Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vZ4MFYzqax6DY6gtIF5poOjsErw.roa
File: vZ4MFYzqax6DY6gtIF5poOjsErw.roa (raw, json)
Hash identifier: vt7YEkgps9pazQUpUEYQePXEmDWHb2w/pTKedom6uSg=
Subject key identifier: BD:9E:0C:15:8C:EA:6B:1E:83:63:A8:2D:20:5E:69:A0:E8:EC:12:BC
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2121
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vZ4MFYzqax6DY6gtIF5poOjsErw.roa
Signing time: Fri 25 Nov 2022 04:39:32 +0000
ROA not before: Fri 25 Nov 2022 04:39:32 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.168.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8481 (0x2121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:32 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=BD9E0C158CEA6B1E8363A82D205E69A0E8EC12BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8a:c4:3a:18:81:b7:9f:db:c9:ab:bb:67:ff:
b9:3c:8c:99:d7:bf:33:e7:b5:67:37:38:00:30:96:
4c:02:88:68:93:b6:d2:e2:f9:1a:e1:7c:bb:2c:ef:
61:91:50:f9:25:04:e9:a2:fd:8d:d5:4c:e0:63:29:
36:db:0b:42:b3:7e:8e:d4:2e:16:7e:68:c5:91:a7:
92:c6:d0:9a:64:30:ee:2e:f7:cf:d7:98:6a:f1:72:
02:df:ec:0f:31:f7:3f:e6:20:a3:c6:79:dc:5c:c3:
3c:43:d5:9e:eb:51:ed:73:e9:cc:e1:ba:85:57:d0:
db:d7:92:00:f5:41:60:bd:8d:20:88:4d:66:35:17:
8f:a5:44:bf:a0:66:ef:3f:26:ec:b2:1d:63:1d:ab:
9a:3c:6f:f5:42:16:ee:a8:97:99:f9:c1:0a:5c:9f:
d7:ab:98:60:6e:7d:b8:20:f6:72:72:cc:88:79:d3:
06:8e:59:d5:48:60:19:b8:6e:50:24:92:2c:29:a7:
45:5b:42:05:2b:62:db:cb:99:0a:ec:39:40:51:5b:
64:ee:8e:86:e4:e5:81:a5:c2:b3:29:64:48:0f:5b:
1b:1b:fa:8a:03:4d:d6:80:22:98:e4:38:cc:75:47:
28:3b:64:aa:09:e0:26:ef:c5:d4:92:d1:e0:46:06:
e6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9E:0C:15:8C:EA:6B:1E:83:63:A8:2D:20:5E:69:A0:E8:EC:12:BC
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vZ4MFYzqax6DY6gtIF5poOjsErw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.168.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:54:eb:4d:6c:95:c6:6e:a3:29:8e:3a:85:f7:1f:98:c9:2f:
ba:e8:0e:bb:2f:24:77:de:74:eb:cd:98:a9:70:9a:4b:45:05:
3a:b2:df:66:fb:10:35:3f:8a:4c:50:2c:19:a5:cd:7a:7a:d7:
46:b0:24:19:74:e9:5b:63:f8:64:2c:c7:26:4b:0d:3b:19:31:
b3:88:89:28:37:1f:db:e1:f7:fd:06:f2:e4:57:b6:8f:8c:0c:
85:a9:12:81:e9:eb:94:4c:73:2d:c1:04:2b:79:be:06:4b:1c:
11:6b:e3:a6:a4:7c:00:a0:1b:b8:33:3a:93:16:d7:d4:7d:1e:
8d:d8:a8:b1:b5:30:15:86:23:70:df:62:2d:a4:55:0b:f9:ee:
a0:0c:e3:01:29:c0:23:f3:bd:49:82:37:2b:d4:79:47:82:c6:
23:bd:f8:31:8a:71:26:30:e2:f9:cb:8b:24:98:1f:de:6e:8e:
30:b9:ed:0d:43:c1:99:e6:e2:a7:c3:20:25:a9:7b:57:bd:93:
e0:a4:cd:4a:4d:e9:5c:77:51:c9:f0:d4:c4:17:83:fc:fc:89:
67:ba:c5:9e:d2:7a:19:68:d8:be:45:7e:d2:bc:2e:b2:f7:3c:
93:32:a0:6a:4f:6f:e6:63:ff:d5:89:0a:78:e9:26:f3:4d:78:
4b:87:16:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:42 2024 by rpki-client on console-ams.rpki-client.org