Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/u6M90oLTv6rGsdALf5AQf_iOYkM.roa
File: u6M90oLTv6rGsdALf5AQf_iOYkM.roa (raw, json)
Hash identifier: ApWOBjqXrX5sbmFmbEF8EGTVXSsBfQpzlFA9w0QLoQY=
Subject key identifier: BB:A3:3D:D2:82:D3:BF:AA:C6:B1:D0:0B:7F:90:10:7F:F8:8E:62:43
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1D43
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/u6M90oLTv6rGsdALf5AQf_iOYkM.roa
Signing time: Wed 29 Sep 2021 02:48:48 +0000
ROA not before: Wed 29 Sep 2021 02:48:48 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 123.195.28.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7491 (0x1d43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:48 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=BBA33DD282D3BFAAC6B1D00B7F90107FF88E6243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:96:8e:27:1b:15:37:a8:f1:37:c6:e5:57:20:
b7:75:29:9d:88:b4:10:2b:07:a7:f0:9f:00:65:cd:
6f:38:2c:20:7f:02:3b:57:a0:ff:9b:b5:1d:7d:67:
ce:0b:83:e0:30:77:97:ca:c9:dd:51:b5:d3:82:83:
15:f7:6f:b5:bb:ff:d7:6b:e7:09:12:92:b7:35:91:
10:ac:2e:74:dc:29:ee:86:f4:a7:7d:4f:94:33:40:
da:37:c0:fa:c6:33:eb:67:4e:b1:c9:fd:a7:47:e6:
0d:5e:a2:a2:10:5b:29:f3:d6:be:c2:c7:89:08:35:
40:02:0e:60:47:57:ce:26:fe:81:a0:97:e4:a6:4a:
6f:7d:97:15:1a:4d:02:87:31:dd:39:b2:ad:a1:8d:
47:11:f8:49:1b:24:f8:d2:7a:8c:f9:bd:2f:12:db:
48:41:76:9b:70:b7:7f:1d:fc:d6:01:3d:26:55:79:
d8:38:91:af:48:46:82:91:22:90:c6:e7:92:ed:18:
63:94:87:14:d1:2b:28:7e:71:80:21:01:0b:f7:0b:
25:66:b5:b0:27:96:13:1a:47:8e:2c:6a:d4:2c:db:
89:28:d0:c3:da:f1:55:b8:c5:37:8c:f8:e4:da:b4:
ba:0b:9f:e3:ac:58:91:7c:44:0b:ea:a7:d6:3b:fd:
79:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A3:3D:D2:82:D3:BF:AA:C6:B1:D0:0B:7F:90:10:7F:F8:8E:62:43
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/u6M90oLTv6rGsdALf5AQf_iOYkM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.28.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:07:cb:b7:6c:43:24:1f:93:13:c1:91:db:a6:84:37:ad:45:
54:a7:48:d7:55:1c:93:52:dd:95:e6:da:90:0b:80:d9:ed:4d:
bb:6e:75:ce:7f:1b:0f:90:61:49:60:1e:da:3a:24:93:a9:6d:
ff:71:81:27:2b:9d:7d:bf:79:c5:b6:e7:b6:d0:81:00:ff:4b:
c0:92:02:36:a5:dc:e0:02:8f:02:46:d0:38:83:75:7c:eb:12:
6f:08:b1:d5:a4:03:0c:39:e8:c4:d6:37:52:67:ca:13:89:94:
e5:a8:04:79:2e:24:ff:7f:47:a1:94:ff:e7:ea:59:6d:9d:c7:
b5:b9:a8:37:c1:bd:34:47:31:30:c1:f9:9e:9f:2e:d6:25:5f:
ce:ba:d1:b0:e8:45:fa:70:0a:d6:b1:41:65:00:09:af:7b:56:
f5:d2:96:a1:44:f1:20:cf:83:3a:12:99:e7:53:41:fc:76:34:
f2:be:7f:4d:65:1e:d2:72:1d:99:98:89:77:c6:07:00:f2:ac:
8a:63:03:9a:e7:1e:27:f5:ea:ed:81:89:8a:10:d7:cf:3a:24:
4d:20:04:18:0d:04:fc:92:17:0e:cc:37:a3:34:db:18:0d:4e:
8f:eb:78:e9:90:cf:ff:db:59:e8:52:f9:8b:51:47:9e:71:80:
e8:c9:0a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:59 2024 by rpki-client on console-fra.rpki-client.org