Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/68F-Wz_2ZNB9ozWjo6HR1gcF1gc.roa
File: 68F-Wz_2ZNB9ozWjo6HR1gcF1gc.roa (raw, json)
Hash identifier: QGc4l5nFfwVJq6Yu3QGaL97DbS8NDaOUY4GLkSBwMs4=
Subject key identifier: EB:C1:7E:5B:3F:F6:64:D0:7D:A3:35:A3:A3:A1:D1:D6:07:05:D6:07
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1507
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/68F-Wz_2ZNB9ozWjo6HR1gcF1gc.roa
Signing time: Sun 07 Feb 2021 12:02:34 +0000
ROA not before: Sun 07 Feb 2021 12:02:34 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.193.40.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5383 (0x1507)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:02:34 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=EBC17E5B3FF664D07DA335A3A3A1D1D60705D607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:de:50:fa:e3:c1:34:8a:07:20:e3:bd:02:7d:
1b:c7:62:0b:e7:aa:eb:5a:a2:72:26:ff:ae:28:e0:
36:9f:c1:8a:03:76:e8:11:01:d4:8b:6f:60:2f:21:
be:e2:5b:63:97:8d:ee:6c:aa:90:a4:34:e1:84:65:
85:a9:a3:5c:d5:7f:eb:95:28:8d:d6:c9:40:8c:72:
aa:80:61:c8:71:99:66:57:a4:a9:ea:54:a0:6e:e5:
b7:7e:9e:70:21:86:7e:ae:50:fa:40:f0:3d:be:18:
2a:12:67:13:ca:6d:ad:ad:dd:dc:7b:5d:5d:7b:2a:
0f:cb:40:4d:52:5b:b3:36:c1:5b:2e:d6:c1:8c:17:
fe:66:dd:4b:5f:c4:46:57:af:e6:fb:88:f3:02:29:
2b:38:fd:1e:03:a3:cc:2f:fb:75:1d:8c:72:39:f3:
24:b7:5d:09:d3:13:e4:2b:ea:44:35:4b:3b:75:0f:
2f:f6:a5:31:00:18:17:c5:fe:44:23:20:91:32:b1:
3d:1d:dd:f7:9f:34:a5:0b:98:19:a3:31:95:08:6d:
0a:08:f7:d4:61:d6:12:14:f7:77:da:4f:5b:59:6c:
d6:cb:a0:2a:9a:aa:5f:4c:03:b3:8d:60:e4:94:05:
70:30:b3:0b:14:ab:07:17:9f:cb:d3:12:6e:ad:eb:
d8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C1:7E:5B:3F:F6:64:D0:7D:A3:35:A3:A3:A1:D1:D6:07:05:D6:07
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/68F-Wz_2ZNB9ozWjo6HR1gcF1gc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.40.0/22
Signature Algorithm: sha256WithRSAEncryption
88:b6:d6:00:9a:02:c5:71:a3:e8:4a:a0:55:37:52:76:be:e9:
f1:dd:66:72:98:c2:74:19:d3:61:60:d5:23:7f:6e:af:a1:02:
ff:9a:60:8c:db:10:28:34:0d:00:02:69:63:62:0a:59:3c:fa:
7a:7b:0b:13:dc:86:7f:57:77:21:70:12:a0:c0:d8:d3:ee:38:
4f:dd:3c:03:40:03:0b:98:48:7c:fc:c6:63:4c:5d:50:e4:d6:
8d:5c:f6:e5:62:7f:b5:f5:d5:fd:76:c5:35:a6:42:e4:3c:b5:
20:be:9b:70:2a:27:d9:17:10:8b:96:0e:de:9f:b0:47:65:98:
2e:ba:83:54:34:ba:20:5e:35:0f:15:8f:e4:05:bb:0b:ec:ef:
dc:46:59:a3:65:fd:e4:40:1f:b9:a4:1f:8b:ad:79:86:3f:23:
60:1d:22:ae:47:ca:19:82:62:95:4b:17:58:4b:82:8c:81:12:
29:6d:f1:4a:4f:ad:3b:6a:ed:7a:cb:21:5a:5f:a2:25:31:6c:
05:2e:39:b1:0b:02:4a:c8:10:de:0a:67:fe:49:e9:d2:5d:b2:
3f:59:6c:05:d5:43:7a:fd:e5:54:4b:b6:27:83:98:74:c7:8c:
4b:3d:5e:c0:96:d4:65:7f:10:c7:cd:50:7b:29:e8:9c:94:21:
ab:34:b8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:21 2023 by rpki-client on console-fra.rpki-client.org