Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8s-EnroVg2ZFbzvTxdWv9TT_ks8.roa
File: 8s-EnroVg2ZFbzvTxdWv9TT_ks8.roa (raw, json)
Hash identifier: LYWq79TKCOp3K9WzNaqldo3Jdy8w/ikMR5s0asm75UY=
Subject key identifier: F2:CF:84:9E:BA:15:83:66:45:6F:3B:D3:C5:D5:AF:F5:34:FF:92:CF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1531
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8s-EnroVg2ZFbzvTxdWv9TT_ks8.roa
Signing time: Sun 07 Feb 2021 12:03:20 +0000
ROA not before: Sun 07 Feb 2021 12:03:20 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.200.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5425 (0x1531)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:03:20 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F2CF849EBA158366456F3BD3C5D5AFF534FF92CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:75:d4:73:83:5f:6c:b7:4f:7c:53:b6:55:15:
33:31:4f:5b:87:8b:cf:79:25:39:44:0a:56:5c:ba:
42:91:fb:36:cb:98:e0:66:f3:35:9a:01:8c:cc:c8:
76:84:32:6a:92:90:0c:9c:b9:da:61:18:e7:14:36:
47:5e:7b:0a:30:0b:99:49:7c:4c:e2:fc:89:a3:01:
88:c0:a1:16:95:4c:fd:1a:d1:4e:35:e4:b6:fb:03:
f3:4d:85:b2:ca:b7:52:4d:aa:37:7b:c6:f4:6d:b4:
9b:f9:64:5b:9f:b2:a5:30:87:81:9b:5c:68:9e:82:
88:92:b1:db:c0:29:82:46:8f:8e:14:35:c5:ea:fa:
57:b7:29:3f:f0:95:b1:33:71:3a:9d:d7:cc:1d:c8:
f4:a3:1a:30:4f:c4:53:aa:95:4e:31:77:ad:39:84:
4d:c2:56:29:c1:ab:a3:20:30:24:92:db:8b:6a:65:
00:f8:32:81:17:9e:f6:4f:54:71:0a:a7:54:ab:a9:
3e:3e:03:88:d1:98:ba:e3:49:8b:e0:0f:15:43:22:
98:10:3c:2f:2f:8b:6e:2c:23:38:98:33:e3:13:00:
bc:22:30:db:9c:7b:3b:0e:95:86:6e:44:c9:ed:e7:
91:5f:37:5b:fe:95:b6:78:ab:53:df:b7:7e:81:fe:
d9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CF:84:9E:BA:15:83:66:45:6F:3B:D3:C5:D5:AF:F5:34:FF:92:CF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8s-EnroVg2ZFbzvTxdWv9TT_ks8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.200.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:ca:fa:1e:41:75:4d:b3:eb:c2:fa:c9:15:51:d3:e8:b2:d0:
97:e2:83:2c:b6:42:78:e9:e8:68:c7:fb:35:92:0d:69:84:c3:
33:9e:1d:79:14:01:b2:19:74:f8:df:99:fa:57:e4:89:87:37:
51:0d:a1:95:97:b8:77:21:94:bf:57:d4:cd:10:70:56:1d:b0:
2e:a9:24:2a:d8:2d:d8:ea:7e:b2:fb:e6:db:d4:f8:b9:a9:57:
ab:d6:14:22:57:f3:27:57:26:8a:78:d1:23:d6:72:39:7d:ff:
73:96:fc:41:66:a2:76:eb:47:17:73:98:89:a8:77:b9:2b:b1:
d5:e0:6c:41:59:8b:97:5c:82:2e:ca:90:ac:1c:29:52:5f:7b:
09:39:59:e2:59:79:fe:e7:b7:46:e2:7a:bf:7e:85:2c:b8:49:
79:e5:53:87:bb:25:6e:dc:5b:56:13:91:e2:5d:df:76:0b:3c:
a3:01:6f:f3:0e:51:66:1a:85:8b:b1:e1:b8:c5:2d:56:a1:ff:
af:d8:39:4a:07:eb:3b:92:79:7e:da:e8:ef:d5:8f:c8:60:e3:
24:c4:04:73:5b:41:fa:08:ea:5b:25:38:da:73:33:7d:96:8a:
88:bc:80:c0:cc:30:d5:bf:79:09:75:1a:e1:38:5e:1b:fe:60:
f4:60:2f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:10 2023 by rpki-client on console-ams.rpki-client.org