Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xnAI7fsJ1mKxKzLQ3BPaNBZn_u4.roa
File: xnAI7fsJ1mKxKzLQ3BPaNBZn_u4.roa (raw, json)
Hash identifier: PioRmuizcP2gf8ljPRiPmXMe4C2ILDms4fDEnyjTrKk=
Subject key identifier: C6:70:08:ED:FB:09:D6:62:B1:2B:32:D0:DC:13:DA:34:16:67:FE:EE
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xnAI7fsJ1mKxKzLQ3BPaNBZn_u4.roa
Signing time: Thu 15 Sep 2022 02:45:33 +0000
ROA not before: Thu 15 Sep 2022 02:45:33 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.216.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:33 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C67008EDFB09D662B12B32D0DC13DA341667FEEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7e:3c:62:5a:62:32:e7:a7:3b:75:84:08:b0:
1e:73:09:cd:82:87:ff:51:01:86:4c:47:b9:47:f2:
90:38:ac:00:37:cc:cb:25:9e:b3:d1:39:bf:79:ed:
f3:d1:0a:ea:2b:99:9a:d3:13:42:0b:52:7d:f8:24:
c5:26:0a:46:f1:25:85:f2:47:20:e6:7b:bb:19:7f:
6d:ad:23:95:95:da:1c:71:2f:d7:c8:5d:99:71:54:
c0:3e:ee:8e:6c:07:04:4a:99:d0:c6:28:95:3a:51:
9b:37:3b:01:4a:bd:3d:1b:b1:57:04:8e:c8:9d:18:
6a:5f:b6:60:3a:b3:d7:dc:75:25:70:82:86:8c:dc:
35:50:cc:d5:42:c5:89:c5:6b:b3:d8:67:4f:85:ba:
13:b1:55:4c:52:23:ca:d7:50:9e:1c:3d:ae:1f:78:
c0:92:3e:d0:c3:f1:f8:b9:5d:0b:76:9f:91:79:63:
64:c5:18:82:f3:3a:e4:08:01:76:bb:7b:30:75:9d:
24:c6:b3:34:b9:0b:fa:42:57:ef:29:16:e9:c3:89:
94:9f:a5:8f:a0:92:2c:5d:c1:61:24:f3:e3:50:d7:
14:21:f4:60:8b:aa:f5:18:5c:b1:25:68:3e:3e:2e:
d5:44:d7:06:27:6a:30:78:c8:91:73:02:49:01:95:
27:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:70:08:ED:FB:09:D6:62:B1:2B:32:D0:DC:13:DA:34:16:67:FE:EE
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xnAI7fsJ1mKxKzLQ3BPaNBZn_u4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.216.0/21
Signature Algorithm: sha256WithRSAEncryption
53:73:bc:de:f6:84:cd:f6:a8:cf:b7:f3:bf:83:f3:91:de:51:
f1:fe:24:bd:ac:fb:84:58:68:6c:1a:1c:50:0c:5b:64:73:01:
d0:61:ba:38:58:ff:8c:07:21:83:55:9a:43:52:f1:57:30:94:
ea:13:33:5f:e8:73:7c:60:12:a0:9d:8d:b0:a7:f1:70:fe:a6:
e0:55:bb:d0:47:de:fd:c0:c6:82:d8:d9:5a:3b:a0:7c:fb:3a:
1d:91:89:42:47:ed:d7:dd:f8:2a:91:5b:d4:ab:c5:c1:f7:07:
1b:cc:0f:b4:58:c3:d2:84:71:81:f7:99:8f:07:2b:3a:6d:08:
e1:67:ac:c9:2c:61:86:9f:b0:81:c2:14:d8:92:c6:a0:7b:26:
d2:c8:3c:48:d5:2e:18:54:84:90:94:27:8b:8e:a5:2e:b6:d7:
9a:1e:6f:a7:79:77:2b:a7:a7:1d:52:92:58:3e:13:0b:7d:c4:
62:0d:05:d9:07:9c:8d:bf:b9:0e:37:96:7e:22:46:6a:43:69:
07:71:cd:ad:0b:8c:2e:47:63:9a:77:bd:d4:74:37:5e:8c:f7:
1c:86:73:4b:39:d2:d1:e8:e6:94:bd:f3:2d:01:87:56:3f:c8:
18:4f:f6:41:13:db:ce:c4:84:54:02:79:d4:a3:c3:59:97:9c:
e5:05:3c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:00 2024 by rpki-client on console-fra.rpki-client.org