Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9VWLPMKChJqF8OIKLO87nSw0Wls.roa
File: 9VWLPMKChJqF8OIKLO87nSw0Wls.roa (raw, json)
Hash identifier: /H3vJ36PHb8+iiUzvlLtc2u0IzCIDCZ/vCETOpMwXzA=
Subject key identifier: F5:55:8B:3C:C2:82:84:9A:85:F0:E2:0A:2C:EF:3B:9D:2C:34:5A:5B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 15CB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9VWLPMKChJqF8OIKLO87nSw0Wls.roa
Signing time: Sun 07 Feb 2021 12:06:34 +0000
ROA not before: Sun 07 Feb 2021 12:06:34 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.88.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5579 (0x15cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:06:34 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F5558B3CC282849A85F0E20A2CEF3B9D2C345A5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:05:86:93:98:c2:88:8c:98:6e:15:8c:90:03:
91:24:af:7a:48:d4:1c:db:60:3e:6f:77:0a:ef:1b:
6a:76:a4:b4:ee:f0:f9:1c:0b:4d:59:4c:a2:2f:be:
1d:bc:02:0f:89:e4:84:6b:27:1c:bb:29:64:f2:9e:
d2:4e:5d:07:54:78:51:ff:22:bb:f4:7c:8b:b8:50:
eb:e0:fb:f1:cd:21:0a:41:6b:92:63:de:1c:d3:91:
7b:3d:c3:0c:a1:5b:3c:81:46:00:ef:10:5b:00:95:
97:35:da:dc:92:72:75:97:21:9a:75:f3:5c:6d:e7:
a4:82:85:ac:4a:be:7d:36:7f:b5:3f:fb:a4:40:51:
9e:45:4d:da:f6:d3:79:7a:46:e1:85:11:a4:29:c6:
26:87:c6:98:68:f7:1a:96:64:56:06:9a:f5:63:76:
dd:fa:44:a8:da:75:c1:2a:77:84:95:ae:66:c7:93:
94:85:2a:70:c9:24:aa:95:58:7d:59:01:74:20:29:
17:c9:f0:ae:2b:5c:76:df:78:a3:76:94:f8:89:b2:
36:a3:ac:f1:a7:4b:72:87:45:43:1b:19:03:8c:cc:
5a:73:0b:c7:71:8f:f1:64:02:3e:4f:46:a0:a9:22:
16:6a:13:6e:e7:91:d4:d6:05:46:cb:9c:a1:38:a5:
53:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:55:8B:3C:C2:82:84:9A:85:F0:E2:0A:2C:EF:3B:9D:2C:34:5A:5B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9VWLPMKChJqF8OIKLO87nSw0Wls.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.88.0/22
Signature Algorithm: sha256WithRSAEncryption
93:f5:bb:81:9a:c3:e6:09:a8:96:92:f2:7f:c1:88:37:f4:05:
d7:f0:55:82:7b:97:d7:3f:7f:d4:fa:5e:35:57:37:33:48:53:
53:60:f5:77:33:9a:9b:13:64:47:1b:12:a5:50:33:78:2c:f7:
88:c8:94:b1:91:a6:cb:0a:5d:dd:ac:40:57:84:33:66:25:bf:
72:41:fd:65:08:74:28:33:20:04:12:87:33:50:f6:2d:61:90:
2f:40:86:49:83:5f:5f:4a:88:f9:9b:87:94:46:51:d9:2e:21:
05:6b:78:b1:32:a2:fa:3d:16:59:65:63:15:0f:a5:c6:19:68:
b9:26:99:d3:76:e5:27:e1:92:ca:1b:c4:19:96:d1:8f:35:c3:
96:4c:f1:8b:a5:8a:dc:79:1a:5f:86:3b:1e:e4:d6:5c:ff:2d:
6c:50:9c:ca:43:31:1d:0d:bb:01:1b:67:64:71:ac:02:75:ba:
ef:e6:23:49:84:04:ea:5d:e6:48:97:49:02:58:b6:aa:27:74:
46:74:66:d2:56:ca:cb:fa:12:17:54:cd:44:42:e2:5a:7a:6f:
b3:ed:c1:9b:94:57:73:7a:2e:5d:0d:0e:5a:1e:ad:2c:67:b3:
2b:a9:ca:c8:cd:ab:29:34:a2:24:a5:35:fa:93:4e:4c:d9:73:
25:4d:a0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:23 2023 by rpki-client on console-fra.rpki-client.org