Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8h0ZZn8QSQWVrIwfGZdHA2M7Svg.roa
File: 8h0ZZn8QSQWVrIwfGZdHA2M7Svg.roa (raw, json)
Hash identifier: qk/0wwSPmJk8JdJ0FYyonzUcjg2XauFxEBkSX7QYqp0=
Subject key identifier: F2:1D:19:66:7F:10:49:05:95:AC:8C:1F:19:97:47:03:63:3B:4A:F8
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 14F9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8h0ZZn8QSQWVrIwfGZdHA2M7Svg.roa
Signing time: Sun 07 Feb 2021 12:00:53 +0000
ROA not before: Sun 07 Feb 2021 12:00:53 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.193.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5369 (0x14f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:00:53 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F21D19667F10490595AC8C1F19974703633B4AF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:17:83:e9:e2:bc:c3:3e:fe:a8:e4:52:60:74:
22:82:90:f9:c3:ef:35:a2:bb:3a:c3:b4:d1:80:a9:
c3:0f:6b:40:c2:a1:02:2c:41:9f:0c:87:5f:e7:cb:
11:bf:d3:24:1a:da:ea:85:ea:34:d4:47:cb:7e:4b:
ca:45:a8:4e:cc:3c:9a:07:3b:c3:7a:77:dc:b8:d5:
00:e1:ff:bc:1a:2f:11:d3:cf:e7:b1:d4:35:0c:de:
b9:ec:ce:79:a2:a0:a2:7a:6b:d0:d5:e1:f2:68:cc:
be:b4:65:0e:16:8a:65:ec:00:e0:9d:19:16:4e:02:
34:64:57:19:05:f3:10:9f:5f:16:36:0d:1e:9a:f2:
68:77:61:f4:9f:e0:12:6a:e7:e3:3f:ac:d7:ac:eb:
20:e2:e0:11:77:86:87:6d:de:c7:87:67:85:0f:89:
e1:eb:40:fc:65:08:1f:04:99:a7:5d:50:6d:14:8c:
49:f3:8b:5e:7e:e1:de:ff:c5:4c:13:9c:6e:2a:5a:
04:5d:28:22:27:dc:e4:5e:32:71:11:44:4a:69:30:
26:79:98:d1:03:f0:37:ac:90:72:64:a6:ad:bc:30:
73:db:22:5d:bf:62:70:51:bf:87:d3:3b:1f:fd:4c:
cb:54:36:62:29:4a:9a:02:05:25:1f:49:db:55:62:
5f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1D:19:66:7F:10:49:05:95:AC:8C:1F:19:97:47:03:63:3B:4A:F8
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8h0ZZn8QSQWVrIwfGZdHA2M7Svg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.0.0/20
Signature Algorithm: sha256WithRSAEncryption
2a:bc:f0:30:10:28:90:08:06:18:f5:0e:c4:68:d2:df:08:19:
0c:1a:f0:87:26:f2:72:9d:82:61:53:63:e1:cc:67:8a:25:02:
8e:15:8f:e4:1a:50:bc:73:a4:94:c5:6a:8c:25:20:d0:26:c1:
54:2f:47:88:53:da:a7:7c:a8:af:0c:3a:67:4c:18:e5:9f:1b:
9e:1d:5a:77:34:1e:ba:1f:c4:a1:27:37:28:64:b3:ec:85:b3:
61:54:ef:55:03:56:4f:9e:03:83:1c:55:39:0b:b2:81:e9:53:
04:2c:86:00:9b:27:7c:d0:86:b1:a1:97:e4:6a:ff:37:5b:43:
e7:87:ed:99:35:96:7b:df:7f:ef:a6:64:68:03:e9:d2:6a:a8:
fe:bc:75:1b:ea:e5:c0:4f:bf:42:86:43:18:5a:f8:19:8c:b1:
d0:20:eb:2f:1e:63:37:c1:ee:ad:b8:58:88:a5:b5:d3:3a:e9:
cd:dd:84:f4:2a:8b:15:3b:37:ef:75:66:58:4d:24:a1:9d:6c:
0b:da:2d:88:2e:83:8e:1b:86:21:59:80:0f:97:4f:80:7f:8e:
f7:9f:a7:e8:b9:bd:64:c2:cf:6a:4a:44:9a:90:59:7d:91:4a:
96:fd:a3:35:75:4b:68:d2:92:1a:09:f8:05:23:ba:a3:0e:38:
b6:18:d6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:24 2024 by rpki-client on console-ams.rpki-client.org