Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vcrKn6UIJ5Q3kuAeErchgojHqcc.roa
File: vcrKn6UIJ5Q3kuAeErchgojHqcc.roa (raw, json)
Hash identifier: b5yxzyYVoJrTSFiiusQ/w1Rm/9v2Jk/Lza05+K6/iOo=
Subject key identifier: BD:CA:CA:9F:A5:08:27:94:37:92:E0:1E:12:B7:21:82:88:C7:A9:C7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2105
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vcrKn6UIJ5Q3kuAeErchgojHqcc.roa
Signing time: Fri 25 Nov 2022 04:39:25 +0000
ROA not before: Fri 25 Nov 2022 04:39:25 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.236.128/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8453 (0x2105)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:25 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=BDCACA9FA50827943792E01E12B7218288C7A9C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:35:0d:7f:2f:77:f2:ae:c1:75:45:53:a7:d1:
01:f2:09:22:5d:c8:7d:9f:6d:e0:a8:f6:84:f6:41:
df:ec:ab:a2:87:70:5b:f0:e9:6b:3b:21:67:64:b5:
f9:02:a5:23:d3:05:cc:82:35:d1:c6:aa:f0:7d:3f:
f9:5f:b3:a3:ae:a0:a6:56:ee:a8:ce:3a:bb:b0:94:
8f:72:19:2e:07:3f:3b:07:d3:9a:ca:8b:b2:3f:df:
74:d7:e9:5e:d8:de:d6:23:2b:e9:af:ea:04:a5:bc:
48:a3:e5:12:ae:b8:ee:7b:5c:3e:b1:07:4b:58:a2:
ce:42:ee:14:1f:14:ee:71:b7:cd:eb:ac:b5:96:f8:
46:35:b7:c5:e0:38:89:20:a6:5d:4a:9c:b4:d9:5c:
7c:49:b7:8c:79:a8:82:02:91:58:e6:97:f4:83:ae:
63:3c:17:02:30:b8:7d:33:cf:65:52:31:9a:c3:c2:
8b:42:70:8b:47:91:89:40:de:58:7e:94:01:86:85:
1d:83:17:d8:22:36:04:2d:01:b2:41:4f:6a:5e:23:
c9:72:ba:bc:8e:40:35:3b:c4:95:e2:b9:56:36:33:
4a:d2:71:2e:73:2c:75:b7:1a:45:95:b4:9b:7d:43:
e7:23:7e:ea:98:42:c4:f5:08:16:d7:57:7c:3d:7d:
7a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:CA:CA:9F:A5:08:27:94:37:92:E0:1E:12:B7:21:82:88:C7:A9:C7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vcrKn6UIJ5Q3kuAeErchgojHqcc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.236.128/25
Signature Algorithm: sha256WithRSAEncryption
2a:27:b2:21:17:49:ba:12:43:e3:00:9f:2a:69:88:68:da:a6:
87:a7:71:87:d1:2e:15:1c:08:4b:56:49:a9:ab:b6:2e:bc:19:
d8:b8:70:91:39:d9:a4:86:71:b2:0d:59:72:e6:3d:42:f4:ac:
cf:27:dc:72:08:27:72:f9:ef:81:94:de:b3:f5:ea:3e:77:e2:
1b:5a:79:ca:30:86:8c:85:d7:38:ef:90:56:fb:a6:3c:ae:ab:
fb:a7:b8:66:a7:d1:22:3b:0c:68:9a:a1:84:2b:c1:1f:da:c4:
4a:32:9e:d6:72:3a:56:1c:11:b5:3d:4a:1b:90:ed:95:fb:65:
6c:cc:bc:f4:bd:d4:86:b6:ad:83:99:ee:4c:82:e1:c8:47:5d:
5a:b9:85:66:de:e2:f5:2a:d4:a3:43:4b:d0:20:d1:0b:8b:1d:
0e:c0:b9:dc:f0:a1:5b:eb:5d:db:a8:81:65:27:58:1f:19:42:
c1:df:83:f4:55:b8:d0:54:24:27:9d:03:95:e5:c3:e8:87:ef:
fa:33:05:b0:a6:a5:7b:bc:ee:51:8d:52:27:01:61:19:d8:08:
3e:2e:08:f0:fb:f7:1a:ef:c5:86:1a:52:79:81:cf:60:36:a9:
9d:16:b8:25:e4:e9:69:8f:7c:44:13:a4:79:0c:d1:ec:d9:d0:
4f:b5:c4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:00 2024 by rpki-client on console-fra.rpki-client.org