Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zzxhr5SzQhyhLyuzVHskbUDTjLo.roa
File: zzxhr5SzQhyhLyuzVHskbUDTjLo.roa (raw, json)
Hash identifier: SJtqwD+fs769BkbuAZbc58KoDTFIy+BOgGlThHegoS8=
Subject key identifier: CF:3C:61:AF:94:B3:42:1C:A1:2F:2B:B3:54:7B:24:6D:40:D3:8C:BA
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zzxhr5SzQhyhLyuzVHskbUDTjLo.roa
Signing time: Thu 15 Sep 2022 02:53:51 +0000
ROA not before: Thu 15 Sep 2022 02:53:51 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 123.194.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:51 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=CF3C61AF94B3421CA12F2BB3547B246D40D38CBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:1d:f3:e4:fd:bf:d9:d0:29:69:43:69:df:7c:
ea:04:0b:a4:66:d8:b2:1c:d8:82:b0:35:66:ed:f7:
45:b5:6b:43:26:6d:a4:e6:0e:57:51:aa:af:5f:f7:
42:9f:4f:c3:ed:4f:41:ad:af:1f:42:12:75:3f:80:
15:c7:0e:da:c5:b5:95:0a:72:6e:b5:bf:ad:ac:c4:
67:3f:ce:2a:bf:05:91:41:f2:94:2b:f1:92:f1:4a:
17:63:f5:33:72:db:04:3a:e9:30:88:50:ba:fc:0b:
be:2f:4f:65:ad:1f:35:f1:9d:b0:a9:6e:71:a7:de:
1d:1c:12:d1:54:90:ea:35:7a:89:16:df:50:77:94:
97:38:97:d2:81:49:4a:08:77:e1:1c:b6:2c:0d:99:
90:13:d8:84:04:26:39:40:48:b8:38:d6:b4:f4:08:
6e:1c:b9:03:2f:18:e9:e4:55:88:41:6a:40:11:e4:
af:8c:d2:5f:a8:99:b8:7a:c3:5b:c6:81:16:d0:92:
03:3b:54:35:b0:19:2b:75:f6:8f:f1:8f:d6:24:ec:
a8:8f:87:de:fd:6b:8f:6e:90:aa:11:1e:d4:54:fe:
ee:31:24:29:3a:c5:ad:11:ba:4f:76:7d:22:16:13:
c7:f1:38:89:f2:6a:86:8b:b8:1e:6e:cc:1b:35:f9:
e8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3C:61:AF:94:B3:42:1C:A1:2F:2B:B3:54:7B:24:6D:40:D3:8C:BA
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zzxhr5SzQhyhLyuzVHskbUDTjLo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.253.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:8c:58:52:59:7c:29:ce:d2:86:1a:01:92:bf:91:e0:b9:b0:
42:9c:06:c8:78:e4:d2:4d:7d:3f:11:0c:9e:94:c1:e9:43:f4:
78:f2:0d:7e:09:8d:7f:f2:cf:b7:42:99:9f:fc:df:da:af:9c:
06:09:95:f4:91:c3:8c:de:ef:9d:3d:dc:2c:58:59:26:e0:04:
89:d0:fc:5a:c0:51:91:03:74:51:6e:74:70:41:fd:7b:1a:2e:
83:13:03:9e:fa:b9:6d:bc:a9:19:a5:7b:c5:42:a4:c2:a1:6e:
98:56:3e:48:4a:24:09:46:de:d6:90:4f:01:a1:be:42:6c:cc:
1d:f2:ea:14:e0:f6:1a:ee:03:cd:4e:1e:7f:a1:55:23:a6:b7:
d4:ed:2b:6d:ec:9d:b0:09:39:c0:77:db:22:6a:cb:28:3f:d7:
22:d5:1d:92:ae:bd:6c:bf:c5:9c:b3:dc:65:d3:7c:7f:85:f1:
69:8c:f3:e5:53:d9:f2:a3:d9:fd:87:60:ba:b6:52:44:6a:dc:
66:62:90:75:fb:7e:75:1d:15:af:91:80:11:8c:18:7a:6f:9f:
06:16:59:45:3f:a0:98:a2:c5:a9:5f:09:33:e6:ee:22:28:a6:
7a:9e:04:43:cc:26:86:e7:03:6b:69:b0:0e:02:d6:d9:d6:17:
79:03:47:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:01 2024 by rpki-client on console-fra.rpki-client.org