Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zq_ZSUaUN_8rfeytyOwEFv5pGII.roa
File: zq_ZSUaUN_8rfeytyOwEFv5pGII.roa (raw, json)
Hash identifier: lNmRBmNYKdzhEiFk8smcrPNpEcnMpv/x6BrHwVD7yYA=
Subject key identifier: CE:AF:D9:49:46:94:37:FF:2B:7D:EC:AD:C8:EC:04:16:FE:69:18:82
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 22E1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zq_ZSUaUN_8rfeytyOwEFv5pGII.roa
Signing time: Fri 25 Nov 2022 04:41:45 +0000
ROA not before: Fri 25 Nov 2022 04:41:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 123.195.52.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8929 (0x22e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:45 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=CEAFD949469437FF2B7DECADC8EC0416FE691882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:45:54:8c:6b:37:5a:96:43:2e:22:a6:53:51:
86:6a:55:66:11:37:f9:13:36:cd:d3:10:09:4a:66:
a6:ba:3e:ed:34:3a:c7:4e:a9:1d:a5:40:52:d5:64:
fd:4e:49:20:d1:00:0c:68:de:4e:c8:ae:c3:ea:79:
08:d9:f7:35:d6:5d:7f:3d:af:4c:d9:09:8a:07:d4:
0d:f7:22:29:38:d9:8c:d8:9e:7b:ed:64:89:08:8e:
1d:1f:80:84:15:ec:61:92:e2:66:1d:a7:bc:d9:eb:
90:fa:76:ba:46:78:f7:fa:92:58:88:e1:59:be:db:
66:55:41:d4:0b:82:aa:a6:14:3f:c5:ab:8c:66:bf:
a3:08:22:0b:98:7b:7b:61:38:6a:77:0a:37:82:66:
4f:4c:a9:11:cf:8b:fc:1e:d4:88:d1:53:32:09:2b:
9b:b7:8a:15:e5:79:9a:1e:e3:4d:5c:0a:b1:1b:a4:
4c:5f:bd:51:6e:46:4c:9b:78:eb:c3:a5:5e:44:98:
43:6f:2a:7c:af:c7:27:32:7f:1c:37:41:cf:91:d8:
2c:24:75:46:07:a5:6f:8e:d8:43:30:fc:4c:69:08:
92:ec:ba:23:c5:96:00:bf:6a:31:88:0a:6e:f4:36:
89:c4:be:45:36:c3:0c:77:9c:13:68:3c:1a:68:28:
14:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AF:D9:49:46:94:37:FF:2B:7D:EC:AD:C8:EC:04:16:FE:69:18:82
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zq_ZSUaUN_8rfeytyOwEFv5pGII.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.52.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:4b:f7:0b:e8:be:82:5e:27:5b:91:f7:8b:73:38:97:77:44:
2e:14:06:7b:e0:a9:38:0f:63:2f:05:9d:87:20:32:07:30:72:
ab:86:cf:80:e8:cf:dd:6a:24:33:8d:08:47:3b:86:4b:02:0a:
db:8d:e6:d5:1d:f7:2f:c9:33:47:f3:dd:1f:80:d6:ba:3e:d3:
46:88:bd:75:0e:f0:4c:32:f6:a9:fb:7f:34:6e:0a:f9:c0:25:
a7:e9:c6:89:b7:68:0e:2a:c7:98:e6:24:49:48:67:2e:ef:f6:
ae:ae:25:ba:16:23:61:c8:cd:2f:f6:98:09:06:9c:a7:84:80:
9c:22:cb:e7:ee:20:b8:6f:dd:5e:ba:d4:83:de:0b:04:e5:46:
93:4f:45:6f:c3:db:a0:f4:f9:b2:a3:cd:3c:89:29:43:e0:cb:
43:e0:ec:02:45:2e:46:a5:80:66:12:e9:01:b9:d1:3f:23:77:
d1:85:c8:fa:45:a3:fe:f0:71:77:e9:90:12:7a:73:d4:89:91:
89:21:6b:0e:07:4c:ae:3d:0d:3f:3e:65:41:86:cd:54:93:ba:
60:f0:9e:d8:06:8c:22:89:53:04:4b:2d:ac:b5:37:e8:ec:dd:
6d:cb:e6:c6:bd:a6:83:ca:39:43:52:7c:68:a5:95:39:29:8c:
50:72:bc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:01 2024 by rpki-client on console-fra.rpki-client.org