Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4ObNQywnx2s7sI7_-PvvjoUTM2I.roa
File: 4ObNQywnx2s7sI7_-PvvjoUTM2I.roa (raw, json)
Hash identifier: Wx3Ve8cCd6YRfD6hPWAk53sVFxGJaIKZN3Te6Xyv2Ic=
Subject key identifier: E0:E6:CD:43:2C:27:C7:6B:3B:B0:8E:FF:F8:FB:EF:8E:85:13:33:62
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1523
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4ObNQywnx2s7sI7_-PvvjoUTM2I.roa
Signing time: Sun 07 Feb 2021 12:03:04 +0000
ROA not before: Sun 07 Feb 2021 12:03:04 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.193.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5411 (0x1523)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:03:04 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=E0E6CD432C27C76B3BB08EFFF8FBEF8E85133362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:06:26:a0:81:58:36:b2:fc:a7:b5:5a:50:e2:
9b:25:ea:df:6c:61:87:de:57:e5:3b:0c:8e:d4:df:
07:f0:dc:3f:64:49:e5:fa:3b:dd:85:f0:fd:e6:12:
c3:08:c9:82:fd:a1:e9:4b:9d:b9:89:19:f0:28:d1:
f1:91:8c:b1:d7:3b:0a:ed:e8:78:22:bd:b8:c9:07:
15:d7:b2:b2:fd:cd:b8:ca:ed:65:d6:c2:70:a2:89:
d2:e5:10:23:c5:5a:b2:18:4f:16:eb:4c:8b:ee:f8:
10:a3:8f:51:8e:38:08:69:92:29:fc:57:69:6e:53:
d1:d3:6d:8b:77:9a:28:17:79:93:fa:99:8f:3f:bd:
3b:15:7f:9b:08:d3:f8:5f:ed:a6:4c:71:f8:34:10:
7c:18:54:59:77:a7:ea:eb:17:52:b6:20:da:e5:24:
c4:de:cb:ae:e7:7d:3c:b7:39:be:12:8d:66:2b:45:
87:b7:79:8c:ed:e7:05:38:b3:db:5b:30:42:b3:6a:
eb:d9:10:dd:b9:6a:06:6b:67:eb:ca:43:ae:d6:7f:
ce:57:ea:9e:8e:15:8b:64:f1:ff:45:11:e6:c2:06:
66:65:2e:36:76:92:26:ec:96:10:64:8a:9c:5f:99:
bd:28:53:67:bd:c8:39:cc:8a:3b:10:40:e5:0e:74:
39:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E6:CD:43:2C:27:C7:6B:3B:B0:8E:FF:F8:FB:EF:8E:85:13:33:62
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4ObNQywnx2s7sI7_-PvvjoUTM2I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.94.0/24
Signature Algorithm: sha256WithRSAEncryption
90:9f:dd:8a:76:e6:74:91:e2:3e:16:de:71:96:84:38:34:0b:
e4:76:ac:86:e2:a6:b6:2c:da:c0:b4:85:ba:6a:6c:c7:85:42:
a0:51:56:80:c1:5d:10:4b:4c:8c:7f:1b:0c:e1:21:8c:ec:40:
b6:c1:38:13:c3:52:2a:df:2b:61:e4:83:fe:b0:15:2f:ef:80:
0b:6a:1d:b9:09:42:5a:23:54:80:b5:c1:b3:a7:34:5d:6b:74:
34:c4:1f:52:58:81:9b:5e:e6:67:9f:36:0d:1d:99:a6:69:48:
e3:55:de:e1:0e:44:ad:b7:1c:ff:6f:b3:96:f6:f3:40:09:56:
8c:eb:07:05:40:40:da:30:de:33:4a:d4:e5:b9:bc:6a:c3:d8:
e9:70:3f:ba:95:f1:c3:c7:b7:f7:47:6d:8f:f1:95:b8:42:24:
44:9e:b5:dd:95:a3:47:c2:8f:85:26:bc:ae:a2:8f:ad:ac:6c:
cc:c4:b0:30:54:3e:4f:fc:05:b9:8e:cf:a6:a9:a3:69:5d:36:
bf:a1:77:63:ea:de:2e:f8:9c:bf:0a:74:5a:34:ca:4e:b5:9f:
1b:61:f4:0d:90:fa:08:a0:23:84:f5:62:17:27:09:3b:e6:80:
75:51:19:22:40:19:f5:f7:cb:e8:ab:11:88:28:67:3a:b4:29:
1e:e0:0b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:09 2023 by rpki-client on console-ams.rpki-client.org