Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7nLQOlUB0ow17R59b_utmNMeGSo.roa
File: 7nLQOlUB0ow17R59b_utmNMeGSo.roa (raw, json)
Hash identifier: 3yQChFpXQBekmDTe0mGz666PNZh4Mt7i83M3N+EafI4=
Subject key identifier: EE:72:D0:3A:55:01:D2:8C:35:ED:1E:7D:6F:FB:AD:98:D3:1E:19:2A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0D7B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7nLQOlUB0ow17R59b_utmNMeGSo.roa
Signing time: Tue 29 Sep 2020 09:54:36 +0000
ROA not before: Tue 29 Sep 2020 09:54:36 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.193.120.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3451 (0xd7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:36 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=EE72D03A5501D28C35ED1E7D6FFBAD98D31E192A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4a:10:0b:29:be:40:81:37:f1:44:be:57:f1:
f2:61:1e:02:46:16:ec:67:6e:fe:89:6b:82:02:e2:
fa:40:35:83:51:ab:06:0b:03:64:2e:f6:e3:30:a4:
a5:51:6b:51:51:6a:a5:b1:42:06:88:78:61:5b:c9:
51:54:c6:63:a9:7a:59:e6:32:0a:cb:ea:8e:d2:73:
46:eb:c3:63:69:ee:02:0a:29:32:35:30:4d:49:30:
33:50:6c:11:c5:d9:eb:fe:33:39:ef:fc:93:f4:cd:
1b:2e:f2:6a:85:75:09:6a:e2:5d:2e:0c:a8:f9:33:
dd:5e:5b:99:96:73:71:b3:ee:ea:81:8a:a3:dc:f5:
e8:bb:34:72:46:91:74:a5:28:fa:a1:bb:1d:4f:5e:
1a:07:fe:a0:a8:69:5f:22:67:1f:ff:07:c9:60:8c:
61:fe:bd:75:93:ee:80:9e:dd:fe:84:a2:59:70:3e:
e6:c6:f8:b6:cb:8f:cd:84:df:62:51:6f:71:c9:87:
4b:57:46:a7:58:cc:74:b6:9f:1d:8f:97:8d:a6:3e:
0f:49:d0:b7:f1:8a:c5:7d:af:94:37:20:20:4c:2a:
b7:ba:09:04:40:fe:15:1d:8a:22:52:c8:41:c1:d7:
a5:a0:f8:89:ea:90:03:9e:ee:b2:dc:ba:2b:2d:83:
b2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:72:D0:3A:55:01:D2:8C:35:ED:1E:7D:6F:FB:AD:98:D3:1E:19:2A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7nLQOlUB0ow17R59b_utmNMeGSo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.120.0/21
Signature Algorithm: sha256WithRSAEncryption
56:b0:6a:57:b7:e5:77:cd:c0:fd:9e:ac:3d:c8:f4:e6:76:59:
d2:01:63:4c:59:d5:8a:68:e5:df:37:08:96:2d:62:63:1b:ad:
50:5d:6d:98:b8:d7:21:a5:68:e8:d5:a2:5f:4f:45:77:cd:3b:
02:85:00:ac:36:59:9e:6b:b4:6b:33:ea:b2:8a:ec:5d:b1:1d:
35:eb:cc:62:44:ce:8d:b3:5e:0e:9c:57:e8:33:49:94:af:ae:
c3:d1:ed:97:e6:20:78:ee:3e:8d:40:c5:86:d9:a3:2c:0b:2a:
d4:b3:c5:b7:57:47:57:0e:0e:5b:fb:da:41:34:07:1f:f6:d1:
9a:15:b3:05:59:78:a0:64:d6:ec:f7:10:c8:ab:c8:6c:c9:98:
4f:30:52:0f:3b:0b:0f:63:c8:fb:47:7a:c3:76:d0:e6:35:2c:
75:1a:30:aa:07:07:d7:66:e9:ad:7c:55:54:76:ee:4d:56:cc:
26:a1:f6:5e:6d:99:36:6f:2a:8e:8b:75:5a:67:93:1a:60:87:
ec:ef:95:86:c1:d4:f1:ab:e5:d8:87:8e:a3:48:5b:e4:64:c4:
d0:73:ab:91:c0:92:2b:f2:ac:18:fe:c3:64:c3:b4:cf:94:71:
b8:96:a5:0e:d0:f4:a8:eb:db:3d:4e:bf:9b:c9:b0:0a:4e:6d:
b9:e2:87:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:10 2023 by rpki-client on console-ams.rpki-client.org