Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/96Biby76KpG3GyKBG3LvKyYTdOY.roa
File: 96Biby76KpG3GyKBG3LvKyYTdOY.roa (raw, json)
Hash identifier: t5bB9luylvLIaJq8SefU2HfqsJuCWJDH6bfiGQGqSkY=
Subject key identifier: F7:A0:62:6F:2E:FA:2A:91:B7:1B:22:81:1B:72:EF:2B:26:13:74:E6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 172B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/96Biby76KpG3GyKBG3LvKyYTdOY.roa
Signing time: Sun 07 Feb 2021 12:17:10 +0000
ROA not before: Sun 07 Feb 2021 12:17:10 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.40.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5931 (0x172b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:17:10 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F7A0626F2EFA2A91B71B22811B72EF2B261374E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2f:67:95:0c:af:ac:34:23:56:e8:76:ae:2e:
45:a2:1d:c0:86:da:ea:df:a2:99:be:20:d0:7e:95:
1a:81:3d:6a:ed:33:11:97:83:51:fd:f9:28:50:8d:
9d:a4:59:17:da:d0:ef:35:4e:23:29:6b:72:ea:03:
13:e0:1c:a6:d5:0d:a0:35:a2:ab:00:38:f2:d5:ef:
c0:15:0c:0e:ac:b6:e9:e4:94:4b:fb:ae:56:2e:ca:
a6:a3:1b:59:9d:75:80:8e:06:4d:77:6b:b6:f5:e6:
85:85:3a:94:7e:b1:5e:18:6e:18:ec:03:92:f0:e3:
79:c1:85:b6:80:e3:c8:1f:ea:23:5d:80:18:8e:b1:
46:bc:87:11:ee:29:c4:cb:69:2a:d9:56:a6:38:78:
28:ae:4b:cf:d2:2c:a2:ee:e4:66:46:9b:95:df:93:
73:6f:a7:34:f1:1b:f5:12:dd:d5:bb:94:c0:ac:0b:
12:9d:22:00:54:19:0e:ac:13:e5:91:36:a4:01:bd:
a7:2d:8d:df:23:05:39:d1:ac:69:0a:78:40:5b:00:
45:75:f6:cc:f3:f4:f4:7d:d9:55:30:4e:a3:3f:59:
0a:83:b9:cf:c0:ab:aa:cb:02:2d:d1:ff:f3:33:4e:
dc:12:c6:64:f2:40:0c:af:59:9c:ef:84:40:4f:66:
44:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A0:62:6F:2E:FA:2A:91:B7:1B:22:81:1B:72:EF:2B:26:13:74:E6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/96Biby76KpG3GyKBG3LvKyYTdOY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.40.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:13:d0:ee:9c:a4:d8:00:e4:10:2a:1a:61:3b:b0:3e:49:d9:
47:1d:d6:63:16:50:bb:a6:77:ab:78:ab:49:6f:44:d4:72:c1:
98:ef:9d:ca:aa:2e:39:aa:92:e8:7a:bc:d2:fc:be:20:f1:23:
ef:8e:26:fc:bf:ed:f7:cf:ef:bc:ab:6f:3c:27:5a:ec:7f:3d:
0e:d4:60:16:bc:e7:98:11:17:e5:0e:5e:28:fe:9e:8a:dc:8f:
cc:e5:d6:f7:ce:00:f4:a4:b7:65:5a:6d:8c:46:9c:4e:ba:9d:
f1:ae:8a:94:29:3c:78:36:21:69:7f:f2:de:96:49:ab:06:7d:
eb:d5:aa:a9:51:ea:aa:59:6a:72:94:cc:96:8c:b3:9b:f5:e0:
11:3a:e6:c6:ef:34:4b:43:1c:68:76:27:ab:9f:11:39:a8:1c:
9f:14:3d:38:fc:c6:e7:77:d4:35:26:30:18:70:7e:fd:b1:3a:
66:4c:ae:52:56:41:17:f2:2c:e6:3a:e7:3c:19:9c:48:e4:fc:
c6:c9:bf:bb:ff:de:16:c5:60:d4:c9:26:e6:a2:18:d8:f3:72:
56:e7:78:7a:d8:1d:17:76:a0:96:64:74:9a:e7:79:12:e7:52:
3e:a5:a4:d8:c4:f3:60:ae:c7:aa:ee:3d:84:28:46:68:0d:d7:
b0:cb:8a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:22 2023 by rpki-client on console-fra.rpki-client.org