Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/09raQEk7HCKIZWYNJuho5RZpKpo.roa
File: 09raQEk7HCKIZWYNJuho5RZpKpo.roa (raw, json)
Hash identifier: SRIWYRPwkX693MQ4qe+cgth9j2FW5YrCKIETkdmY5AM=
Subject key identifier: D3:DA:DA:40:49:3B:1C:22:88:65:66:0D:26:E8:68:E5:16:69:2A:9A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1B5E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/09raQEk7HCKIZWYNJuho5RZpKpo.roa
Signing time: Wed 29 Sep 2021 02:46:31 +0000
ROA not before: Wed 29 Sep 2021 02:46:31 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.194.24.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7006 (0x1b5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:31 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=D3DADA40493B1C228865660D26E868E516692A9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:27:df:e0:aa:05:55:b3:fe:5f:22:9c:a7:72:
ec:47:4f:7e:6e:ab:80:0b:81:61:41:1c:09:a3:06:
fe:76:b3:58:ea:64:9b:28:0a:56:3a:c5:45:76:b6:
54:92:5b:52:7a:4e:62:70:33:03:ae:e8:23:01:30:
ed:88:9d:f3:9a:67:d1:0a:48:5a:20:af:85:cd:ce:
3d:6f:a1:1b:b0:c4:26:1b:c1:40:2e:b5:72:e1:d5:
81:9d:8a:eb:b5:09:f4:a9:c4:2e:6a:1e:df:f9:a9:
05:5d:6d:40:71:98:38:18:76:16:dd:98:92:96:c6:
1a:b9:93:46:b7:de:24:96:23:23:80:a6:8a:6e:fb:
c3:7f:71:6e:06:be:27:e2:ea:a8:b8:3f:1e:4f:b2:
9b:31:9f:b2:1e:37:b4:f3:b0:f1:13:4b:f8:59:2b:
de:c8:c7:47:2b:89:60:99:30:fe:07:a0:b7:5c:3c:
b6:0b:32:a5:00:fe:d2:3a:88:63:c6:94:ae:ab:c2:
c7:c7:74:55:2b:51:87:f4:ad:98:7d:71:86:62:36:
ec:2c:6e:55:64:28:1c:6b:c7:bd:fc:86:1c:93:a8:
13:85:93:74:f2:d9:02:95:b0:52:a0:ec:08:07:9d:
37:d6:53:83:77:e6:94:6e:24:41:ab:90:f6:fe:f3:
25:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:DA:DA:40:49:3B:1C:22:88:65:66:0D:26:E8:68:E5:16:69:2A:9A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/09raQEk7HCKIZWYNJuho5RZpKpo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.24.0/21
Signature Algorithm: sha256WithRSAEncryption
75:bf:af:11:07:27:dd:74:1c:20:8e:49:c3:93:89:81:4f:44:
1b:73:95:b7:c9:dd:23:c3:0c:fa:f2:45:60:92:99:84:8a:91:
9f:35:56:9d:8f:4a:60:33:50:b4:e3:33:82:fd:ba:93:45:07:
44:d6:e3:82:b4:f2:a0:01:03:a7:05:04:c1:a1:2e:df:ea:b9:
a6:d4:c2:d8:93:05:2d:e2:b5:44:d6:c3:34:f8:6e:e8:52:47:
85:9d:ae:81:76:05:9b:31:e4:13:4b:fb:08:49:9c:d4:cb:af:
73:a1:12:f0:9a:0d:15:63:54:d6:79:37:8c:db:5a:96:5d:7b:
43:21:03:eb:78:62:3d:f0:c1:ff:57:28:2a:2d:14:48:89:b3:
3a:a1:54:f8:e0:18:43:bd:d3:c3:79:42:a8:7e:ab:8e:18:00:
7c:ba:57:08:12:dd:b6:32:93:aa:27:16:70:c3:d3:b4:0b:21:
65:ff:fb:95:fd:c0:5a:8f:b9:3e:b8:24:06:6f:f7:89:27:3b:
f3:d6:0f:75:79:a5:0f:80:78:7d:d5:48:11:bc:2c:70:29:bd:
ab:be:7a:7f:c0:e8:07:81:fd:04:64:26:80:aa:82:5a:88:df:
e5:a6:d4:56:b8:86:f5:d5:5f:22:c0:a7:54:e4:b5:d1:3e:74:
00:65:dd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:07 2023 by rpki-client on console-ams.rpki-client.org