Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ay9ummVJ1la_uF7N_nFm3vCAKOA.roa
File: Ay9ummVJ1la_uF7N_nFm3vCAKOA.roa (raw, json)
Hash identifier: JaUIwfwJOZy6OGiq7SpdEBkzZh1L91gVpZdObJqi2ns=
Subject key identifier: 03:2F:6E:9A:65:49:D6:56:BF:B8:5E:CD:FE:71:66:DE:F0:80:28:E0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 15B7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ay9ummVJ1la_uF7N_nFm3vCAKOA.roa
Signing time: Sun 07 Feb 2021 12:06:07 +0000
ROA not before: Sun 07 Feb 2021 12:06:07 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.216.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5559 (0x15b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:06:07 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=032F6E9A6549D656BFB85ECDFE7166DEF08028E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:18:75:bb:f0:a1:3a:63:ab:30:3a:6f:d3:53:
75:bf:0c:84:69:28:30:26:d7:05:e2:4a:f0:09:84:
cc:77:9a:44:2c:73:f7:5d:d7:ae:70:52:b1:46:67:
b4:05:7d:da:d3:29:18:ef:e8:ba:0b:18:a7:17:55:
fe:5f:af:bc:34:c9:92:e3:4b:15:2e:70:0b:d9:8d:
4c:79:d1:d8:12:80:93:2e:33:73:62:4d:71:50:64:
aa:5f:1a:63:76:14:fa:48:ed:a9:72:e9:cb:37:10:
c1:bc:3b:f7:1e:36:9d:8d:0b:4a:41:0e:c1:42:5f:
4d:3f:8d:cf:5e:65:b3:99:04:fb:e6:a0:70:bb:15:
81:31:ca:ed:d4:f7:14:f5:be:6b:cf:4b:ba:ab:94:
24:ed:d8:14:f0:b3:ab:25:1a:3c:a4:82:f5:c6:8c:
2c:e8:fe:45:a8:f7:f3:81:c0:72:5c:30:c9:8c:88:
53:95:a3:15:af:1b:03:d6:95:a3:11:80:69:b7:3a:
f5:ae:d1:83:23:e0:81:fa:98:38:54:ea:75:30:16:
27:8c:81:ec:89:b5:3e:35:39:db:a4:5e:4d:d0:a6:
61:74:7f:27:9e:6c:14:f1:fd:3a:4a:19:9d:d0:e5:
24:fd:c6:a1:b9:86:bf:36:9e:84:d8:4a:0b:c4:7d:
22:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:2F:6E:9A:65:49:D6:56:BF:B8:5E:CD:FE:71:66:DE:F0:80:28:E0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ay9ummVJ1la_uF7N_nFm3vCAKOA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.216.0/21
Signature Algorithm: sha256WithRSAEncryption
6a:3d:58:26:04:8b:69:b9:58:52:25:e5:c6:2b:39:89:a3:90:
e2:e8:27:4d:4a:dd:59:d9:4b:80:09:58:08:17:78:8a:81:1d:
0c:76:ab:41:39:4c:8a:7a:64:b0:98:82:ff:e9:2a:45:b8:74:
b8:90:e2:57:e0:32:52:d7:21:40:a7:5a:f7:01:ac:ee:82:b2:
e4:bc:a5:86:39:7f:8c:3c:7c:9d:11:4c:29:50:ed:45:b0:13:
ed:99:98:fe:eb:f9:80:af:74:0d:b9:66:90:ed:8f:f9:79:30:
56:19:67:2b:db:98:ef:89:0e:71:ba:fa:84:f0:c5:48:bf:91:
42:91:82:bb:90:61:50:f2:f4:b6:83:28:72:b9:a4:b0:9b:9e:
f9:b5:5a:6d:b1:49:cc:71:43:01:b2:98:ac:2f:b5:aa:15:36:
80:68:76:14:7b:1e:7e:8e:d2:41:cc:8d:89:73:b7:69:97:27:
8c:bf:a7:fd:d6:67:d5:97:cd:c0:1e:cb:42:ad:b5:0e:68:b8:
5d:0d:b3:1c:3d:8c:46:2a:da:1d:7b:a6:87:66:05:cb:3b:53:
0d:6c:d8:07:45:ce:d9:18:c6:c2:41:08:a1:bb:46:da:8c:d8:
ad:a2:be:4c:9a:d8:46:10:1c:37:0f:75:31:38:03:4e:d6:9b:
a8:21:d4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:11 2023 by rpki-client on console-ams.rpki-client.org