Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4aq5SYmV2C_340sKZtRilkcu6dA.roa
File: 4aq5SYmV2C_340sKZtRilkcu6dA.roa (raw, json)
Hash identifier: EXt0ufUuMVms1iuzJT7pIjuAM2ebN1Xyx2eJVjN0mEY=
Subject key identifier: E1:AA:B9:49:89:95:D8:2F:F7:E3:4B:0A:66:D4:62:96:47:2E:E9:D0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1505
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4aq5SYmV2C_340sKZtRilkcu6dA.roa
Signing time: Sun 07 Feb 2021 12:02:32 +0000
ROA not before: Sun 07 Feb 2021 12:02:32 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.193.4.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5381 (0x1505)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:02:32 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=E1AAB9498995D82FF7E34B0A66D46296472EE9D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0b:ef:ca:65:8b:4d:a0:f4:16:0f:39:07:99:
a0:b9:de:45:af:ed:28:78:14:ca:b4:eb:5f:c6:b9:
07:90:7d:6e:7d:5b:56:f4:c0:af:3a:f9:59:d4:04:
5d:ba:6f:18:d0:a9:9d:39:80:0a:a1:96:e5:c7:7e:
ef:4a:a2:7b:32:88:07:06:7c:ac:a1:09:26:73:7e:
9c:9f:4c:b6:00:1d:f3:04:18:b8:14:98:b0:2f:f4:
35:40:5a:20:e3:f2:fa:9d:0f:61:59:5d:28:2a:a5:
fe:7c:43:30:52:79:0d:79:81:fe:5d:07:cf:d8:e0:
b2:3d:1f:cd:d6:6d:aa:fa:8f:87:47:69:32:5c:16:
04:54:32:e1:03:52:2b:c8:6c:dc:16:37:27:17:d0:
64:93:47:ef:a7:ae:eb:47:a6:6b:e2:d8:c8:4b:a0:
00:0a:43:6b:1c:1a:3f:b0:82:d3:43:6c:bf:12:bd:
f3:72:2b:b1:59:e4:dc:a8:a5:a2:5e:d8:ee:74:ef:
f2:85:8e:52:a0:d7:98:01:3e:7d:b1:be:a6:37:bd:
69:09:28:92:eb:61:96:21:02:2e:e5:29:70:4e:01:
36:1c:bd:26:59:b9:76:6e:54:11:8f:1c:48:0c:b5:
4b:1c:87:d3:a3:91:8d:e7:39:94:69:a3:8b:17:01:
14:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AA:B9:49:89:95:D8:2F:F7:E3:4B:0A:66:D4:62:96:47:2E:E9:D0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4aq5SYmV2C_340sKZtRilkcu6dA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.4.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:bc:94:ec:d5:94:d0:ff:d4:d0:79:8a:e8:80:0a:42:cd:38:
c6:d8:f2:b8:b9:c7:5c:20:dc:50:c8:7f:1a:06:5a:28:d5:38:
e2:1b:58:e4:b2:45:35:d9:e1:ed:55:56:95:15:60:30:65:bd:
a5:c3:1a:29:30:62:ec:32:af:d8:e3:e1:45:63:6c:f5:59:fd:
0f:f6:51:29:34:81:91:db:3f:91:3f:51:9f:5b:3b:00:09:51:
ff:98:70:35:6b:06:23:72:76:eb:1f:85:8f:07:2b:af:b7:b5:
54:3b:9d:9e:56:7c:c6:bc:42:5f:6e:83:4a:9f:3f:e4:66:0a:
d3:99:6e:4c:db:46:77:e3:e5:74:06:21:93:bc:85:8e:74:dc:
70:ab:5c:5b:e6:55:87:35:3d:06:ce:16:b0:7f:2e:69:2f:ef:
ae:ec:eb:7d:fe:c8:75:a3:80:47:28:28:ea:9c:5c:c4:84:98:
2f:29:f3:e8:73:a7:a2:48:cc:4a:e0:f3:61:b4:e1:69:1c:5a:
b3:06:19:92:b5:3e:44:dd:cc:52:83:af:f3:39:63:9a:9d:5e:
ae:ee:fb:2e:b8:7f:58:9b:a1:44:6c:84:bf:4c:08:e9:0a:2d:
ff:12:54:f8:63:00:ec:b4:65:2d:6f:75:77:9a:2b:4d:d2:af:
af:dd:6c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:47 2024 by rpki-client on console-fra.rpki-client.org