Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wKVg2YWJQaaTbwRvQWgduNDrc_Q.roa
File: wKVg2YWJQaaTbwRvQWgduNDrc_Q.roa (raw, json)
Hash identifier: Lz4nAVHjFCsdP7pi7pP0OOKMremHb7c1AET4N8OzENw=
Subject key identifier: C0:A5:60:D9:85:89:41:A6:93:6F:04:6F:41:68:1D:B8:D0:EB:73:F4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 20F6
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wKVg2YWJQaaTbwRvQWgduNDrc_Q.roa
Signing time: Fri 25 Nov 2022 04:39:21 +0000
ROA not before: Fri 25 Nov 2022 04:39:21 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.248.0/21 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8438 (0x20f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:21 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C0A560D9858941A6936F046F41681DB8D0EB73F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b8:48:66:32:75:73:3c:79:b6:76:aa:d5:f2:
30:07:f8:1b:70:20:c4:33:dd:57:2a:b7:47:c7:04:
25:7c:58:38:92:e9:73:2e:d2:6f:46:5f:12:42:75:
04:a6:cf:e4:ef:c7:02:bd:24:4f:6a:c4:ef:94:0c:
e6:59:36:3c:52:82:5d:3b:7c:52:dc:3c:78:38:6a:
8a:fb:68:7d:c9:12:c6:8e:e2:2a:75:be:e6:e1:7b:
9a:7c:26:27:19:82:9f:c7:50:ea:71:74:5b:3a:26:
cd:41:a8:47:c3:a6:5d:bc:96:aa:cd:b2:b3:f3:f4:
e5:1f:fc:0b:38:5d:b8:97:9b:c8:2f:49:b0:01:86:
61:87:67:53:70:c2:9a:c2:f9:18:3b:26:b5:5c:1b:
1b:20:2f:d7:a4:54:6f:7b:9b:c4:3b:f5:7d:38:2f:
40:1e:b4:75:15:a6:9c:43:96:0b:5c:33:99:05:be:
05:fa:78:da:72:6e:11:73:43:ae:40:f2:1c:80:fd:
30:76:ee:e6:f0:ed:53:ee:39:73:93:6e:e2:cb:a3:
24:53:38:92:c1:9f:05:c7:95:b4:ce:61:2c:14:02:
2e:a9:01:7b:12:d3:8f:9b:44:4f:e8:55:25:d0:73:
dc:7d:c7:ac:03:f8:ed:72:03:79:cb:2d:ca:39:d6:
97:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A5:60:D9:85:89:41:A6:93:6F:04:6F:41:68:1D:B8:D0:EB:73:F4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wKVg2YWJQaaTbwRvQWgduNDrc_Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.248.0/21
Signature Algorithm: sha256WithRSAEncryption
5d:e2:e8:d4:80:bb:97:ee:a4:bc:fd:68:71:18:c9:61:63:c7:
9d:7a:ab:db:1e:90:5c:17:1b:3b:80:2e:9d:d4:70:e3:f9:f6:
3f:cb:4c:89:0d:9b:24:0f:d7:87:90:d5:2c:2a:bb:a4:74:e7:
b2:25:b1:89:68:5b:e9:fa:6d:85:28:3b:e7:fd:75:d3:4a:42:
5e:19:40:0f:60:2c:51:17:c5:49:dc:02:c2:e1:d5:0d:96:6c:
32:c9:d3:53:54:2f:68:2e:03:e4:ec:51:96:48:32:f8:b4:6d:
b5:4b:f8:ba:c3:08:30:02:16:3f:e9:3d:d1:af:66:ad:e2:89:
51:f0:27:60:27:1a:93:eb:cf:6e:87:e1:52:93:4f:d1:be:d7:
98:06:d3:67:80:04:dd:73:f4:ac:5f:71:c5:12:01:e6:e0:89:
7e:69:53:2c:3e:ad:7a:45:11:95:b9:63:ea:f8:1c:6a:b2:26:
24:6c:16:7d:11:7c:4f:2a:ed:06:e6:03:53:57:eb:a4:54:09:
a1:62:69:ea:1f:34:65:61:53:6e:86:98:77:40:da:cb:28:f2:
cc:d4:3b:fd:e8:72:9d:d4:93:e6:eb:04:f9:35:cf:d4:fd:a0:
3a:4b:dd:83:7d:f8:77:b0:e3:a7:23:5b:c9:d1:e0:62:06:5f:
dc:ca:1f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:00 2024 by rpki-client on console-fra.rpki-client.org