Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9qtaE_ktHDlXfNVCXgDIBM5Favc.roa
File: 9qtaE_ktHDlXfNVCXgDIBM5Favc.roa (raw, json)
Hash identifier: p1BURZoEuDOx2QX3tOIDqsGjL95xibf00dms9a61sIU=
Subject key identifier: F6:AB:5A:13:F9:2D:1C:39:57:7C:D5:42:5E:00:C8:04:CE:45:6A:F7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 15FD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9qtaE_ktHDlXfNVCXgDIBM5Favc.roa
Signing time: Sun 07 Feb 2021 12:07:40 +0000
ROA not before: Sun 07 Feb 2021 12:07:40 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.192.88.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5629 (0x15fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:07:40 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F6AB5A13F92D1C39577CD5425E00C804CE456AF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0a:b3:dc:99:dc:b4:86:01:ce:a2:64:d4:a0:
00:79:06:2f:28:37:1a:4f:e2:e1:ee:cc:06:9e:bc:
1e:8b:eb:1b:7e:d2:12:eb:14:51:4b:2d:7d:69:89:
4e:95:11:31:f6:24:bf:0a:8e:2e:3a:cb:6e:93:e0:
d1:fb:e9:b6:ad:b6:16:35:0e:d1:e0:36:57:13:51:
8b:4c:8e:de:97:52:c2:4f:ee:b6:49:0a:aa:d9:8e:
62:01:18:23:bb:ca:ef:85:22:0d:af:ff:f9:36:75:
d4:0b:85:ab:4b:dd:3f:9c:79:7a:32:4a:3e:78:dc:
19:9d:8f:1d:98:f1:2c:06:9d:6c:b7:1b:01:fa:e4:
a3:0d:55:9f:f9:56:2c:92:6c:73:bc:55:39:8f:a9:
57:2a:79:6c:8e:29:46:71:52:f0:2e:eb:c6:36:b2:
d4:19:b5:f1:59:19:41:47:55:f4:70:30:c2:1d:f2:
dc:79:8c:b0:6d:67:f3:4f:89:0c:41:ea:73:de:8a:
48:45:ec:9c:83:94:67:7a:58:54:9c:88:a9:46:9f:
87:68:0a:1b:ce:dd:13:5f:48:b2:c6:1d:61:9c:0f:
dc:96:8b:48:38:46:81:91:e3:e3:0d:61:38:08:ac:
55:a8:cc:43:c1:ce:d1:c8:ab:83:1f:5f:69:b6:44:
ca:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:AB:5A:13:F9:2D:1C:39:57:7C:D5:42:5E:00:C8:04:CE:45:6A:F7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9qtaE_ktHDlXfNVCXgDIBM5Favc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.88.0/21
Signature Algorithm: sha256WithRSAEncryption
ae:b7:b0:d8:37:1d:6d:50:1d:9a:24:62:62:74:86:b9:01:06:
36:e9:4a:5d:7d:5c:23:66:7b:cc:7c:1c:5e:3e:da:8e:61:3b:
42:0a:96:13:36:42:39:56:88:2e:ea:8b:31:f4:d9:7e:2f:b6:
db:2f:08:70:fe:ac:0e:d7:95:04:4b:05:f2:c2:9a:17:fc:7b:
43:0a:68:12:54:68:9d:33:a1:0b:f2:79:80:95:a1:29:e3:ea:
2a:73:04:d2:70:79:87:dd:34:52:94:69:4d:a0:3c:c4:a2:e9:
da:bc:0e:f0:af:f4:66:66:7e:cf:7d:55:6f:97:dd:f3:ab:18:
36:58:24:3c:ce:b9:b4:61:1c:6e:cd:2d:70:d0:d1:f2:0e:bc:
b3:58:1e:0e:9f:92:9b:00:f9:aa:cf:48:a6:28:db:3f:ce:cb:
50:6f:41:16:03:20:0a:a0:37:c3:0f:69:71:8a:7b:a5:e0:3b:
5e:7c:66:1b:d6:21:54:d0:3f:b3:14:7c:4f:92:f3:0f:b5:ed:
63:27:42:e9:2b:9b:f4:1e:3e:eb:78:4e:67:6d:20:f2:59:98:
85:2d:71:99:46:9b:78:97:38:8f:f1:51:6a:e7:d3:13:4e:da:
47:4e:70:06:ec:1d:44:28:03:70:a9:c1:32:fd:cb:63:2f:0c:
06:e4:2d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:48 2024 by rpki-client on console-fra.rpki-client.org