Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2qZ-eOcROcrp1_oBogRxe9zTv24.roa
File: 2qZ-eOcROcrp1_oBogRxe9zTv24.roa (raw, json)
Hash identifier: qonw2a4SsMDsjMG7pwULqO/M6Dt5Ze9MYNcJONZiApc=
Subject key identifier: DA:A6:7E:78:E7:11:39:CA:E9:D7:FA:01:A2:04:71:7B:DC:D3:BF:6E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1681
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2qZ-eOcROcrp1_oBogRxe9zTv24.roa
Signing time: Sun 07 Feb 2021 12:10:54 +0000
ROA not before: Sun 07 Feb 2021 12:10:54 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.184.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5761 (0x1681)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:10:54 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=DAA67E78E71139CAE9D7FA01A204717BDCD3BF6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2d:49:b0:72:5c:52:59:38:d2:26:b3:b4:ce:
08:32:35:55:c0:7c:fb:f2:54:9a:fe:e2:b8:9f:f1:
5a:78:26:5b:45:6d:07:f0:91:64:4e:b3:78:f9:ea:
61:61:30:a9:c4:d8:0b:2d:1d:e3:d0:53:0e:1e:f9:
65:68:0c:48:d1:49:1b:64:16:fc:91:1d:69:0b:2a:
59:d4:ac:38:8e:bc:76:2a:14:a4:c2:bc:f9:13:1a:
64:cd:57:09:1a:95:b0:78:f5:a0:b8:b0:21:f1:f0:
4d:4f:be:cb:26:b9:0f:74:fc:eb:73:c5:b5:20:79:
6a:1b:f9:c4:57:cd:b2:b9:c6:96:c7:36:65:07:0b:
84:17:c1:51:6a:9b:9b:11:2e:db:6f:78:30:a6:49:
b0:02:4d:52:d5:e6:64:3a:46:ce:1b:26:a4:00:9c:
85:b4:2d:16:c8:9a:d8:78:0c:5f:44:7f:d3:9f:86:
21:b3:ed:4f:91:82:60:4a:a9:d6:1b:d4:23:de:78:
70:97:3b:f7:91:b7:49:5f:36:bf:3f:0b:cd:5c:90:
d0:37:ca:1b:c1:e5:20:bc:51:8b:3c:88:53:2d:1b:
c1:48:e3:ce:87:aa:d8:5b:5b:07:39:ff:a8:61:42:
89:89:8d:4c:a2:5c:12:76:bb:01:5d:be:23:d9:d8:
3c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A6:7E:78:E7:11:39:CA:E9:D7:FA:01:A2:04:71:7B:DC:D3:BF:6E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2qZ-eOcROcrp1_oBogRxe9zTv24.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.184.0/22
Signature Algorithm: sha256WithRSAEncryption
75:ab:60:1a:27:7b:8c:2b:da:50:4e:84:c2:ef:fc:b2:29:93:
cd:e4:e7:09:d0:87:23:59:ea:d4:d2:f9:b0:d4:8c:82:5d:e0:
fb:42:b2:e3:4d:10:b0:ac:ab:16:60:e5:26:09:c3:d4:e9:db:
c7:57:e7:1a:af:de:f6:ba:94:6f:af:8e:6c:57:4b:54:89:b2:
05:45:60:fd:e9:5e:9e:b0:53:72:77:a2:2e:7b:f3:0b:62:4d:
33:a2:5c:6a:1b:ee:e5:02:44:64:a4:5f:8d:fe:70:80:de:ed:
f3:4b:72:f0:1b:42:96:61:00:36:db:f4:01:a4:a4:7f:1b:c2:
66:89:af:44:97:ee:e0:04:f0:03:0e:e1:0f:bf:7b:a4:1e:00:
cf:28:3b:15:b8:44:ba:41:24:47:38:98:66:04:61:53:cd:f5:
c9:9c:70:d7:d9:b4:93:4b:4d:8c:ca:da:ee:d6:6c:6c:7f:79:
e8:32:df:1f:67:3c:7e:c4:43:84:fa:aa:69:72:9b:d4:d7:3d:
bc:93:80:e4:3f:51:84:fb:d1:32:bf:62:67:26:3b:5a:53:cc:
9a:d7:01:b7:7b:50:5e:c7:f6:52:2a:7d:94:aa:5f:c9:49:a4:
0a:15:63:00:d8:b7:4b:15:99:b2:d5:7f:88:7a:35:19:88:0c:
3b:5f:48:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:20 2023 by rpki-client on console-fra.rpki-client.org