Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0tRRRQ5OiStDDlFZCA4qH1k5Faw.roa
File: 0tRRRQ5OiStDDlFZCA4qH1k5Faw.roa (raw, json)
Hash identifier: idRtqvJX0/TLBARscJvNtvoZ2HtaNFnvPv7wHk4ocig=
Subject key identifier: D2:D4:51:45:0E:4E:89:2B:43:0E:51:59:08:0E:2A:1F:59:39:15:AC
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1571
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0tRRRQ5OiStDDlFZCA4qH1k5Faw.roa
Signing time: Sun 07 Feb 2021 12:04:40 +0000
ROA not before: Sun 07 Feb 2021 12:04:40 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.32.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5489 (0x1571)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:04:40 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D2D451450E4E892B430E5159080E2A1F593915AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:07:fe:1f:8b:a8:f7:b0:4f:a1:d0:2d:ca:e2:
ea:77:fc:5c:77:37:8a:9b:24:c1:9a:87:c1:41:12:
d2:2c:42:71:98:68:0c:89:be:4b:dd:3f:f1:46:e2:
d0:e9:3d:a2:6b:2f:9c:bf:01:c3:68:57:6a:c7:e7:
5a:89:eb:c6:2b:43:67:71:6c:af:77:e1:d8:40:0a:
45:77:bd:27:68:51:e8:47:b8:b2:13:f4:74:00:5c:
e6:f3:3e:8d:11:8f:99:d6:07:90:72:63:af:69:9d:
2e:a5:d7:18:89:c6:c8:e3:9a:78:04:7d:55:f7:f6:
f1:1a:3f:07:bf:f8:d8:41:5d:ba:33:d6:05:61:a9:
8f:52:23:f0:11:f8:9e:80:5f:03:d1:5c:cf:06:6c:
1d:4e:20:8f:00:9d:b2:67:cc:19:12:8f:20:4d:74:
fc:43:04:8f:50:b0:ff:ae:8e:bc:19:fb:79:48:d2:
ae:87:07:d1:64:2d:b6:f3:1f:d5:db:70:6f:c8:89:
8a:03:d7:44:a2:0c:d5:dc:aa:4e:ce:8f:9a:ee:19:
8e:37:db:30:66:c8:41:d5:e8:31:ea:77:34:a7:35:
26:b2:9d:d7:ee:ce:0a:2d:4b:66:fb:5c:5d:0f:9d:
0e:e6:69:e8:bc:c8:6c:04:d1:78:4d:c7:f5:6a:88:
c9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D4:51:45:0E:4E:89:2B:43:0E:51:59:08:0E:2A:1F:59:39:15:AC
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0tRRRQ5OiStDDlFZCA4qH1k5Faw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.32.0/22
Signature Algorithm: sha256WithRSAEncryption
21:44:41:f7:87:2e:34:de:a1:39:49:7b:5d:7f:32:84:69:e3:
50:1f:d3:55:e2:a7:ef:4b:a5:50:bc:15:a9:5f:f4:fa:74:d8:
05:5b:f1:27:c2:e8:12:48:5e:34:0c:46:46:55:3e:7b:6a:01:
5f:16:c3:14:3d:da:5e:98:59:a2:94:29:1f:bf:0f:2a:ab:0b:
a3:18:77:dd:c6:a6:38:e7:ca:db:d8:59:98:c4:6e:ed:27:84:
15:35:70:ce:24:50:3d:0e:6c:de:ad:73:2c:17:c7:a8:86:a4:
6b:0c:2f:d7:6e:9d:ab:70:b6:31:92:28:8f:74:96:07:75:28:
29:25:a2:02:89:1d:77:64:c8:62:3e:a7:2c:54:30:c1:db:d2:
c6:72:4f:2d:c3:b2:b6:eb:cf:dc:36:5c:7f:c8:cb:3d:c0:90:
98:47:8e:b0:31:72:5c:56:1f:a2:00:bb:49:c7:4d:d9:a2:ff:
44:18:0b:83:39:e9:5a:b3:d8:e4:0d:a4:d6:a6:5f:5d:99:51:
85:54:7b:8a:f8:ff:0c:4f:0e:d9:30:f9:5b:16:84:22:78:66:
6d:fb:9f:33:89:59:c4:98:9b:ed:24:0c:ee:6b:f4:be:ca:a4:
18:aa:d0:bc:35:39:54:e1:a2:50:cc:12:96:28:d6:ce:25:10:
58:b5:9e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:07 2023 by rpki-client on console-ams.rpki-client.org