Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/x9CsXwiaaYAOk1NxDButKKVy2PQ.roa
File: x9CsXwiaaYAOk1NxDButKKVy2PQ.roa (raw, json)
Hash identifier: WGiuXuklBfYOX1gU4e8t/2lvAFa1odXF8zCugCXuDJs=
Subject key identifier: C7:D0:AC:5F:08:9A:69:80:0E:93:53:71:0C:1B:AD:28:A5:72:D8:F4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 21BF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/x9CsXwiaaYAOk1NxDButKKVy2PQ.roa
Signing time: Fri 25 Nov 2022 04:40:22 +0000
ROA not before: Fri 25 Nov 2022 04:40:22 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.16.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8639 (0x21bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:22 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C7D0AC5F089A69800E9353710C1BAD28A572D8F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e8:5f:91:6f:da:5b:ee:42:ad:18:61:e9:88:
b7:68:31:78:fd:3c:6d:06:b8:3a:43:fc:67:5f:87:
5f:b9:83:30:eb:56:61:76:80:ad:ab:91:dd:04:a6:
e7:ca:f7:47:5f:eb:14:e8:f7:9b:f2:ff:61:17:9f:
42:55:86:f6:66:df:97:15:15:2e:31:14:41:bb:8e:
b8:00:10:85:a5:e4:06:71:4f:b5:5b:82:b3:a3:c8:
43:68:11:ee:07:76:c4:0d:7e:fc:0a:e9:cf:01:63:
02:2a:0f:e6:aa:21:c3:ad:86:1f:5d:eb:fc:58:cd:
e1:65:89:8c:7c:ad:ef:ef:6f:87:53:25:b8:b5:7f:
62:79:42:a8:ef:a6:d5:59:f5:c8:a8:08:fa:aa:e4:
ed:33:cf:1a:92:71:f2:6b:e5:fd:0c:8b:12:12:8b:
aa:e1:dd:b4:71:bc:0a:cc:7f:cc:96:df:31:82:78:
ac:93:3e:26:a6:c4:29:ee:88:00:d5:68:6c:27:e9:
92:3c:29:24:42:24:fd:2c:8a:07:4b:e1:81:f4:ad:
29:c5:84:de:a4:a8:d0:a4:93:c3:e7:48:d3:01:c3:
52:0b:63:af:51:9b:eb:0c:4c:82:f5:7f:e8:d7:9e:
43:48:ba:05:2c:b3:c8:ea:0a:14:5f:5e:af:a2:6b:
0b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D0:AC:5F:08:9A:69:80:0E:93:53:71:0C:1B:AD:28:A5:72:D8:F4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/x9CsXwiaaYAOk1NxDButKKVy2PQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.16.0/21
Signature Algorithm: sha256WithRSAEncryption
2b:f1:ce:fc:1d:74:f9:6c:9b:64:5d:54:cb:19:ea:76:16:8f:
36:27:9e:87:c7:f8:53:16:77:62:bb:23:53:5f:12:30:b2:73:
04:c2:b0:f0:a5:b1:4d:de:e9:7e:6a:87:67:86:48:dc:73:62:
76:ed:a9:22:b7:10:59:19:1f:24:22:54:eb:d3:cf:18:2f:27:
74:33:dc:7c:c2:15:ce:f4:0b:b1:9c:ed:b1:2a:0f:69:f1:ea:
65:47:f9:56:75:73:1d:83:c9:cc:6d:d7:96:f9:0a:4e:53:43:
9a:23:ac:b2:40:2b:8a:8b:e6:8c:1d:7f:df:c5:b0:e8:2f:c9:
2a:63:67:e0:5e:18:25:0d:1f:07:fa:31:56:81:cb:69:6e:08:
82:f0:2d:7f:32:0a:8e:15:61:54:b4:57:29:dd:2a:b8:14:8f:
e0:a5:68:3e:4a:06:f3:36:65:89:b5:ca:3f:e4:a7:a6:83:25:
c9:ac:29:5c:c9:b3:92:65:db:79:cb:8d:6d:ed:eb:b1:b4:54:
f7:20:be:59:ae:d5:05:93:01:dd:24:39:9a:11:c1:7f:c0:55:
19:76:52:f0:26:9e:cb:ef:8c:20:0f:31:14:45:2c:bb:7b:d9:
bb:03:ea:e8:fb:bb:cc:47:9a:cd:e8:a7:94:a2:73:c5:36:86:
4f:b9:f6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:00 2024 by rpki-client on console-fra.rpki-client.org