Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0dsAoTPj3OcvweEUFU6GX6hKUZY.roa
File: 0dsAoTPj3OcvweEUFU6GX6hKUZY.roa (raw, json)
Hash identifier: 2EtvxTeVqHWctWqGV18nP/m3siskJ7/DH8pb0LZR/zk=
Subject key identifier: D1:DB:00:A1:33:E3:DC:E7:2F:C1:E1:14:15:4E:86:5F:A8:4A:51:96
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 194B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0dsAoTPj3OcvweEUFU6GX6hKUZY.roa
Signing time: Sun 07 Feb 2021 13:16:09 +0000
ROA not before: Sun 07 Feb 2021 13:16:09 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.164.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6475 (0x194b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 13:16:09 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D1DB00A133E3DCE72FC1E114154E865FA84A5196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:58:b9:51:f0:fe:68:ef:ef:b5:e0:90:fd:44:
eb:98:0a:4b:01:76:db:2e:c1:d2:d9:02:ee:60:03:
7e:0a:98:d8:ce:66:70:75:92:b8:76:a0:51:45:91:
c3:df:c8:fe:ee:89:93:3c:a3:26:21:59:95:c6:de:
66:83:c4:42:ca:4c:80:fb:77:79:42:8a:49:ce:b5:
cc:9d:57:57:53:bc:64:a9:ef:dd:7c:da:63:f1:cb:
f0:07:11:75:ab:a3:c8:f8:2a:fd:18:4d:41:d9:74:
85:c8:32:8d:3d:3e:cb:43:99:cd:66:d8:96:3e:36:
5d:f4:41:7d:70:c3:62:72:7d:3b:be:37:a5:d7:c7:
99:7f:00:f1:12:a3:51:aa:1a:15:82:fb:b1:88:11:
b5:99:93:b4:f1:6c:74:96:8b:ea:c1:ce:f8:ec:c0:
4c:ed:44:61:ab:52:78:dc:1e:5f:8d:98:99:b6:a8:
3c:6e:77:c1:56:aa:4f:69:4d:3f:1a:ad:36:91:bf:
4b:53:f8:10:2e:ce:7a:10:1c:b4:e9:16:f0:0e:9c:
95:91:d9:b4:e9:5c:e8:09:8b:f6:ef:46:bf:c3:9d:
c4:9f:f1:2a:36:0e:09:47:68:83:de:81:a2:52:1c:
e3:f1:61:be:1f:c6:92:f5:a3:1d:f6:d2:4e:c7:20:
3c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DB:00:A1:33:E3:DC:E7:2F:C1:E1:14:15:4E:86:5F:A8:4A:51:96
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0dsAoTPj3OcvweEUFU6GX6hKUZY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.164.0/22
Signature Algorithm: sha256WithRSAEncryption
18:af:19:a9:f7:36:61:ed:c2:03:ff:63:17:7e:b8:8a:99:d8:
f5:37:e8:98:f0:16:a0:0f:67:42:bf:b4:d2:a5:f2:df:b8:ba:
a3:da:28:77:06:0a:ac:eb:9d:fc:14:f0:8e:07:fd:8f:5a:3c:
63:0e:00:1e:54:b9:97:5d:2c:f0:ee:ac:c7:e7:06:d2:96:f2:
cb:8d:91:27:49:48:b5:86:34:b4:3b:bc:63:a5:a9:e8:c7:38:
74:f5:73:84:8e:9e:6b:53:7f:ff:70:28:fa:9c:fe:3d:aa:bb:
c3:da:41:55:50:71:f7:41:40:66:af:ad:6b:c0:1f:d3:43:2c:
e0:0f:2f:57:6c:9c:10:f0:7a:37:4d:c9:bf:25:e5:09:83:f5:
d4:4f:c1:d6:a3:95:5d:f3:f3:b3:c1:50:81:a6:44:26:9e:af:
30:24:10:f0:8f:7f:bd:20:4f:c9:8e:92:21:8e:77:31:37:e4:
fd:6d:89:e3:3b:98:90:92:a4:e5:52:98:8b:8d:74:5d:b6:a5:
87:c2:ed:97:73:9b:62:fc:dc:d9:8a:2f:e9:52:ea:d2:2e:46:
d1:27:9f:52:b4:a4:cf:89:d0:70:cd:da:74:73:b5:93:2d:a9:
01:f0:6d:09:ac:32:b9:cc:88:cd:06:80:57:ee:49:3e:a4:a4:
86:cc:04:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:46 2024 by rpki-client on console-fra.rpki-client.org