Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w3-X4NtS1g3IjulRmqtqEDjw3ic.roa
File: w3-X4NtS1g3IjulRmqtqEDjw3ic.roa (raw, json)
Hash identifier: tGNEzi3qZXbMmZfxKlkL7vJNEgWT8pT+4PGasC8XOcw=
Subject key identifier: C3:7F:97:E0:DB:52:D6:0D:C8:8E:E9:51:9A:AB:6A:10:38:F0:DE:27
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1BB2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w3-X4NtS1g3IjulRmqtqEDjw3ic.roa
Signing time: Wed 29 Sep 2021 02:46:53 +0000
ROA not before: Wed 29 Sep 2021 02:46:53 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.195.8.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7090 (0x1bb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:53 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=C37F97E0DB52D60DC88EE9519AAB6A1038F0DE27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ee:af:1e:9c:18:df:5b:6d:4d:72:16:6d:e5:
e9:db:b0:61:e2:fe:c0:38:0c:1c:b3:f8:c7:08:65:
ab:2d:48:27:77:9d:7c:91:c5:04:02:42:c7:2a:e3:
8f:f8:61:5e:4d:93:9e:a7:ca:1d:de:6d:0a:97:10:
50:50:8f:b7:08:b5:78:70:3f:d5:ec:f2:99:4c:24:
9c:c7:c8:7c:ce:0b:07:83:f8:49:5d:8e:9f:ab:7e:
8e:8c:5e:ba:cd:43:16:ed:73:bf:aa:3f:91:b0:94:
cf:d6:9f:6f:0e:8b:79:bf:44:31:97:96:47:b7:29:
01:92:91:77:a5:ac:d4:e6:0c:34:87:2b:1f:45:9a:
5a:df:9d:28:de:32:ba:63:d4:f7:81:44:77:1d:f7:
c7:31:ce:6a:fc:3e:e7:86:2f:74:69:94:c3:e5:6a:
13:15:e5:13:18:c7:50:b6:d8:83:7d:24:32:e8:ec:
88:d1:ad:dd:44:01:86:4c:5e:6e:f4:ba:09:d2:89:
a9:f9:ab:32:7f:c2:c8:de:56:db:e2:32:db:4d:8f:
2e:b5:bd:21:a3:86:66:b2:c6:a3:0e:dd:b5:77:12:
c2:b2:0a:f3:9e:e1:d4:3b:27:b8:d4:5e:f5:a8:d0:
1c:cf:a0:16:38:3f:72:cb:68:b6:34:e6:bc:c0:f0:
5c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7F:97:E0:DB:52:D6:0D:C8:8E:E9:51:9A:AB:6A:10:38:F0:DE:27
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w3-X4NtS1g3IjulRmqtqEDjw3ic.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.8.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:48:4d:de:d5:cc:19:60:bf:b2:fa:e9:cf:e5:0a:7b:5b:c6:
39:2f:f2:c3:f9:06:5d:d0:63:98:a8:04:42:76:c5:7c:33:d0:
b0:77:06:09:a2:d8:ab:42:23:26:12:08:e3:cd:12:53:fe:36:
ca:5c:f3:19:07:34:c6:f1:fb:c9:6f:0d:78:63:1a:79:56:11:
ba:45:39:56:5d:86:ac:8a:81:de:b7:ac:34:c8:71:26:8f:24:
00:51:8b:fb:88:1d:75:af:d4:20:9e:09:49:5f:46:e0:50:80:
a6:53:20:92:b0:b8:af:2d:fd:81:89:c6:18:06:c0:99:4d:24:
d2:07:5d:23:aa:e0:1c:ec:cc:a6:c9:80:8c:6a:37:a3:d7:ba:
41:c2:b5:c4:c4:2a:44:9f:7e:ee:a5:9f:a9:da:75:d8:5c:30:
a6:66:bf:2b:0d:55:d6:75:70:a6:3b:e7:7c:9b:8e:0b:68:eb:
f3:68:68:d7:59:81:76:b5:09:cc:46:da:2d:ef:cb:6f:72:fd:
45:4a:ef:01:70:29:55:92:f4:14:6a:2b:c9:30:a3:54:e2:01:
b3:fe:a8:3c:6d:bf:3b:ad:0c:cd:10:aa:6c:81:63:49:39:70:
3e:b5:c2:1d:5d:84:fa:21:b1:db:14:a1:53:da:b8:6e:c3:62:
30:b2:cf:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:00 2024 by rpki-client on console-fra.rpki-client.org