Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BRw6xan0mHjOtg8oBCj1rJ9DC9M.roa
File: BRw6xan0mHjOtg8oBCj1rJ9DC9M.roa (raw, json)
Hash identifier: Y52bDJPcG3N6iY89ynv5oR8jQilnDkqFg8bnC4EAU6E=
Subject key identifier: 05:1C:3A:C5:A9:F4:98:78:CE:B6:0F:28:04:28:F5:AC:9F:43:0B:D3
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1D3B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BRw6xan0mHjOtg8oBCj1rJ9DC9M.roa
Signing time: Wed 29 Sep 2021 02:48:47 +0000
ROA not before: Wed 29 Sep 2021 02:48:47 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 123.194.192.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7483 (0x1d3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:47 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=051C3AC5A9F49878CEB60F280428F5AC9F430BD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:91:60:bb:c7:7f:16:4d:32:cb:4d:f5:08:d7:
49:c3:03:94:04:fe:44:53:1a:19:4e:98:d4:79:a2:
0b:08:ee:d5:1f:65:75:f5:2a:89:83:42:48:47:2d:
ea:d1:09:9d:12:e8:38:33:b2:c1:1d:c5:df:f7:56:
a2:0d:ee:84:c0:00:69:2b:d3:0f:f5:e5:06:a7:30:
fd:ed:18:49:c6:cb:d7:ab:27:ea:48:d2:74:6d:a6:
90:7c:52:fb:57:78:b6:34:94:da:1c:37:66:cd:51:
66:d5:a3:16:0b:55:53:1a:62:cb:b8:9b:65:57:19:
77:92:38:72:fd:34:c2:38:62:20:b2:65:a0:af:5b:
cf:f0:8a:b8:82:14:32:50:2a:05:59:fb:7a:05:6c:
e4:41:bc:93:3f:9f:f0:77:29:31:b1:39:b6:bc:bc:
c6:b5:e0:a0:d2:59:33:84:55:f4:46:89:63:c7:88:
5b:08:82:0d:c8:1f:6e:14:6c:cb:8b:d3:71:f8:49:
09:83:3c:81:98:be:60:b6:a7:27:18:5b:55:3c:78:
c9:70:24:8c:3d:ce:64:0d:4a:0f:32:76:bf:23:78:
ed:aa:04:28:eb:af:a3:11:76:ce:8f:6d:f5:83:f5:
13:17:17:26:43:d5:ac:70:a6:75:cf:62:6d:df:1d:
76:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:1C:3A:C5:A9:F4:98:78:CE:B6:0F:28:04:28:F5:AC:9F:43:0B:D3
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BRw6xan0mHjOtg8oBCj1rJ9DC9M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.192.0/20
Signature Algorithm: sha256WithRSAEncryption
61:c4:11:9d:ce:5f:47:9f:5a:86:9c:48:58:f9:06:bb:2d:69:
52:a9:16:15:ed:95:e1:7c:8a:83:05:69:aa:82:52:5a:14:9b:
8b:cc:b9:70:cd:7e:04:1f:95:88:22:55:ea:67:50:2b:fc:58:
c8:50:a0:26:b9:77:fb:12:ae:db:f9:28:e4:4f:73:d5:d8:3e:
d6:aa:09:66:99:b1:e8:eb:cb:7c:05:24:21:84:52:c0:fe:6a:
4a:f5:1e:b4:34:1e:f7:97:69:02:8c:2f:9a:af:47:e3:c5:a3:
85:5a:1c:46:4d:9c:10:90:3d:a0:32:18:aa:9b:76:4e:80:85:
3e:59:ad:b7:6d:ba:64:85:3d:16:23:31:fe:3f:14:bb:00:ef:
50:16:0b:ff:d0:92:84:da:bc:f8:2a:d1:04:0b:15:31:b0:bf:
be:07:e7:42:63:3f:d4:07:45:49:05:cf:ac:2f:c0:77:b4:9c:
13:dd:3f:fa:8b:13:0b:e9:38:31:e0:90:20:bb:3f:c9:70:9d:
e7:35:7c:9c:1d:3d:67:55:c1:7b:98:80:6b:28:81:ea:ac:0a:
9c:f5:e6:79:ba:9c:d6:1b:16:51:e0:1f:92:37:85:f5:c0:c9:
1b:b9:00:47:20:4d:1d:8f:c1:30:d9:4a:65:f0:e1:9e:60:80:
3d:86:3a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:25 2024 by rpki-client on console-ams.rpki-client.org