Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vvaZ0JOzMMJOgBTgYis4vkOjDLE.roa
File: vvaZ0JOzMMJOgBTgYis4vkOjDLE.roa (raw, json)
Hash identifier: pETLv8jz2g31aKqwnml1sYHUYdQjxonM4Yx9ZJnkdRs=
Subject key identifier: BE:F6:99:D0:93:B3:30:C2:4E:80:14:E0:62:2B:38:BE:43:A3:0C:B1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1CF6
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vvaZ0JOzMMJOgBTgYis4vkOjDLE.roa
Signing time: Wed 29 Sep 2021 02:48:26 +0000
ROA not before: Wed 29 Sep 2021 02:48:26 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.192.216.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7414 (0x1cf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:26 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=BEF699D093B330C24E8014E0622B38BE43A30CB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0c:65:3a:95:cc:51:bd:a2:75:7e:ce:5c:60:
20:a9:7f:f9:c4:f5:fa:8d:47:ef:81:e0:74:78:ec:
29:ba:79:4e:e7:d4:3e:b0:7d:20:e8:f6:fe:64:22:
eb:c7:71:84:6c:a5:f9:1f:eb:1f:42:8b:a5:2c:e5:
bb:65:16:52:89:92:48:c7:0a:c0:1b:ec:f5:da:f7:
ec:1f:9c:d8:dc:65:03:76:b3:f5:89:3a:81:8c:b3:
cf:9b:ad:a6:c4:62:af:24:1b:c0:99:67:0c:d1:ac:
bc:c9:c2:91:17:45:98:3f:95:e3:8f:57:41:4a:f2:
cd:4c:b9:e3:54:9b:58:4c:78:24:21:dd:a7:ae:9e:
51:3a:58:4c:ec:6a:55:b5:56:68:08:65:96:7b:54:
fd:82:1e:ec:db:35:99:d5:eb:84:68:88:fa:8d:38:
c7:94:46:62:8c:8c:d7:7a:54:19:c1:50:43:ca:2a:
7a:3f:c0:c5:21:f3:ac:f9:db:c8:0e:d3:f0:37:5c:
47:12:f8:56:02:1f:26:3a:63:ba:82:80:88:b4:52:
9b:14:0e:36:51:b5:c2:26:5b:ea:a8:d8:d5:c4:e1:
b0:de:76:c7:dc:c9:4b:6a:45:a5:fc:3d:77:c3:70:
e5:98:af:b9:e5:86:32:08:f9:7e:09:02:e2:2f:53:
16:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F6:99:D0:93:B3:30:C2:4E:80:14:E0:62:2B:38:BE:43:A3:0C:B1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vvaZ0JOzMMJOgBTgYis4vkOjDLE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.216.0/22
Signature Algorithm: sha256WithRSAEncryption
79:c5:86:07:3b:16:74:39:9a:ed:7f:26:0b:97:0a:96:6d:33:
ba:8b:67:02:8b:84:5a:81:e6:98:db:33:98:0c:98:7e:fd:c2:
a3:9f:5e:3b:0d:fd:77:52:82:84:85:ee:00:32:cc:a1:43:d6:
3b:4a:1d:d5:d7:c9:90:a6:06:b7:71:d8:df:34:11:c2:4d:a7:
3f:08:df:85:80:fe:8f:08:93:a5:9e:c4:8e:2a:38:b5:db:7e:
76:e0:6f:75:85:85:f4:d5:28:8d:b7:02:4f:85:7a:ec:36:92:
64:1b:81:af:b8:b2:b7:c2:65:c3:04:9a:68:62:c8:ea:47:5e:
de:e8:a9:4f:1e:56:ef:78:0c:d8:84:d5:2a:4d:5c:cc:be:c9:
a7:14:68:16:36:86:3c:b2:af:4b:72:74:dc:92:b6:dc:b6:c1:
60:3a:60:5a:2e:00:da:87:78:3e:81:f1:2f:55:4f:d0:66:97:
40:8d:23:7c:78:25:e7:6e:bd:e6:59:d7:d4:04:db:59:ca:ad:
91:a3:8c:30:6f:fa:f4:20:97:71:93:a5:34:dd:e9:5c:0e:c5:
1b:8d:e2:b7:2a:fa:23:99:9b:2a:f7:49:f9:2a:b5:33:cc:37:
57:47:e1:18:a1:57:c8:6d:46:1f:9b:bd:9e:44:28:7c:e2:5f:
c6:61:eb:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:42 2024 by rpki-client on console-ams.rpki-client.org