Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BgDeaM-KZuA3cGjbRz_fVXSlVpE.roa
File: BgDeaM-KZuA3cGjbRz_fVXSlVpE.roa (raw, json)
Hash identifier: wWL3WWUbsk+NF082iL2bNUJhqielhqWaCzWHCCLPuq0=
Subject key identifier: 06:00:DE:68:CF:8A:66:E0:37:70:68:DB:47:3F:DF:55:74:A5:56:91
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1451
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BgDeaM-KZuA3cGjbRz_fVXSlVpE.roa
Signing time: Sun 07 Feb 2021 11:58:11 +0000
ROA not before: Sun 07 Feb 2021 11:58:11 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.193.208.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5201 (0x1451)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:58:11 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0600DE68CF8A66E0377068DB473FDF5574A55691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:79:60:20:05:76:01:5b:f4:fc:5d:3b:8d:74:
1e:14:36:1e:ac:71:fc:9f:62:2f:40:1b:7b:1d:78:
04:ea:25:b4:2c:8a:f7:83:a2:c5:c9:e8:ca:64:8b:
57:87:03:81:98:c6:63:da:ce:af:a6:c9:e4:ef:bb:
bb:90:52:8c:62:82:ea:c8:b8:fc:d0:8a:3e:1f:d2:
3e:f6:8d:52:d7:63:98:c2:87:67:1c:3a:4f:f5:c1:
c4:a4:bf:78:7f:e9:c9:18:aa:1e:60:52:15:d0:c8:
f8:9b:12:b9:fe:d2:50:d5:00:5b:3c:db:50:e8:57:
84:eb:8c:0f:dc:13:eb:bb:21:b3:2f:46:2e:87:1a:
70:4b:22:11:93:35:71:c9:45:ea:73:49:a1:03:32:
c8:b9:28:0a:2a:a1:62:0f:6d:d1:24:7d:71:07:d8:
9c:bc:22:c3:f2:38:84:1f:87:cd:65:d7:58:24:a0:
91:28:02:2d:e9:e6:01:af:0e:38:ff:0d:ab:45:61:
ff:40:ce:8b:3f:7b:84:88:99:18:40:eb:1e:40:82:
12:5e:8b:6f:b9:23:5e:2a:fd:0b:e9:b9:ce:ae:1f:
23:01:65:c5:be:9b:36:a4:e2:67:19:95:a1:06:50:
3d:78:e0:e3:71:e7:a0:c4:a8:8c:1d:e7:56:ac:e0:
c3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:00:DE:68:CF:8A:66:E0:37:70:68:DB:47:3F:DF:55:74:A5:56:91
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BgDeaM-KZuA3cGjbRz_fVXSlVpE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.208.0/21
Signature Algorithm: sha256WithRSAEncryption
19:7c:3e:a9:9a:c6:b6:63:0a:82:1d:77:bc:44:86:97:6a:73:
b5:60:10:14:96:d1:9f:eb:34:41:56:d2:aa:c8:23:1b:fc:c9:
4c:f2:d0:e1:2d:2c:6c:02:a8:9f:ba:36:9b:18:5d:43:b7:99:
7d:61:1c:a9:a5:52:d6:7f:35:99:9c:f7:d6:8c:77:3f:7c:11:
90:84:60:85:50:bd:14:49:38:6b:90:f4:ec:1b:a3:8a:c2:6f:
5f:d1:d8:d4:55:db:7d:9b:62:63:ea:da:69:83:cb:7c:09:72:
a4:ee:fa:08:4a:ef:ff:2f:f4:f6:78:ef:7b:ea:9e:1e:40:ea:
75:06:a6:80:43:6a:32:5f:47:75:32:9b:46:b1:80:9a:29:ad:
1c:81:3b:9f:1a:90:10:e3:6c:d4:3d:65:24:2b:f3:f3:2a:96:
4a:73:41:20:f4:14:b1:f6:43:8d:ae:3b:0d:ea:7d:3e:a8:ba:
9e:ad:64:c2:6f:49:53:85:76:45:48:57:ca:c4:a3:dc:fd:5c:
1f:25:ed:c6:0f:42:83:41:45:0d:c0:cd:50:e6:40:59:29:e2:
c7:0b:35:51:4f:b6:05:89:4a:bd:6a:16:47:f4:4a:71:5c:35:
5a:11:f5:b6:6a:47:c4:7a:cb:7b:da:0c:a1:4e:57:13:0f:7b:
cf:a0:57:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-fra.rpki-client.org