Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/z_yxpiFCunqGRQZ4-5fiI490KJM.roa
File: z_yxpiFCunqGRQZ4-5fiI490KJM.roa (raw, json)
Hash identifier: lxtSJwYuppyGEZ9o2cpbFZqzni0WgJXPJVyiRvSlQG8=
Subject key identifier: CF:FC:B1:A6:21:42:BA:7A:86:45:06:78:FB:97:E2:23:8F:74:28:93
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1CF9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/z_yxpiFCunqGRQZ4-5fiI490KJM.roa
Signing time: Wed 29 Sep 2021 02:48:27 +0000
ROA not before: Wed 29 Sep 2021 02:48:27 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.195.196.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7417 (0x1cf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:27 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=CFFCB1A62142BA7A86450678FB97E2238F742893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:45:c3:d7:b6:7f:64:20:73:b4:b7:22:1c:bf:
b4:cd:df:89:4e:e0:e2:36:c0:a9:dc:e9:7f:ae:f6:
f7:f9:96:d3:d0:9c:be:35:fc:30:61:07:fb:c7:c7:
2e:79:05:9c:9b:55:ef:d5:04:0b:a2:88:f4:88:9d:
40:18:41:63:59:f8:fe:f5:cc:74:89:45:e7:1f:31:
80:52:f1:fe:7d:76:87:70:4b:f0:61:04:a5:3a:70:
5e:73:10:ed:5d:28:d7:cd:8b:80:8b:d6:8c:f5:b3:
ef:c1:27:8f:df:76:13:35:4e:93:6a:32:eb:6c:fe:
9b:ac:06:12:6a:73:c9:35:3d:be:39:9a:6f:7e:c3:
dd:2f:9c:ba:bf:91:e1:90:6c:6c:05:c2:85:6a:27:
d1:91:66:0f:4e:d7:69:b8:76:95:fd:85:14:d9:62:
b4:33:ae:be:dc:21:1f:d7:60:68:03:64:cd:28:3d:
80:13:ca:70:12:21:e3:f9:a3:1e:70:0f:27:19:81:
56:27:d7:c2:a8:04:53:63:04:69:41:4a:9a:21:4a:
a8:04:ff:24:c8:06:f2:6e:8a:40:81:7c:68:35:74:
1f:78:2c:ab:95:1f:d8:7b:6d:95:d1:b4:76:16:14:
73:35:e5:d2:15:b2:9b:8f:71:b0:de:c0:61:eb:18:
1f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FC:B1:A6:21:42:BA:7A:86:45:06:78:FB:97:E2:23:8F:74:28:93
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/z_yxpiFCunqGRQZ4-5fiI490KJM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.196.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:e7:51:10:b6:16:78:5c:33:00:60:22:2c:fd:97:e8:69:fe:
20:1b:ed:ae:9b:4b:ae:7a:c0:f8:3a:bb:a2:7d:f1:37:7f:36:
6f:a5:03:b3:7b:22:95:07:d7:2b:18:73:9e:3c:94:27:69:c7:
65:de:43:36:c0:54:c0:b9:d2:16:0d:f0:f4:10:b5:dc:21:22:
1c:41:a9:d8:c6:74:c0:15:26:ce:fd:55:72:72:68:d2:57:ae:
c9:83:ac:22:8f:a1:15:c7:76:d5:7c:ca:28:86:bd:bc:79:67:
e0:95:a8:8b:f6:c2:fa:22:6f:20:8a:c5:48:f4:15:41:0e:34:
ca:ea:1f:35:e5:95:d5:e6:e9:5d:45:5f:26:9d:df:35:70:82:
6b:de:c4:cf:f4:94:59:bd:59:85:3f:23:a8:81:8c:3e:c3:70:
c6:86:65:29:a7:1c:77:f0:7f:9a:26:38:ed:3b:b5:37:a2:ce:
70:b5:62:d3:c4:a0:d9:a4:8f:82:70:2d:d7:46:25:80:b2:48:
ea:48:46:c3:98:48:71:cb:75:cd:ca:5e:cb:68:0a:ce:04:65:
9c:cc:c0:76:99:e4:d1:7b:dc:0a:4f:dd:23:e8:fb:df:3b:53:
ef:f5:2e:34:10:70:aa:c2:3c:48:02:3e:6e:a8:78:a8:d1:2f:
24:50:8f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:01 2024 by rpki-client on console-fra.rpki-client.org