Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5t2qqjkEufl1Mzl8A4naQJ73Txs.roa
File: 5t2qqjkEufl1Mzl8A4naQJ73Txs.roa (raw, json)
Hash identifier: 7UCRKEA8Sh+lqze1wovCjzdzA81j3n4lcbGKj03k4Ts=
Subject key identifier: E6:DD:AA:AA:39:04:B9:F9:75:33:39:7C:03:89:DA:40:9E:F7:4F:1B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1B25
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5t2qqjkEufl1Mzl8A4naQJ73Txs.roa
Signing time: Wed 29 Sep 2021 02:46:13 +0000
ROA not before: Wed 29 Sep 2021 02:46:13 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.192.56.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6949 (0x1b25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:13 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=E6DDAAAA3904B9F97533397C0389DA409EF74F1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b1:75:d1:54:b0:95:15:05:e3:4e:64:49:79:
ab:ac:6f:37:3e:5a:48:b2:bd:ae:e3:34:c7:3a:e8:
e6:b4:87:c5:c3:d3:83:3e:3c:ea:2d:f7:ad:41:90:
0d:43:30:e2:9e:85:71:ca:43:0e:b4:f1:93:51:39:
3b:18:54:46:51:87:49:7a:7f:68:c7:3e:95:5b:a0:
33:73:51:65:74:2a:89:1a:6a:8d:f7:13:36:38:dd:
9d:b3:9e:a3:58:08:89:8a:4e:8a:d5:4c:60:06:63:
3b:ae:89:3e:ce:42:15:cc:fd:1f:a8:78:78:3e:76:
5b:67:6b:b5:69:9f:37:72:ca:ae:05:03:4f:f3:3f:
3e:0f:78:6f:55:06:12:74:71:e1:77:9d:d3:a4:35:
f3:a0:71:50:a4:7b:6e:e2:ff:68:35:a6:c7:cc:7a:
18:14:de:cf:06:9e:f3:8e:fd:54:3d:49:c4:7e:ca:
f3:b9:73:ff:bb:41:53:fb:89:33:2f:1e:9a:e6:51:
41:08:14:52:d5:25:35:cb:0f:ba:ef:e9:ae:9f:2b:
d4:68:1e:e6:37:81:7a:7f:6c:c3:90:9b:cb:ca:09:
d7:64:db:59:00:74:82:57:ac:89:e7:0c:4b:8b:29:
46:32:35:42:9d:4f:7d:a8:5d:2f:96:9d:9e:d4:d0:
58:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DD:AA:AA:39:04:B9:F9:75:33:39:7C:03:89:DA:40:9E:F7:4F:1B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5t2qqjkEufl1Mzl8A4naQJ73Txs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.56.0/21
Signature Algorithm: sha256WithRSAEncryption
9f:b9:52:74:d1:d7:63:72:1c:2b:bb:f0:35:41:60:a3:bd:52:
d0:1f:0f:39:73:ae:2f:aa:69:f9:11:a3:4b:eb:c8:a4:d1:64:
8b:3b:68:46:6f:c8:ab:96:8c:44:9e:4b:13:ca:92:48:d9:2d:
45:9f:eb:05:2b:25:5c:22:53:b5:6c:38:bf:08:32:7b:f5:bb:
31:5a:ea:a2:9a:12:59:2d:f4:f7:d7:dd:33:53:93:03:77:ab:
db:a4:d5:9d:a2:3b:e1:9e:c5:97:08:1f:31:04:e8:e5:55:04:
fe:af:6f:e6:21:38:98:45:ac:7d:b3:5e:20:b6:68:fe:2e:6c:
d7:9d:72:1d:f3:80:45:e8:1d:ac:ef:c0:36:40:a8:87:41:b4:
17:10:59:c8:1c:c1:dc:d0:6c:7a:08:5f:05:47:ed:81:0a:dd:
3a:ba:9a:31:c8:08:50:65:5e:31:d0:5c:8d:ce:ce:5c:67:de:
4a:f8:f3:79:de:93:c6:81:ff:72:55:3d:b3:37:13:2f:5f:09:
2f:c3:bd:2d:19:97:45:d2:d0:cb:f0:cc:16:99:64:92:f2:22:
13:64:b5:71:e3:cd:ee:53:54:1e:4c:85:e5:54:0c:90:3b:45:
a6:12:25:8a:a4:38:de:d6:0b:73:f3:5c:e7:40:36:3c:d7:1a:
53:bb:8d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:47 2024 by rpki-client on console-fra.rpki-client.org