Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-YUVg4Rm7SkQ338sZvAVD_7fK-c.roa
File: -YUVg4Rm7SkQ338sZvAVD_7fK-c.roa (raw, json)
Hash identifier: aoDayjfcY/68n3ViApQykXPmr/j2hmG+xIEGIutQrac=
Subject key identifier: F9:85:15:83:84:66:ED:29:10:DF:7F:2C:66:F0:15:0F:FE:DF:2B:E7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1BDD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-YUVg4Rm7SkQ338sZvAVD_7fK-c.roa
Signing time: Wed 29 Sep 2021 02:47:06 +0000
ROA not before: Wed 29 Sep 2021 02:47:06 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.195.160.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7133 (0x1bdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:06 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=F98515838466ED2910DF7F2C66F0150FFEDF2BE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:58:14:dd:97:ed:65:25:ab:f9:c5:88:91:e3:
57:ea:78:51:39:4f:de:00:2d:fa:9b:75:6c:2a:f3:
52:fb:4e:1a:b0:c0:60:de:ae:fe:5a:ca:7c:e1:ed:
32:60:44:0d:41:a2:4d:b4:8a:00:c5:0f:be:f9:67:
06:db:af:07:14:51:01:20:c3:d1:ac:c3:21:0f:86:
14:41:85:64:4a:09:d0:f4:af:40:5a:15:bc:22:7c:
9a:68:fe:3a:b9:c6:3d:f5:63:cd:dc:82:47:72:84:
03:63:28:6f:3b:28:73:f7:ae:60:f6:d6:c4:d4:0b:
7f:9b:fc:eb:fb:7e:ae:e9:e8:41:40:ad:6c:a6:63:
61:d0:19:49:13:d0:f0:fd:f4:c1:89:ea:63:12:ad:
46:2c:32:e7:d3:1c:0b:8b:1d:51:c9:40:52:4f:63:
d5:8d:27:b9:ef:a4:b0:de:d1:1d:07:94:4e:b2:ce:
70:98:a3:27:32:09:a1:95:97:d4:0c:48:6e:03:9e:
0f:6e:0a:09:3a:24:e6:d4:89:67:b2:f2:ba:fc:ef:
7a:ca:e0:73:2c:d3:a7:d2:ef:c4:cb:f5:b9:86:6b:
41:3c:a4:db:d1:fb:cd:f4:b7:86:67:02:c8:bb:c2:
6e:36:e2:62:c1:b8:ef:ee:6f:de:0b:0c:0f:c1:b9:
81:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:85:15:83:84:66:ED:29:10:DF:7F:2C:66:F0:15:0F:FE:DF:2B:E7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-YUVg4Rm7SkQ338sZvAVD_7fK-c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.160.0/20
Signature Algorithm: sha256WithRSAEncryption
ac:2c:36:80:1f:82:5b:a9:7b:23:2c:ca:ac:5a:d0:2e:99:03:
09:f8:9a:8d:e8:0d:fc:35:0e:e3:4d:cc:e3:c9:3b:e6:37:f8:
c5:0a:ca:2a:88:66:d3:3a:f3:38:2d:3b:a6:6e:67:3b:de:54:
a4:c8:57:d5:78:f8:61:6b:4f:65:00:87:32:36:b2:ac:e6:cf:
31:16:be:94:1c:a7:4d:f2:9c:d5:d7:56:98:0e:e0:c5:df:fe:
b2:6b:b1:6c:fc:ff:bb:d1:cb:49:34:cf:bf:f1:06:db:f9:c3:
9e:24:ac:44:fc:ad:50:61:53:45:bd:87:1c:a6:50:ac:e1:b0:
52:c5:e3:c9:38:8a:bc:21:cd:7f:30:97:f4:eb:15:38:8e:93:
25:25:09:76:15:d4:c8:58:a2:ef:47:30:13:21:0b:08:2e:eb:
e3:84:fa:3d:92:02:01:a4:04:37:21:f7:37:bf:42:d5:2b:d4:
5b:66:6f:ef:42:1b:e3:19:9f:f9:fa:c2:85:ad:26:64:fc:98:
73:3c:4a:8d:64:c3:22:3c:ef:e8:08:4a:ed:fc:c4:28:39:95:
7b:f2:f9:73:30:5e:2c:a5:21:52:54:28:68:4c:5f:b4:3d:06:
28:33:18:b1:06:36:c8:28:70:27:a7:bd:ef:02:9a:a7:98:90:
fe:f4:e0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:22 2024 by rpki-client on console-ams.rpki-client.org