Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4GpPh-0RtV6zDT7hchplhptem7E.roa
File: 4GpPh-0RtV6zDT7hchplhptem7E.roa (raw, json)
Hash identifier: UpOw2TCGXAeYgbiak4t0S+AvAc4tsqtH4zkgRldP06Q=
Subject key identifier: E0:6A:4F:87:ED:11:B5:5E:B3:0D:3E:E1:72:1A:65:86:9B:5E:9B:B1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1529
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4GpPh-0RtV6zDT7hchplhptem7E.roa
Signing time: Sun 07 Feb 2021 12:03:11 +0000
ROA not before: Sun 07 Feb 2021 12:03:11 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.192.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5417 (0x1529)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:03:11 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=E06A4F87ED11B55EB30D3EE1721A65869B5E9BB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:09:1f:a6:66:c4:e7:70:77:eb:e0:41:d4:c4:
18:62:81:7d:f4:a9:36:34:ec:e8:78:cf:16:0e:13:
32:d4:bc:fd:4c:0f:cd:b8:b6:cc:52:38:ef:06:f5:
84:b6:88:eb:c0:d9:f3:78:29:a5:59:83:2b:ac:5a:
8f:88:5f:52:ea:d7:b1:c3:2d:8a:61:cc:3f:19:16:
c4:42:70:6b:ae:a0:58:73:f9:95:3f:e0:e0:dd:d0:
33:ae:c3:42:15:a8:10:33:88:05:06:a9:e6:dc:6b:
8f:6d:4d:d4:35:17:f0:4d:03:aa:8d:99:5b:f8:10:
1b:28:60:25:7a:6b:4e:f9:d6:6d:ae:5f:fb:39:54:
4c:4e:b4:49:bc:e7:91:4b:8f:c7:49:e7:16:27:5b:
d4:f4:b1:eb:d3:bd:82:04:14:3d:d0:b7:33:c7:41:
90:eb:3f:ce:f9:7c:af:8f:72:91:d5:44:87:69:e9:
ec:f3:e2:89:a5:39:87:f5:46:cd:27:18:b9:5f:17:
84:61:31:3c:f1:85:4e:07:91:c5:ee:c7:52:7e:a5:
29:11:9a:d7:d8:b4:cc:d8:fe:8f:f2:f3:76:e3:63:
29:bb:8c:1c:11:44:36:d9:61:2e:37:0a:c0:c9:6f:
4b:26:f2:45:06:31:d2:c6:3e:75:0d:f8:96:aa:c7:
29:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6A:4F:87:ED:11:B5:5E:B3:0D:3E:E1:72:1A:65:86:9B:5E:9B:B1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4GpPh-0RtV6zDT7hchplhptem7E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.192.0/21
Signature Algorithm: sha256WithRSAEncryption
05:cf:98:89:53:bb:e3:4f:de:fc:1a:ae:48:ed:ea:91:c4:b4:
e9:40:24:20:4f:5b:98:04:9b:2d:51:86:a3:ac:d5:a1:27:5d:
a0:bf:25:89:7c:a0:f5:95:9c:21:a5:12:35:5b:1e:10:b6:02:
63:fa:3e:13:8a:2f:7c:b1:d4:3f:35:c9:08:a3:d9:ac:1b:8a:
a1:c2:a0:63:44:5a:90:95:dd:6e:18:ad:0b:c4:dd:01:b5:fb:
c7:9a:d2:8c:97:ba:8c:fc:5c:87:2d:a1:25:5f:8e:3e:98:f3:
a8:a2:fa:03:91:ce:73:30:27:10:6e:e8:36:68:52:9d:91:f0:
c4:91:db:ed:0c:8a:37:7d:35:e4:65:74:64:16:49:ff:4a:cd:
5f:ff:35:1b:17:9e:d0:74:45:67:51:5d:fe:ba:39:07:18:a6:
cb:7c:34:73:43:b5:df:3f:b9:d3:3f:2a:d9:45:b4:19:60:62:
6c:6c:83:be:67:02:e8:cb:c9:d6:55:96:19:d9:2d:e0:6f:97:
8d:c6:17:36:8e:a1:b9:bf:ad:98:8c:f3:07:72:4b:c6:04:c2:
1d:6a:86:4b:b5:b5:8c:60:04:a5:02:54:5d:5c:28:77:4f:8f:
c3:92:40:1e:d0:20:ed:5d:0c:e3:ce:67:58:24:10:e6:b0:3f:
f5:01:48:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:21 2023 by rpki-client on console-fra.rpki-client.org