Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2vgu-8_TQlwDWk018c5Kefh4gN8.roa
File: 2vgu-8_TQlwDWk018c5Kefh4gN8.roa (raw, json)
Hash identifier: ssPPvfnBHpca9BZ6EB4A/gyT9aichRPgFfeAfaXxZmg=
Subject key identifier: DA:F8:2E:FB:CF:D3:42:5C:03:5A:4D:35:F1:CE:4A:79:F8:78:80:DF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1B5D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2vgu-8_TQlwDWk018c5Kefh4gN8.roa
Signing time: Wed 29 Sep 2021 02:46:30 +0000
ROA not before: Wed 29 Sep 2021 02:46:30 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.194.112.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7005 (0x1b5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:30 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=DAF82EFBCFD3425C035A4D35F1CE4A79F87880DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bd:b0:68:a0:9d:16:c6:b6:a5:1d:a7:5f:ea:
1b:0b:cd:b2:bc:93:d4:fb:06:f9:87:1e:1e:66:48:
ed:68:e8:7c:6d:0d:24:a3:39:e0:a3:e8:64:14:47:
b3:76:51:41:b4:32:fd:e5:4c:e5:e3:25:89:85:d2:
59:67:4b:83:e2:ae:26:c4:b6:d3:00:37:93:4e:32:
58:f9:55:d1:72:2d:ec:a8:8f:18:64:bc:55:b3:3d:
62:8b:c8:ce:48:b9:6b:1d:26:a0:83:b8:24:9b:ba:
5a:7b:13:97:25:f3:4a:69:c8:c6:dd:3c:b6:e7:d5:
14:d2:ad:9f:58:e1:4c:57:66:3b:87:c1:b1:ae:e1:
77:7f:ba:de:08:a4:96:e6:0f:2a:05:42:90:76:57:
6b:5d:88:e0:c1:51:af:bc:57:92:3f:14:43:35:5a:
bc:d5:98:78:12:27:16:2e:9c:fd:99:08:92:4c:3f:
0d:b7:c2:20:08:82:29:46:ff:8f:66:b7:e6:5f:6b:
cd:cf:8d:1e:f6:e8:ec:1c:19:1b:d0:56:7b:f9:ec:
e1:97:00:ca:4e:6d:af:e4:2e:bc:49:83:f7:3b:86:
4c:e7:f8:a0:90:75:38:56:65:7a:79:81:a6:bf:71:
b0:dd:21:31:a3:6d:53:3a:d3:c6:a6:d4:2c:1b:23:
85:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F8:2E:FB:CF:D3:42:5C:03:5A:4D:35:F1:CE:4A:79:F8:78:80:DF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2vgu-8_TQlwDWk018c5Kefh4gN8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.112.0/21
Signature Algorithm: sha256WithRSAEncryption
14:f3:ff:15:ed:7b:68:58:8e:99:32:4e:a0:0f:c4:8b:38:6c:
e7:02:8d:91:ae:fe:fa:05:65:e0:28:5f:44:49:37:63:7c:7c:
0e:3d:5b:12:02:ce:24:24:3e:9a:a6:c8:07:b2:fb:72:32:f8:
1b:2e:b1:c7:41:42:ac:bc:9e:7d:f5:c6:f9:3f:f7:3e:6e:98:
67:3b:55:1e:f5:06:10:9b:c4:2b:a5:bd:08:2a:47:db:7c:23:
da:ab:a5:d3:05:e3:15:67:a7:ec:b9:cc:56:fe:52:ec:55:c8:
af:ff:51:26:50:fb:06:e6:31:c5:1f:ee:5d:87:04:0f:57:ff:
40:01:c3:a6:aa:db:6f:3c:f4:5e:13:07:63:79:fe:d8:1b:a0:
ed:79:fe:24:02:0b:20:18:8d:da:5b:5d:f4:d5:e6:f1:95:97:
8e:82:ba:3f:9c:ad:af:58:90:51:3d:f7:a3:db:da:58:7d:e9:
b7:0e:21:e0:86:8d:7a:6f:da:b0:41:4f:8b:37:21:4a:5f:50:
3c:68:24:2c:22:81:b3:50:1c:6e:dc:bd:89:9c:4a:40:2b:06:
65:a9:b8:63:24:23:f7:ad:94:d3:0a:03:57:d7:00:89:84:47:
2c:8f:24:dc:20:ce:9c:38:f0:17:7e:69:1d:5d:57:35:30:5d:
a2:d7:5e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:47 2024 by rpki-client on console-fra.rpki-client.org