Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5DJP1CXM24_5kGVnLD0HnsD_dKU.roa
File: 5DJP1CXM24_5kGVnLD0HnsD_dKU.roa (raw, json)
Hash identifier: 1xlkWKFjpADlkWdohrwYpNNfosb4rLXxT/H6pknAGdI=
Subject key identifier: E4:32:4F:D4:25:CC:DB:8F:F9:90:65:67:2C:3D:07:9E:C0:FF:74:A5
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1907
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5DJP1CXM24_5kGVnLD0HnsD_dKU.roa
Signing time: Sun 07 Feb 2021 12:56:19 +0000
ROA not before: Sun 07 Feb 2021 12:56:19 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 123.195.224.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6407 (0x1907)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:56:19 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=E4324FD425CCDB8FF99065672C3D079EC0FF74A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4c:04:c2:00:4f:af:86:e2:08:6a:cd:80:96:
59:d8:a1:95:fa:ff:8c:89:45:91:d6:2d:2a:9b:d9:
ff:84:00:34:45:f4:06:29:62:24:f7:98:c1:74:18:
c3:57:27:d7:42:e1:fd:69:65:54:d0:0b:07:02:72:
71:74:8f:f3:1a:cd:1a:b7:26:1e:e1:89:95:25:db:
b9:9d:82:b1:74:0f:7d:c5:ae:8c:4d:4f:f1:30:1b:
ca:2e:c9:8e:5c:9f:92:66:0f:53:b4:4a:32:fe:d5:
01:56:ac:10:dc:c7:d5:4b:76:ef:3b:31:50:d4:9d:
fe:a3:ba:cb:50:58:c2:89:b8:c6:d4:7b:6e:f7:b9:
61:03:d4:11:d9:70:9d:f6:5b:a9:ad:aa:23:9e:56:
07:27:15:dc:fb:0e:db:88:3b:7d:c3:81:82:f8:43:
97:20:35:5b:6e:59:a5:66:ba:33:4f:ac:12:82:b9:
7a:ce:60:cc:dd:bd:f1:24:1e:ad:22:e1:56:1a:b1:
0f:62:6e:9b:90:6e:5d:22:70:64:b8:5d:57:df:dc:
44:49:f4:5e:f9:50:0f:c4:7c:1a:ca:6a:f4:05:75:
29:86:c9:bd:d6:6e:2c:d4:c5:30:b4:23:32:cd:bb:
91:0c:d1:2f:9b:37:01:c2:2d:2c:e2:d5:a1:bd:a5:
43:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:32:4F:D4:25:CC:DB:8F:F9:90:65:67:2C:3D:07:9E:C0:FF:74:A5
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5DJP1CXM24_5kGVnLD0HnsD_dKU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.224.0/21
Signature Algorithm: sha256WithRSAEncryption
b8:c4:16:72:25:17:b1:2b:fa:2a:9d:d7:82:ec:be:ee:b7:7f:
13:89:86:67:6b:6b:2d:9e:dc:51:c4:34:30:a1:c5:b6:d6:8f:
43:45:97:49:d1:cd:c6:5f:34:df:61:f5:93:34:a6:fb:73:4d:
82:41:ec:f7:22:45:56:11:80:d1:fb:48:ee:8e:f2:a8:fd:56:
96:4e:33:2e:20:70:98:5d:a4:e2:d9:e4:89:06:2a:31:b1:3c:
08:27:8a:2d:3b:ef:c7:0f:f0:be:eb:ca:65:4d:be:eb:2c:0a:
b8:2c:77:a9:85:03:c7:a5:30:35:c1:b1:d2:07:fa:30:00:f5:
6f:f1:a4:07:56:32:44:d2:4c:25:d2:26:d2:8c:e3:27:12:c2:
7e:ec:9a:2d:0c:ff:a8:c4:84:52:27:8d:7e:e1:b0:b5:76:bc:
e7:f8:0e:4b:a6:a7:f7:c7:64:22:45:33:88:27:c1:91:ec:82:
5f:db:2b:42:d5:0f:8a:b8:25:e4:e3:9a:5d:96:db:d1:8a:96:
6e:19:4d:60:92:31:84:af:3e:8e:e0:fa:3b:90:46:fc:e6:03:
51:a3:61:ea:93:d2:bb:b9:f8:a7:12:37:e7:ba:df:5e:f7:e4:
44:5c:59:ae:3d:0b:88:12:69:a5:25:16:79:af:28:45:d2:41:
25:82:c8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:23 2024 by rpki-client on console-ams.rpki-client.org