Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zWKoJJfW2R36f57Yn2NN8q34aq8.roa
File: zWKoJJfW2R36f57Yn2NN8q34aq8.roa (raw, json)
Hash identifier: LuC4o/9lMpQrQgDlqoMES+y9uIf1w9OFyo9NfvMuFi4=
Subject key identifier: CD:62:A8:24:97:D6:D9:1D:FA:7F:9E:D8:9F:63:4D:F2:AD:F8:6A:AF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2288
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zWKoJJfW2R36f57Yn2NN8q34aq8.roa
Signing time: Fri 25 Nov 2022 04:41:18 +0000
ROA not before: Fri 25 Nov 2022 04:41:18 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.248.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8840 (0x2288)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:18 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=CD62A82497D6D91DFA7F9ED89F634DF2ADF86AAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ae:1a:ea:f9:a3:c0:81:41:7f:4b:97:d9:c0:
b7:37:12:2a:96:27:66:56:7f:b5:0d:9c:e9:e7:b5:
5c:3a:73:dd:45:e9:1d:c9:e6:62:33:ee:a0:e2:e6:
15:a5:0b:b1:9f:95:63:bc:ad:d3:92:8b:28:9f:f6:
94:2d:7d:c5:2b:61:16:c0:5c:88:f6:cd:05:ab:d7:
cc:3b:25:6e:d8:be:ee:c4:ff:e0:2c:b4:d6:75:ca:
fa:a6:1d:9f:7c:c6:ad:a9:1a:8e:8b:b7:d2:7c:d1:
b3:7f:e8:a3:52:83:c7:79:c1:98:71:9b:21:aa:d4:
19:69:d7:fb:a3:c0:8c:79:61:94:23:46:37:03:ba:
60:77:90:8a:ec:9b:d9:79:9b:6e:df:7b:a7:8e:20:
4f:28:d0:be:f5:eb:0d:60:b8:1a:f8:8b:1a:85:0e:
25:45:41:9d:e0:46:a3:5f:d7:e4:66:90:54:84:a9:
da:d5:93:21:02:7d:de:89:0a:66:74:ea:c3:3e:bc:
96:cc:c3:0c:4f:ae:e2:4c:28:73:22:f5:97:dd:de:
fc:f2:59:81:36:cb:69:3f:0c:52:5a:3a:b1:db:3a:
4c:77:02:13:23:0a:14:7a:19:6f:d7:88:9d:5b:14:
70:c4:0c:32:66:1d:99:da:c1:df:57:18:7f:ad:7a:
d2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:62:A8:24:97:D6:D9:1D:FA:7F:9E:D8:9F:63:4D:F2:AD:F8:6A:AF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zWKoJJfW2R36f57Yn2NN8q34aq8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.248.0/22
Signature Algorithm: sha256WithRSAEncryption
af:3f:e2:1b:00:ea:87:dd:8c:b9:4a:13:db:0d:82:1d:a5:d4:
14:ed:7f:18:a2:6c:1e:c8:3b:ac:40:88:5f:29:34:1c:49:d9:
fe:7d:2f:62:ec:90:de:3f:9d:ea:7d:d2:cb:7e:06:1b:55:a3:
a8:4b:29:55:f2:a2:9e:ef:26:c3:22:71:2d:ae:5c:fb:98:ec:
56:eb:57:cb:93:91:57:db:85:83:62:9d:cf:95:6d:db:03:28:
68:bb:d6:f9:d2:43:95:26:96:60:98:25:8a:9f:81:74:fc:04:
c0:65:9d:01:fe:86:82:32:d7:cf:cd:71:33:2c:a2:37:14:2b:
c0:4b:93:c2:e2:0e:1e:db:3d:b4:4c:96:34:6d:d5:15:54:50:
1f:f3:48:63:ee:70:a8:f5:35:0b:92:ea:e9:2a:2a:8f:32:a6:
87:3f:21:57:3b:09:14:48:9f:1a:0b:67:71:c3:57:4c:1e:6a:
8a:b0:64:12:25:c7:bc:d0:fe:20:39:79:88:c5:5d:1a:c1:3b:
1a:96:f0:fa:d8:11:f8:d1:75:e8:aa:bc:6a:e9:71:f7:c8:f2:
22:83:b4:25:32:ac:3d:17:ca:31:1c:ed:02:52:3c:c9:75:b6:
6b:2b:24:39:f9:03:6c:e7:0b:8e:c8:8d:87:37:e8:c5:2c:6e:
ab:36:05:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:43 2024 by rpki-client on console-ams.rpki-client.org