Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tuRQDipS2fhtyPud2oNOw_pimvQ.roa
File: tuRQDipS2fhtyPud2oNOw_pimvQ.roa (raw, json)
Hash identifier: 19EWm/597ysEZUepsDBGAl9ltps2acu3uvJj5G+27jY=
Subject key identifier: B6:E4:50:0E:2A:52:D9:F8:6D:C8:FB:9D:DA:83:4E:C3:FA:62:9A:F4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2308
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tuRQDipS2fhtyPud2oNOw_pimvQ.roa
Signing time: Fri 25 Nov 2022 04:41:57 +0000
ROA not before: Fri 25 Nov 2022 04:41:57 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.188.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8968 (0x2308)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:57 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B6E4500E2A52D9F86DC8FB9DDA834EC3FA629AF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:94:0e:46:89:85:96:28:7b:4c:85:87:ad:fe:
0d:6b:b5:6e:50:c2:92:c9:01:d0:d3:67:38:2b:a2:
61:89:c1:bb:f5:64:99:ef:63:e3:9b:d6:3c:0e:50:
d5:be:3f:de:1c:02:37:0c:e9:4f:52:22:57:69:97:
01:36:0a:33:f8:01:d5:3b:bd:6e:2e:e1:f8:4b:46:
63:df:ca:80:d8:08:8f:93:82:85:6b:9b:78:01:f2:
69:e6:2e:6c:0f:80:91:5d:c7:6e:d9:f3:67:a5:02:
cb:ea:73:7c:9d:2e:15:14:9f:3f:6c:41:1d:1a:04:
6a:18:16:a4:d2:7c:b5:ad:f7:d6:72:05:55:ab:8c:
84:7c:8e:fe:7e:2a:29:f8:0e:8b:bc:fc:63:b4:f3:
4f:41:ae:2b:63:53:95:71:6e:c3:d8:08:43:70:7c:
d3:ee:f6:f4:fd:2c:48:ad:02:c7:86:2a:73:ef:e5:
ba:79:ab:2a:05:d5:76:7e:67:f6:d9:f9:1c:e9:af:
87:1c:92:81:c8:cb:6f:76:61:d4:c9:0d:70:64:58:
cb:51:24:e0:e2:39:0e:72:f6:c3:fa:eb:7b:7c:e2:
68:7b:cd:b6:a7:88:44:5e:23:a8:32:51:26:a2:6f:
75:0b:d0:a5:b4:73:e8:be:d1:f9:b9:58:ad:f5:5b:
f1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E4:50:0E:2A:52:D9:F8:6D:C8:FB:9D:DA:83:4E:C3:FA:62:9A:F4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tuRQDipS2fhtyPud2oNOw_pimvQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.188.0/22
Signature Algorithm: sha256WithRSAEncryption
69:91:d1:82:a7:bb:91:86:aa:22:fe:00:d7:9b:b5:86:55:aa:
49:87:29:31:6f:7c:ba:7e:4d:fa:4c:5d:28:ff:74:e2:fd:d6:
7d:c7:d5:07:ed:51:f5:6a:e2:39:b0:d2:f0:45:e2:a7:22:d2:
c3:18:ee:5f:7c:a5:68:ca:1c:39:e5:5b:65:93:48:e0:ff:0b:
bb:5f:ed:b9:00:b4:c7:df:27:51:6d:e9:13:d2:6d:af:81:cb:
aa:d6:8b:b1:f2:d1:59:92:85:79:e2:2f:07:b2:38:6f:c1:b6:
c1:ff:dd:30:7a:6a:0b:b6:98:54:46:a1:d4:cb:c1:c8:86:22:
8f:ef:4c:dd:71:54:fc:6d:1d:f9:7b:8f:f1:9c:9b:20:b8:ce:
3d:2d:3e:9e:45:b1:b0:8c:3d:6a:c8:94:13:db:a9:30:80:ca:
99:30:58:65:64:67:0e:d1:fc:cc:fd:86:94:7d:91:02:41:41:
43:8f:b8:50:7d:45:e9:f2:0f:04:d4:f8:6c:50:52:1b:0b:fd:
db:62:02:58:57:67:d5:0c:89:71:28:0b:0b:c9:2e:50:fe:8f:
46:18:2a:27:45:66:55:96:64:b3:d4:de:cd:20:a3:c3:5a:c6:
f5:f5:40:ae:05:43:71:9a:16:e6:6c:b2:90:d7:7e:ff:f0:f4:
63:57:ff:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:42 2024 by rpki-client on console-ams.rpki-client.org