Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/z7IpqAhEDhTMXWKX5hliVN8BAso.roa
File: z7IpqAhEDhTMXWKX5hliVN8BAso.roa (raw, json)
Hash identifier: DLBTsQS8c8dkT/K8ddDe3EEQpCznYJ7Vdx/LumjxOJA=
Subject key identifier: CF:B2:29:A8:08:44:0E:14:CC:5D:62:97:E6:19:62:54:DF:01:02:CA
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 20DE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/z7IpqAhEDhTMXWKX5hliVN8BAso.roa
Signing time: Fri 25 Nov 2022 04:39:13 +0000
ROA not before: Fri 25 Nov 2022 04:39:13 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.237.128/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8414 (0x20de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:13 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=CFB229A808440E14CC5D6297E6196254DF0102CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b5:3d:31:60:c8:d6:29:e5:5d:f1:12:f5:b6:
b0:7c:67:d1:6c:04:b5:51:82:c0:16:c0:65:5f:5a:
44:66:52:47:54:51:ba:29:0b:eb:9b:6a:38:20:27:
98:94:81:48:28:c1:2f:1f:03:16:60:13:c7:ef:49:
86:d4:40:73:a4:2c:ff:c2:67:64:dc:ac:b3:9f:47:
5b:1a:8e:84:52:bf:e4:02:2b:b6:e8:34:e0:c9:55:
93:70:db:f4:c6:8b:82:35:55:cb:f9:e7:95:84:35:
30:d2:48:ad:83:f1:06:b9:08:17:a8:0d:1d:47:0d:
7a:e7:60:af:92:0f:83:85:a0:16:2b:9d:44:3d:d1:
21:16:38:97:c0:5f:9d:38:1b:63:6a:9a:ae:d6:5e:
16:5f:33:d0:ba:1e:c0:59:c7:8f:02:59:3e:64:3e:
53:9d:08:73:0f:d0:63:d8:ff:a9:2e:d5:be:77:98:
6a:45:f6:c2:44:9d:19:7b:48:51:2a:20:1d:67:ee:
0d:9e:da:04:62:24:fe:a9:21:ff:69:dc:fd:27:c8:
d9:18:f0:14:9c:61:c1:7a:7b:9c:19:ae:1c:c6:e7:
1d:6e:94:c9:c2:66:03:c1:26:4b:e2:d7:2f:05:bb:
e6:7c:a3:81:f2:5e:02:c5:1d:4a:9a:54:51:c1:c7:
76:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B2:29:A8:08:44:0E:14:CC:5D:62:97:E6:19:62:54:DF:01:02:CA
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/z7IpqAhEDhTMXWKX5hliVN8BAso.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.237.128/25
Signature Algorithm: sha256WithRSAEncryption
09:22:26:74:0b:32:8c:74:3c:61:9f:21:39:32:29:c1:d1:3b:
4e:a0:9f:68:10:85:25:d5:09:9c:1e:c3:55:28:30:65:74:80:
f3:95:a1:1a:ea:59:fd:a3:8b:12:d8:0b:fe:d3:c2:de:c6:78:
ed:33:1f:b3:23:6c:06:5b:1c:56:33:1b:09:26:ee:12:09:18:
41:a5:7f:ad:ac:0f:aa:0c:3f:5f:6f:66:71:e3:3c:73:c3:fe:
48:e9:76:39:29:5d:a5:81:de:48:ee:8d:ae:a0:b8:32:d7:69:
8f:a7:d1:0b:09:c1:10:2b:e9:39:0a:1b:cf:1d:40:95:4a:62:
a8:e8:3b:e3:0e:47:a2:0e:2c:9b:40:60:96:c5:f2:84:53:18:
d1:e5:d4:7d:02:9f:f8:2f:2d:cf:6c:0d:4c:e8:25:ec:a4:18:
db:f1:82:e4:d7:f0:17:54:f2:4f:04:e3:23:ce:9a:9a:e3:95:
5c:07:67:43:ff:f5:ca:42:4b:1c:9d:fa:c8:48:8f:fd:90:23:
66:26:44:a4:28:2f:7d:97:f2:08:f1:55:09:cf:89:04:0c:87:
e3:32:0f:13:6c:98:c3:ff:ad:fc:0b:3b:ed:40:55:80:e1:ec:
47:bd:49:89:48:18:7d:c2:8c:66:e0:95:99:38:fe:c0:7c:c3:
47:10:44:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:00 2024 by rpki-client on console-fra.rpki-client.org