Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/z5X5dM3iTRbrHbJZlmecC5s3pFo.roa
File: z5X5dM3iTRbrHbJZlmecC5s3pFo.roa (raw, json)
Hash identifier: mQaKDYc4stmQcp9C2BCge3Vt2tF8pUulJavoBzPQ4E8=
Subject key identifier: CF:95:F9:74:CD:E2:4D:16:EB:1D:B2:59:96:67:9C:0B:9B:37:A4:5A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/z5X5dM3iTRbrHbJZlmecC5s3pFo.roa
Signing time: Thu 15 Sep 2022 02:45:59 +0000
ROA not before: Thu 15 Sep 2022 02:45:59 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.180.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:59 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=CF95F974CDE24D16EB1DB25996679C0B9B37A45A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7e:8f:4f:cf:a0:8b:f2:20:c8:e0:5c:82:e5:
10:7d:29:e0:3a:50:ae:9b:6a:a6:6f:b8:ee:e0:46:
34:4d:80:7a:c9:da:9c:ee:39:26:01:25:13:ef:fa:
77:47:7d:3b:0c:43:60:64:c0:04:76:3b:b3:75:cc:
1b:ef:c2:4f:1b:ef:31:fb:b7:30:c6:bf:10:82:2b:
c9:b5:64:70:19:e6:ef:f8:81:bc:d0:52:21:97:62:
00:c8:9e:43:a7:1b:a8:f4:81:5f:75:fc:28:3d:d7:
b3:e7:6d:a4:76:1c:da:37:a7:a2:a4:f8:de:22:62:
07:d0:93:a6:2a:9b:57:5b:73:e3:8b:cf:48:a3:95:
04:8c:db:43:b5:96:50:f6:8f:c7:8b:b9:56:ae:21:
8f:74:c8:10:d3:3b:48:9e:41:01:57:a1:0e:59:2b:
17:28:b3:ed:bc:e4:5c:1d:76:43:84:3a:3b:02:98:
c0:8f:e0:ba:29:17:94:80:b9:a5:18:83:0f:76:65:
3c:52:01:28:8a:73:10:2c:55:d7:89:58:20:b8:00:
82:39:46:48:07:ba:61:5e:cd:a9:e6:30:53:27:c0:
ad:f2:f4:6b:00:ba:72:dd:61:cd:7f:4a:d6:7b:53:
08:44:6b:f3:2f:a8:8d:e3:68:c3:f1:30:46:22:b8:
d3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:95:F9:74:CD:E2:4D:16:EB:1D:B2:59:96:67:9C:0B:9B:37:A4:5A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/z5X5dM3iTRbrHbJZlmecC5s3pFo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.180.0/22
Signature Algorithm: sha256WithRSAEncryption
45:17:d9:f7:50:c1:15:66:dc:b4:74:3d:ea:0a:b4:f2:71:d9:
2b:e8:63:20:75:45:f9:a6:eb:1e:0a:b7:1e:df:ff:99:8c:ba:
91:62:7d:35:93:72:8a:e2:70:06:1f:26:e3:7d:18:42:54:59:
03:42:31:27:72:5e:aa:bc:9a:97:7d:bc:38:43:c0:57:c1:d5:
de:79:b9:0c:a4:33:7a:67:9a:8e:a2:79:f9:41:5c:67:c1:b5:
e1:ac:2c:db:03:25:6d:75:20:3c:1b:7b:e2:f7:75:0f:2d:e2:
07:0f:e3:ca:9c:a2:5a:6a:4a:2d:0f:0e:21:40:95:d4:0d:fc:
ea:b8:53:8c:6b:dc:cf:cb:bb:ec:6c:dd:cb:43:d4:92:5a:f6:
8c:6e:6d:43:43:aa:1e:48:7a:0d:34:ba:e5:f7:fd:7f:59:1a:
e1:6d:23:09:7a:3d:2a:4c:78:b7:a2:f3:cf:9e:80:ee:1a:e1:
46:12:e3:e1:37:b1:26:2c:d8:eb:79:11:01:15:07:78:68:05:
ea:c1:64:1c:11:95:01:c8:9d:cc:7c:88:7f:90:4c:7f:8f:06:
3f:42:2e:b4:49:f2:a0:34:ac:2a:90:07:8f:a0:76:04:c9:45:
13:21:c9:4c:13:9c:ed:a8:98:8f:af:b8:51:d8:e1:fa:43:58:
bd:a4:2d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:43 2024 by rpki-client on console-ams.rpki-client.org