Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1mNnluwyK237XwhNyQJfioZ5KRM.roa
File: 1mNnluwyK237XwhNyQJfioZ5KRM.roa (raw, json)
Hash identifier: JA88znjWUX6X+tWRGxOrhZL5EAJRYWrFBrhmhH2JkM8=
Subject key identifier: D6:63:67:96:EC:32:2B:6D:FB:5F:08:4D:C9:02:5F:8A:86:79:29:13
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1487
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1mNnluwyK237XwhNyQJfioZ5KRM.roa
Signing time: Sun 07 Feb 2021 11:59:00 +0000
ROA not before: Sun 07 Feb 2021 11:59:00 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.236.0/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5255 (0x1487)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:59:00 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D6636796EC322B6DFB5F084DC9025F8A86792913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8e:0a:1a:fa:71:de:b6:d0:a4:fa:9d:be:93:
8e:36:3d:34:1a:ef:47:64:14:11:90:9b:3b:df:ee:
26:bc:d5:2d:e9:a3:d0:17:f7:f5:49:e0:2b:76:e6:
49:03:98:23:55:58:2e:9d:20:f5:5b:f4:f4:ed:be:
38:30:ad:15:90:16:b7:d6:eb:5d:72:5f:46:26:00:
1f:90:92:f7:d3:82:16:10:5e:44:44:39:1d:f0:61:
c4:b9:31:a4:1e:ce:07:04:de:c6:3e:45:42:b5:8b:
f7:5c:1d:8c:75:32:d7:f4:46:3f:46:6e:5d:55:c8:
cf:3b:c6:5c:e8:10:be:cb:d7:db:66:98:89:d9:51:
47:80:e4:b1:ac:a7:f4:4b:b8:db:38:97:60:0a:32:
c8:6f:f7:96:59:5e:e5:0d:a4:97:ee:28:ac:8e:6e:
a6:84:76:ee:cd:b6:ab:b4:70:2f:70:47:64:fc:b8:
8e:55:a0:18:ac:05:7b:88:ca:e1:b6:b0:ad:c3:4e:
c5:d2:59:4e:05:24:c2:36:ec:57:b2:87:bb:99:c4:
f8:c8:20:37:89:65:ad:25:15:88:8b:41:27:a5:c2:
57:b2:1c:f3:68:36:bf:c7:e0:33:39:a4:d0:1c:ed:
d5:cc:ef:6d:2b:79:dc:87:11:f9:fa:1a:66:9a:76:
ce:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:63:67:96:EC:32:2B:6D:FB:5F:08:4D:C9:02:5F:8A:86:79:29:13
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1mNnluwyK237XwhNyQJfioZ5KRM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.236.0/25
Signature Algorithm: sha256WithRSAEncryption
93:d8:11:80:86:75:f0:63:b2:33:95:d2:33:c4:52:5b:50:d6:
1c:ae:67:88:e9:f1:1c:d3:63:a9:1b:a6:2b:cd:24:a9:60:0c:
99:be:cf:6f:39:58:53:2d:f8:64:72:6d:b8:20:c6:a5:61:e3:
53:22:bd:45:80:9f:10:c1:0a:f7:5d:5c:4c:90:b1:9d:90:c1:
82:96:db:0d:4c:d1:cf:c2:e8:57:ae:00:16:b0:39:c8:ce:0d:
95:cc:1a:e5:2e:0f:42:d6:21:7d:f9:39:3d:20:a3:72:fc:5f:
3e:70:af:8d:a4:d9:55:8e:e1:74:91:a8:94:19:dc:bb:42:ca:
be:18:56:b5:5a:c0:9a:a7:44:94:c8:8a:92:e2:10:ae:88:17:
d5:c0:34:3f:e9:da:a5:06:ac:5d:10:35:4c:ee:f7:7a:a8:33:
6b:bb:43:cd:c1:99:fa:55:b3:31:6c:e6:9f:6c:6e:87:df:90:
e4:7e:20:66:c6:a0:08:06:37:84:e3:c4:cd:e9:8e:a7:d3:d4:
4e:3b:f5:da:d1:93:16:f7:d1:dc:21:b0:a9:25:9c:06:cd:a9:
2b:1b:ac:c9:ca:c8:6b:eb:09:cb:d2:c7:22:d1:63:f0:af:3b:
12:fa:82:a1:b6:0b:92:fa:21:60:f4:4a:a3:ca:fa:31:0d:d4:
a6:7d:4d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:23 2024 by rpki-client on console-ams.rpki-client.org