Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v31I2b1sRimAJ3HiWpf4rogpdiw.roa
File: v31I2b1sRimAJ3HiWpf4rogpdiw.roa (raw, json)
Hash identifier: qEaB8Ou+eXmkwolhLfeGefPF4i64whigUvgFnRyR9mI=
Subject key identifier: BF:7D:48:D9:BD:6C:46:29:80:27:71:E2:5A:97:F8:AE:88:29:76:2C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v31I2b1sRimAJ3HiWpf4rogpdiw.roa
Signing time: Thu 15 Sep 2022 02:46:19 +0000
ROA not before: Thu 15 Sep 2022 02:46:19 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.32.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:19 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=BF7D48D9BD6C4629802771E25A97F8AE8829762C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e4:f8:36:d4:bc:4a:06:fc:e3:67:4a:2c:35:
94:74:0d:42:1e:70:10:29:11:2b:c9:c2:5c:ee:5c:
a7:ec:a7:64:00:bf:70:69:17:68:38:f0:2e:8d:51:
d0:7e:07:96:4a:51:fa:3c:0f:18:07:cf:df:9f:d1:
b0:2f:f9:fe:4c:68:da:5d:6d:b1:04:02:82:c7:f3:
07:b6:0a:81:2d:77:a1:97:c6:67:f9:bb:75:1e:41:
52:a8:33:8e:b2:9c:1a:3a:91:79:12:ff:b1:c5:08:
36:16:4b:0d:91:e1:4e:0d:3c:7b:f3:f4:b5:46:8c:
d1:dd:73:eb:9e:bd:f4:b7:7a:5b:04:5e:92:7a:8d:
c3:78:84:86:b4:10:9e:89:99:87:f5:a5:57:cc:81:
95:38:c4:0e:6f:26:1d:8a:bb:c5:9e:ea:f0:cd:bf:
d2:6e:d8:1e:61:f3:84:55:88:fa:cb:6c:d0:5c:ed:
5b:90:a4:2a:82:51:39:92:3f:73:6e:1c:f5:5b:8a:
15:da:f4:19:6a:f3:2a:5e:36:a8:98:ba:bb:a1:1d:
ce:cb:19:8c:0f:5b:23:3b:08:d1:6f:29:ca:8b:e5:
a2:d3:6b:ac:31:26:b8:95:9c:19:57:82:6e:d5:3d:
59:31:fc:dd:3d:29:99:16:4a:e8:88:7a:50:7c:0a:
16:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:7D:48:D9:BD:6C:46:29:80:27:71:E2:5A:97:F8:AE:88:29:76:2C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v31I2b1sRimAJ3HiWpf4rogpdiw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.32.0/22
Signature Algorithm: sha256WithRSAEncryption
10:e2:1a:f0:fa:7b:5d:22:19:8f:65:9c:ae:a3:7b:30:5c:57:
aa:1f:63:fe:ed:ef:b3:c2:13:d6:12:2d:a3:9b:b0:a1:7f:cc:
55:c6:19:e3:a9:94:74:1d:00:a1:f9:6b:f2:b8:4f:c6:71:b8:
df:33:f4:3c:65:52:bc:c6:97:78:bd:ce:f4:2e:67:7b:e9:23:
f5:36:c6:be:4f:11:51:26:36:24:44:ea:f3:0b:60:81:ed:91:
63:73:35:34:51:e9:b6:a4:3e:72:15:6a:df:cb:b0:1e:7e:a1:
69:9a:8e:b0:b9:21:a8:64:cf:c1:c6:d3:c6:aa:86:33:b1:16:
0d:66:b8:d6:15:38:51:fe:b2:6d:5d:38:83:86:a2:22:d8:6e:
03:73:d8:6f:95:c9:1d:3c:97:a3:db:1c:4b:d3:0a:13:b0:58:
4c:51:ba:b6:57:cf:38:f5:17:29:81:7e:1b:81:d9:4f:ed:b5:
a7:b3:fb:aa:09:f3:89:8b:cf:5f:ab:fc:dd:f2:70:17:d9:85:
4c:72:31:3c:ad:05:3d:fa:de:d8:9e:4f:2b:ee:09:d8:aa:d5:
b9:61:a9:c7:36:6e:5a:cf:54:fd:5c:c3:23:90:c6:fd:38:e2:
fb:db:f1:77:e4:a8:71:eb:77:f3:a9:40:65:42:14:7a:2b:48:
15:20:1c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:59 2024 by rpki-client on console-fra.rpki-client.org