8.roa
File: ttfhmC6YxaY1v70Ck1m19lbK8o8.roa (raw, json)
Hash identifier: HDgG7HRVT6CKUSogjhN/0F+63rPW9KUAwyjcJCsA9/c=
Subject key identifier: B6:D7:E1:98:2E:98:C5:A6:35:BF:BD:02:93:59:B5:F6:56:CA:F2:8F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1E3F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ttfhmC6YxaY1v70Ck1m19lbK8o8.roa
Signing time: Wed 27 Apr 2022 09:01:28 +0000
ROA not before: Wed 27 Apr 2022 09:01:28 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.193.223.192/26 maxlen: 26
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7743 (0x1e3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Apr 27 09:01:28 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=B6D7E1982E98C5A635BFBD029359B5F656CAF28F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:43:34:33:8e:a2:86:ce:d0:75:b0:67:fb:de:
1d:b6:3f:9a:30:b7:35:db:0e:92:d6:68:79:4c:90:
03:ee:8f:d0:91:a1:3a:ac:91:79:ba:8e:c9:10:44:
aa:9b:ee:a7:a0:77:0e:f4:04:56:fc:da:51:d7:60:
b9:1e:34:1d:97:41:c0:af:a8:16:12:f2:f1:99:ab:
e3:aa:6d:4d:a1:e2:e8:c8:79:d4:9d:6f:1f:27:e6:
50:7c:4c:0f:5f:e3:73:95:02:2b:16:87:fa:99:44:
99:63:52:00:bf:b0:fa:b4:ca:91:77:47:8d:bb:1c:
43:85:f6:02:c5:69:43:22:08:95:5d:9e:7b:9d:dd:
0e:fd:b3:2f:8f:29:86:5a:fd:37:5c:bf:34:55:10:
c4:72:b3:bf:45:c3:3e:cd:b2:1f:0c:82:08:15:a4:
ee:2f:0c:b8:3d:fa:24:17:3d:a8:41:a2:dd:46:be:
66:9f:58:a8:ab:6c:d9:eb:d7:12:98:54:21:0f:d2:
5d:63:c8:47:2e:63:53:70:a4:e5:ed:21:1e:86:8a:
a9:da:73:7c:18:bb:35:e6:b1:23:6e:7c:06:f3:f1:
ca:fb:84:0e:b1:17:c9:2c:e5:bd:e7:94:61:51:f3:
12:31:45:f4:19:34:ce:b3:42:e8:f8:86:b5:12:cb:
c9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D7:E1:98:2E:98:C5:A6:35:BF:BD:02:93:59:B5:F6:56:CA:F2:8F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ttfhmC6YxaY1v70Ck1m19lbK8o8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.223.192/26
Signature Algorithm: sha256WithRSAEncryption
41:fc:cd:50:db:88:34:22:e9:74:61:39:5f:af:3f:c5:7e:68:
eb:23:2b:78:30:89:ce:12:61:66:29:9e:cc:d8:ab:af:a2:4f:
40:d7:1f:85:28:0a:4a:3f:dd:e1:68:0b:b0:c8:a9:9a:a4:d5:
ad:64:a1:78:86:95:be:ff:b2:37:42:f9:bb:b0:9b:ab:f0:92:
8f:7d:07:f4:35:26:8c:3d:2e:a5:ec:ea:c7:ef:a9:8b:b4:09:
b1:71:c1:d7:60:58:07:ae:cb:97:10:4c:ff:e7:ad:3a:f0:f7:
52:ea:81:69:c0:d3:80:5b:df:da:f8:71:ae:b8:70:e4:d5:f8:
07:63:a7:84:b5:cc:a8:7a:b0:52:f9:17:38:93:ac:39:8c:92:
2f:00:9f:1f:7d:85:d5:b6:d5:61:80:69:44:c1:38:a7:ca:20:
7f:5c:25:00:7d:e0:7a:d4:1b:70:dd:c3:d9:ae:1c:ec:ee:0a:
1b:47:5f:94:8e:c9:21:9a:f1:cd:35:42:59:3d:29:13:8a:f7:
02:aa:26:a6:1d:8f:bb:6f:14:34:f8:55:a0:ec:5e:43:c9:d0:
98:c8:6f:66:7e:28:66:13:da:69:b8:09:b2:f0:2c:42:9f:25:
9f:28:1e:10:07:f3:2e:9b:6b:aa:1b:3a:13:4b:b0:42:97:65:
90:ee:89:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:59 2024 by rpki-client on console-fra.rpki-client.org