Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6EhBX3vjbcYSQpnpEy6bfg0mtTQ.roa
File: 6EhBX3vjbcYSQpnpEy6bfg0mtTQ.roa (raw, json)
Hash identifier: bROJWLCDs3btrEalLJDqvSxUpOcY8lOkmdiyJYG8NnM=
Subject key identifier: E8:48:41:5F:7B:E3:6D:C6:12:42:99:E9:13:2E:9B:7E:0D:26:B5:34
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1533
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6EhBX3vjbcYSQpnpEy6bfg0mtTQ.roa
Signing time: Sun 07 Feb 2021 12:03:22 +0000
ROA not before: Sun 07 Feb 2021 12:03:22 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.204.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5427 (0x1533)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:03:22 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=E848415F7BE36DC6124299E9132E9B7E0D26B534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:15:41:25:19:1a:24:e7:a8:a7:b5:6b:5c:7b:
ea:9c:a4:61:99:86:d3:3c:14:70:cf:92:da:4b:d4:
56:7c:d7:d7:f2:1b:dc:90:9b:f2:46:94:83:13:a8:
fe:6d:6f:65:61:d6:1f:93:ad:06:b3:61:27:96:50:
3e:55:d2:5e:ed:94:4b:98:ed:0c:7b:24:8b:f1:ec:
2f:b2:4d:47:91:d7:ce:e0:88:a1:b2:ef:76:ec:58:
12:b8:a7:96:8a:f7:fb:3c:81:6d:31:cf:59:82:2f:
8f:18:c9:ec:29:0a:1c:93:72:69:16:0f:b6:08:57:
6d:a4:3e:ef:27:a6:b9:78:1c:d1:32:be:10:b9:2d:
d6:20:25:82:9b:d7:46:4d:40:9b:0c:a1:84:c9:82:
d3:8b:74:37:32:51:b2:32:34:47:42:98:0e:40:38:
60:bf:62:92:2b:51:8a:a9:57:8d:19:85:77:b6:d7:
af:84:77:0d:4c:8a:92:14:bd:30:2e:60:b7:63:0c:
d4:2b:89:5a:2b:2b:ca:e8:56:9d:ac:be:50:9e:e8:
3a:68:e3:6f:22:b7:30:f0:6a:44:d6:15:08:3e:f8:
2a:6a:40:72:d0:c8:14:3d:60:4a:c8:c8:34:39:b0:
19:bf:44:e5:b2:0e:02:62:b6:c7:d6:73:ee:d1:71:
d6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:48:41:5F:7B:E3:6D:C6:12:42:99:E9:13:2E:9B:7E:0D:26:B5:34
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6EhBX3vjbcYSQpnpEy6bfg0mtTQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.204.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:41:b3:68:8e:3f:bb:c8:5f:3b:29:df:4a:71:bb:ba:e3:30:
d0:c4:ae:c2:d5:6e:f6:bf:e7:7e:4c:e0:fd:dd:0d:f0:2a:a2:
bf:aa:11:51:75:e7:03:02:24:97:bb:51:dd:35:63:1e:80:a0:
98:71:71:8e:aa:54:a5:bd:3f:4a:b2:22:93:ad:2c:76:c1:2d:
b5:e9:73:2a:6e:9d:af:ba:cd:cf:3d:85:58:e1:21:ec:9f:a9:
c0:42:d1:b7:42:f7:c7:91:8d:61:c9:ad:78:63:eb:86:bb:83:
47:ce:b7:e7:ef:09:0a:3c:b8:55:11:c4:7e:04:6d:2d:56:ad:
7f:e9:62:78:a6:17:bf:06:cb:80:d6:10:e9:14:6f:65:3c:75:
05:17:3b:c9:18:bd:0d:97:8f:1a:6e:83:2f:31:62:95:d6:3c:
d2:4a:ca:57:3d:d2:ed:a5:59:f3:20:15:ff:5a:35:05:24:12:
f2:86:49:58:e8:a3:aa:6d:43:15:b6:ee:5d:4d:ee:a3:31:10:
76:82:50:16:56:2b:ff:64:1a:05:af:80:ea:84:75:29:a4:67:
53:c0:3f:13:e0:97:de:6a:ed:78:2d:bf:8c:7b:25:be:80:bb:
18:88:ee:ee:16:d3:e3:b2:85:1d:f0:fa:e1:cc:ea:14:c3:57:
b3:2d:fb:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:47 2024 by rpki-client on console-fra.rpki-client.org