Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w3irTOesesLuQxPs6hLj8rKCOzw.roa
File: w3irTOesesLuQxPs6hLj8rKCOzw.roa (raw, json)
Hash identifier: aK8r9n8KhsfdeKxMkGkmKRyjSnayh+J/zjlgUXRetn8=
Subject key identifier: C3:78:AB:4C:E7:AC:7A:C2:EE:43:13:EC:EA:12:E3:F2:B2:82:3B:3C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1EB5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w3irTOesesLuQxPs6hLj8rKCOzw.roa
Signing time: Wed 04 May 2022 07:50:11 +0000
ROA not before: Wed 04 May 2022 07:50:11 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 123.195.24.0/21 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7861 (0x1eb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: May 4 07:50:11 2022 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=C378AB4CE7AC7AC2EE4313ECEA12E3F2B2823B3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1b:3d:1b:75:89:f7:15:3a:50:96:b6:36:81:
12:0e:2a:d0:5b:1a:77:98:7f:af:74:9c:ef:da:f3:
cc:ba:af:45:50:8d:20:26:88:52:a6:4d:62:ff:c8:
dc:96:85:3d:01:b9:89:5e:4e:9d:3b:53:62:0a:70:
32:92:56:fe:d1:ca:a7:08:da:39:4a:4b:01:79:ba:
3b:cc:3d:ae:0c:e5:cf:a5:69:14:e0:87:80:3c:69:
21:38:9d:8a:52:6d:bf:2b:44:cd:f9:c8:04:a3:73:
d9:5d:00:7f:b8:d6:04:cd:09:4c:94:4e:85:51:9d:
0b:4e:6b:a4:ee:52:b6:de:19:05:75:7c:8e:4b:b5:
f6:f1:a8:60:8e:59:fb:15:13:db:73:b7:0a:80:e5:
6a:ee:72:a6:22:4e:21:2e:d8:1b:ad:c7:cf:5f:0c:
ee:89:4d:20:71:19:c3:59:da:01:cd:17:7e:2a:f9:
bf:cd:63:7d:ab:9a:35:15:1a:98:35:48:aa:08:78:
26:11:00:16:d2:6a:46:3b:12:b5:df:11:a2:2b:a0:
6e:57:8c:33:a7:38:a9:cc:b3:43:8e:cb:96:5e:53:
d9:ea:74:09:12:5a:d6:64:ee:25:e0:30:de:a3:06:
74:f2:42:5b:a2:50:88:43:03:4c:ff:f2:d3:67:80:
87:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:78:AB:4C:E7:AC:7A:C2:EE:43:13:EC:EA:12:E3:F2:B2:82:3B:3C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w3irTOesesLuQxPs6hLj8rKCOzw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.24.0/21
Signature Algorithm: sha256WithRSAEncryption
37:80:d2:06:70:62:ae:2e:8c:99:f0:11:ee:1f:c5:c8:5b:b1:
1a:4e:20:bd:d8:35:3a:bd:db:58:98:34:c3:a8:0a:17:f6:d5:
f2:de:91:65:0d:f5:72:8d:e2:e2:55:8d:b2:fd:b4:01:4f:b8:
e9:62:be:ed:bc:41:af:36:ea:03:0c:72:18:08:62:86:5e:a1:
f5:17:44:53:b2:90:e0:9e:de:f1:f9:98:ea:30:0a:59:38:62:
30:a2:b1:4b:7c:8c:00:fa:e8:69:02:19:be:2a:39:01:bf:b7:
c7:34:f9:57:5e:aa:aa:4d:09:30:70:e5:89:7a:db:cc:7e:af:
22:88:05:f6:ba:48:24:ed:5b:24:c2:86:79:e2:6a:12:e7:84:
99:41:df:25:99:a4:a4:f5:55:c9:8b:cc:8c:b2:3f:e8:46:87:
4a:0f:f9:eb:b7:5e:8e:53:ba:76:41:21:5f:f2:a0:9a:21:6c:
a8:3f:ce:78:c7:20:72:91:d3:c1:0e:0d:9e:ae:64:eb:36:12:
12:ad:ae:51:84:83:d8:39:b8:7b:ea:02:70:cc:13:53:f2:4a:
01:3e:00:44:74:e2:b4:d5:7f:05:13:c3:a8:5c:96:a7:08:1b:
50:5b:52:c1:77:6e:89:8d:f8:74:b5:3c:b0:03:01:96:7d:3f:
d1:d8:42:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:30 2023 by rpki-client on console-ams.rpki-client.org