Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6yYHcIaMxb5Sb0lxQnn3gYSImHY.roa
File: 6yYHcIaMxb5Sb0lxQnn3gYSImHY.roa (raw, json)
Hash identifier: ShdqHRj8c8XMEUH5VZNNGYPdNOlbCQZnriUNRWcAkyw=
Subject key identifier: EB:26:07:70:86:8C:C5:BE:52:6F:49:71:42:79:F7:81:84:88:98:76
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1569
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6yYHcIaMxb5Sb0lxQnn3gYSImHY.roa
Signing time: Sun 07 Feb 2021 12:04:29 +0000
ROA not before: Sun 07 Feb 2021 12:04:29 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.0.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5481 (0x1569)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:04:29 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=EB260770868CC5BE526F49714279F78184889876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2e:23:61:d5:fd:97:6a:a3:c5:ae:1a:c8:56:
85:1b:4a:79:a8:bc:e7:c5:99:b6:50:3d:66:5e:c0:
7a:20:95:98:85:3c:94:56:dd:99:51:57:56:0e:b6:
0f:8a:a3:d0:70:9a:4e:09:18:50:2b:c8:db:e6:31:
11:5e:d7:35:01:90:6a:d4:0e:1f:c9:98:09:8f:5c:
72:94:9a:76:4d:09:12:8e:51:31:52:35:be:cd:6a:
cc:6b:e3:07:c5:02:98:e0:07:ad:da:e7:a5:9e:d9:
73:ef:6d:aa:d2:0a:24:68:62:ee:93:c8:8c:c6:46:
bd:74:49:48:dd:8b:f1:06:23:be:e8:24:6a:b3:77:
35:0e:c6:d7:e6:e1:cb:27:82:d4:d8:ec:d0:5a:7d:
96:57:5c:7f:50:44:61:44:e1:75:4d:79:f0:cb:82:
c7:e4:86:c6:98:76:0e:f2:05:d6:9c:30:92:91:ef:
8c:38:ad:a7:e4:4a:c5:ee:f6:61:d7:d5:92:14:69:
78:e8:f0:8e:b0:e1:ae:94:d8:ee:8a:43:9c:1f:11:
90:b5:99:c6:f1:73:5f:60:e9:91:39:d6:69:d1:30:
fd:d7:b1:ad:a0:ef:62:07:30:9c:f6:b0:2e:16:f7:
56:6c:37:09:52:fb:2d:e3:e5:0d:a4:32:de:99:55:
62:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:26:07:70:86:8C:C5:BE:52:6F:49:71:42:79:F7:81:84:88:98:76
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6yYHcIaMxb5Sb0lxQnn3gYSImHY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.0.0/21
Signature Algorithm: sha256WithRSAEncryption
20:cb:37:69:6c:84:ec:ac:7d:03:f5:7c:5a:71:2a:ab:cc:95:
cd:43:0d:25:31:0f:f4:dc:65:c2:0d:f2:66:76:f6:a7:17:3d:
78:cb:6f:5d:02:72:75:74:14:f2:4b:75:0a:a7:d6:49:09:a8:
b1:79:f2:54:f9:7e:e8:83:75:65:33:d1:de:06:82:ca:6d:ed:
8a:66:a9:68:d7:3a:85:0d:63:80:4d:8f:4c:14:9d:14:f3:d6:
24:42:c5:ae:73:d5:af:56:ef:6d:28:11:c8:00:a5:ac:28:6b:
e5:b5:88:47:7c:09:e4:9d:40:45:bb:4b:52:5d:30:5a:49:79:
9a:98:cf:2e:96:a5:e7:8a:7a:66:17:c8:b3:7f:d0:94:24:6a:
f9:58:f7:c7:01:a6:dd:67:8b:b7:45:82:52:b5:5f:de:97:6e:
dd:f0:6d:fa:3f:b3:ee:49:78:88:03:e7:0f:b9:3b:72:43:9a:
4a:54:81:aa:41:86:85:b0:4b:cd:9f:26:54:29:b3:ee:ef:0f:
5a:81:a9:55:52:7d:6c:45:fb:e8:a9:72:60:96:80:2c:10:ad:
6e:09:b3:29:bf:d4:ee:6e:7e:6e:28:78:fa:c5:3c:c0:09:f6:
00:0b:be:d3:43:59:77:ae:2f:1a:0b:c9:5e:3b:d7:29:3e:ab:
ad:f4:d9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:22 2023 by rpki-client on console-fra.rpki-client.org