Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8kQh8C0TSl3LFQ53NcvT29oSAPA.roa
File: 8kQh8C0TSl3LFQ53NcvT29oSAPA.roa (raw, json)
Hash identifier: 9w9ktBy0PB7xDP5Zy6OAI8NgZn/f4a2u+bKcUgs9isY=
Subject key identifier: F2:44:21:F0:2D:13:4A:5D:CB:15:0E:77:35:CB:D3:DB:DA:12:00:F0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 18C5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8kQh8C0TSl3LFQ53NcvT29oSAPA.roa
Signing time: Sun 07 Feb 2021 12:53:33 +0000
ROA not before: Sun 07 Feb 2021 12:53:33 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 123.193.80.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6341 (0x18c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:53:33 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F24421F02D134A5DCB150E7735CBD3DBDA1200F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d7:b7:0c:0b:f4:29:29:23:d6:1d:2d:d0:00:
e5:6c:dd:c1:4d:b6:e9:09:27:eb:9c:e4:85:22:e5:
2a:32:c1:9a:6e:35:27:51:30:8d:f7:d4:a8:66:92:
28:fe:3f:75:0c:ac:d6:db:63:75:c9:53:ee:ff:07:
6f:b7:6d:26:b8:1f:a0:82:07:e5:25:20:5b:22:cd:
d6:1d:f1:5d:4e:e2:70:22:a8:aa:16:db:d6:7a:92:
5c:25:40:0e:82:cc:2b:44:7b:db:d2:9a:15:9d:c8:
2d:88:cb:c2:e4:d3:7d:75:30:96:93:74:92:45:80:
87:26:6b:8a:30:42:01:db:b9:c3:fe:42:6d:ce:96:
f5:d4:3d:69:c8:3c:fb:6b:b8:b0:1f:c6:07:79:f8:
ed:62:80:27:5b:67:6a:14:e2:6b:5a:49:dd:38:47:
92:55:54:fc:f9:83:1e:91:16:bd:96:2c:a0:80:39:
7f:d8:19:71:51:15:18:e4:e4:3e:2d:89:b9:cc:30:
32:7e:48:21:01:ab:be:d7:82:e5:22:60:ca:28:8f:
4e:a1:a0:e6:02:54:a9:49:d5:1f:02:a2:9f:0a:63:
f1:e8:57:98:22:11:e1:fa:5e:4e:b6:f1:dc:53:83:
43:f4:09:c0:41:bf:6e:65:d1:24:d2:49:e8:cc:13:
6d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:44:21:F0:2D:13:4A:5D:CB:15:0E:77:35:CB:D3:DB:DA:12:00:F0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8kQh8C0TSl3LFQ53NcvT29oSAPA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.80.0/20
Signature Algorithm: sha256WithRSAEncryption
94:04:df:db:e5:e8:a9:60:33:95:6d:e6:e7:b0:13:e8:b1:7c:
18:29:30:de:a8:35:b2:35:fc:8e:d9:77:f9:c5:44:f2:29:74:
1b:cf:6b:69:91:fc:ff:3f:bc:b9:5b:bd:9e:f2:99:b6:30:35:
f4:9b:05:9d:ff:ce:65:a2:7d:f3:5a:c5:3d:40:85:6b:49:8e:
ac:fc:84:2b:c5:f0:ee:eb:3d:b6:d3:0b:74:e9:07:16:6e:6a:
c8:5e:46:26:43:e4:3a:3a:a7:3d:ca:3b:26:29:8b:f8:9b:2b:
ad:ee:f3:60:73:2b:20:4e:c2:be:d2:3f:69:fa:65:50:af:e4:
0a:2d:00:34:8e:d5:24:94:8b:1a:8a:00:20:d3:fc:0a:1b:ba:
87:f7:4f:2f:07:22:c9:57:bd:7e:53:6c:b8:e6:e3:ab:d2:45:
57:33:2f:0b:5b:e8:00:b0:19:a9:41:57:7b:30:61:5f:70:a4:
fb:0f:17:80:4c:05:b9:21:3d:85:8e:55:3b:c2:aa:b4:58:87:
a8:e0:50:cf:16:45:b2:8f:1a:1f:8e:d3:6e:fb:d8:63:44:bc:
63:bd:b3:18:7a:3f:63:c7:d8:01:3d:72:52:01:e5:e5:82:33:
ca:d0:39:ae:f8:ff:31:0a:f5:d2:7b:7b:9d:2d:da:53:72:9d:
00:4c:f0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:48 2024 by rpki-client on console-fra.rpki-client.org