Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7TzsweaKJIKvGB0km4kSKKM0cuU.roa
File: 7TzsweaKJIKvGB0km4kSKKM0cuU.roa (raw, json)
Hash identifier: VU+yH1jyf1+7y3E5HqA6UnOv3XbaeY56O2fnk29m92k=
Subject key identifier: ED:3C:EC:C1:E6:8A:24:82:AF:18:1D:24:9B:89:12:28:A3:34:72:E5
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 152F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7TzsweaKJIKvGB0km4kSKKM0cuU.roa
Signing time: Sun 07 Feb 2021 12:03:18 +0000
ROA not before: Sun 07 Feb 2021 12:03:18 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.200.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5423 (0x152f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:03:18 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=ED3CECC1E68A2482AF181D249B891228A33472E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d9:fa:53:85:95:7a:27:26:af:13:e4:2b:d3:
87:59:7b:f7:08:f8:a5:66:61:1a:ed:cc:6a:da:ae:
67:a4:71:c6:f8:7b:72:a0:f4:a9:d4:a8:b5:40:46:
7d:05:91:dc:03:7a:2a:c2:83:34:18:1f:55:d6:eb:
3c:6f:d5:54:7a:71:dd:1f:28:56:0e:df:a3:4c:a0:
a1:08:f3:6e:e1:9a:78:b1:56:32:6f:39:75:9a:8c:
23:24:18:47:ac:2c:84:e0:5c:cf:be:cf:37:b1:72:
1a:b4:d7:9a:bc:66:f4:7c:eb:42:aa:c0:95:6f:bc:
e0:d2:52:76:74:ae:a9:09:19:24:9d:e0:bb:79:c0:
6f:33:4a:5e:73:61:66:ea:7d:9e:74:42:3c:25:66:
5e:07:f4:b8:63:55:c9:09:06:c0:d4:ff:c7:05:a2:
3e:0f:5d:c4:41:55:dd:58:b7:f8:b7:c2:d8:13:46:
1d:c9:1a:a5:2b:25:7f:27:32:11:68:0a:db:e3:f1:
06:aa:a6:75:8c:5c:aa:37:15:6f:68:22:66:ba:af:
48:46:ff:6c:e1:39:6c:d7:7a:ac:a1:c2:46:33:58:
5f:62:83:a2:ed:13:01:f5:8c:d1:68:55:c8:5b:8b:
ed:d8:96:0c:7b:83:d9:74:01:e4:78:d4:a7:78:85:
38:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3C:EC:C1:E6:8A:24:82:AF:18:1D:24:9B:89:12:28:A3:34:72:E5
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7TzsweaKJIKvGB0km4kSKKM0cuU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.200.0/21
Signature Algorithm: sha256WithRSAEncryption
07:5e:61:06:82:51:98:f2:6b:c8:84:fd:a3:ef:fd:ca:2d:67:
1a:8b:83:35:cd:7d:11:78:bb:81:ad:68:dd:33:ba:0d:4e:86:
7d:7c:78:a9:6e:24:40:4e:d9:9c:0b:27:57:67:f2:3f:89:f9:
50:f2:3b:61:bf:b6:14:20:67:63:e0:23:83:46:30:7e:d5:88:
55:86:e4:37:04:52:f9:1d:d4:e0:2e:f1:d0:41:c4:dc:59:08:
74:b8:0d:d0:70:ff:53:65:09:2c:7e:eb:20:06:38:62:8e:ad:
3b:58:b6:80:3f:7a:62:ba:89:9e:06:d8:b7:13:6c:b5:34:51:
f8:f5:55:a4:73:f3:38:08:9b:58:d9:bb:cf:5e:73:f6:4f:1f:
8c:9b:64:0d:40:f1:8b:07:9d:fb:f0:51:03:60:1b:19:0a:d9:
d6:97:36:dc:96:0d:c2:e6:ed:fd:6e:35:c7:bb:a4:47:e0:99:
e0:94:77:fc:c5:1d:4d:ef:61:bc:6d:ab:ca:cb:4b:e3:18:dd:
c9:77:e3:80:ba:9f:87:3a:e1:34:a8:08:08:cd:4e:41:6b:0e:
72:87:8f:19:04:54:44:5e:4c:66:e3:c8:7e:aa:29:be:b2:af:
ba:f6:00:73:73:51:21:48:3f:68:7d:6d:8e:2c:10:91:9c:c5:
19:7b:12:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:24 2024 by rpki-client on console-ams.rpki-client.org