Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-sEFdHgI1ufc5mRNfT_OJC9OOVk.roa
File: -sEFdHgI1ufc5mRNfT_OJC9OOVk.roa (raw, json)
Hash identifier: 1JYrPeDrsYKRapXaBq9syMPhD1yyDagWMmNGw9d1B5E=
Subject key identifier: FA:C1:05:74:78:08:D6:E7:DC:E6:64:4D:7D:3F:CE:24:2F:4E:39:59
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 177F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-sEFdHgI1ufc5mRNfT_OJC9OOVk.roa
Signing time: Sun 07 Feb 2021 12:19:43 +0000
ROA not before: Sun 07 Feb 2021 12:19:43 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.64.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6015 (0x177f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:19:43 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=FAC105747808D6E7DCE6644D7D3FCE242F4E3959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:55:8a:ce:6f:ab:9e:c4:02:12:f8:59:ab:0c:
6f:bb:4b:79:9a:76:68:fc:78:41:fc:11:81:bd:3a:
99:15:a5:1e:c3:05:87:61:48:96:e6:d0:0c:16:b7:
31:08:c0:4e:a2:19:d2:42:3f:bf:c9:68:7c:8a:4c:
53:a2:96:09:10:c2:ab:2b:27:37:6e:d0:31:cb:b3:
ed:4c:78:36:71:d5:6c:06:e2:da:57:ef:04:45:4f:
c5:e0:6f:b5:3a:40:51:8f:16:3b:65:32:9a:b8:d9:
fb:3d:9d:67:ff:aa:e6:e6:ee:31:17:d2:9b:45:29:
35:6b:8b:56:49:64:c8:cc:e3:6b:4b:a4:77:d0:52:
11:c7:15:73:6c:d5:46:25:7c:d4:c1:2e:9f:74:e1:
5e:fa:8d:28:20:eb:99:3e:e7:1a:ac:6e:2d:c5:08:
a6:c4:57:be:e9:81:c1:10:bc:f1:92:d2:ad:c9:35:
25:9c:7f:9b:c9:8a:2f:39:12:c8:03:d0:90:40:4d:
e3:47:b3:9b:a3:bd:db:b5:d1:3e:e2:d3:8d:43:1b:
e3:e3:87:a7:9e:c3:73:1e:f7:2d:c5:16:fe:b5:e9:
e7:ed:da:1f:a5:8f:7f:97:12:98:98:ad:40:4e:5e:
85:2b:22:bb:30:d3:01:93:b8:44:ea:b2:f2:45:54:
b4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C1:05:74:78:08:D6:E7:DC:E6:64:4D:7D:3F:CE:24:2F:4E:39:59
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-sEFdHgI1ufc5mRNfT_OJC9OOVk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.64.0/21
Signature Algorithm: sha256WithRSAEncryption
b9:8f:e3:ac:e2:3b:04:5d:30:e1:27:2a:b5:7a:62:2b:d2:94:
e8:39:89:9c:16:86:39:1c:10:ef:bd:a7:31:76:28:e6:6b:a1:
9d:3b:09:c0:3a:18:4a:e7:8f:01:e3:eb:10:a0:25:47:0f:3e:
41:1f:53:a0:38:80:73:6f:97:58:a9:a4:30:20:c9:37:cf:1e:
19:50:31:4a:41:8d:1d:ed:e5:48:67:6d:64:57:1f:9f:d6:91:
06:fc:7b:69:1a:11:0d:53:f3:75:4a:83:ec:c1:16:c0:8a:ae:
5c:62:b0:0c:36:41:a1:8c:a1:8a:f2:e2:13:db:54:8f:6e:dc:
81:4c:63:21:48:8f:b0:88:95:29:f6:3c:a4:d4:4f:98:6d:4a:
4b:89:58:59:01:de:84:84:d1:2c:53:40:1e:35:8d:35:75:fa:
c8:55:ce:17:76:87:8a:7e:fc:8d:f0:d0:00:85:3a:77:83:a8:
11:13:a5:de:37:06:f2:df:fa:18:df:e3:e6:52:25:67:11:ca:
25:a4:63:51:ff:e8:9d:9b:e6:2d:c4:5c:e7:81:e0:c7:02:34:
fd:86:cf:f7:67:c3:65:f1:74:41:33:c5:38:8e:70:30:82:1a:
f3:c4:9b:c7:aa:b6:d8:88:ad:9e:aa:1b:a0:9a:be:46:d8:66:
3c:32:e7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:19 2023 by rpki-client on console-fra.rpki-client.org