Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Bw_52Idb2cVJsMD5_jLKDEDE-YY.roa
File: Bw_52Idb2cVJsMD5_jLKDEDE-YY.roa (raw, json)
Hash identifier: 5LIJRpG+R+6o9Pyy4+juR3dEd5uVyAgVIuwaxB8EpdQ=
Subject key identifier: 07:0F:F9:D8:87:5B:D9:C5:49:B0:C0:F9:FE:32:CA:0C:40:C4:F9:86
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 190D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Bw_52Idb2cVJsMD5_jLKDEDE-YY.roa
Signing time: Sun 07 Feb 2021 12:56:35 +0000
ROA not before: Sun 07 Feb 2021 12:56:35 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 123.195.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6413 (0x190d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:56:35 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=070FF9D8875BD9C549B0C0F9FE32CA0C40C4F986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:95:01:28:75:f8:8a:5a:73:ff:68:3c:dc:14:
92:25:f6:e8:ff:90:80:c2:e5:b4:f0:4a:0b:4c:94:
39:22:7d:a1:fd:c1:f8:fa:fb:76:b1:ea:50:a1:19:
5c:5c:f9:39:0c:a6:01:7d:59:a5:1a:d6:47:5e:0b:
0c:57:17:02:77:a1:a4:01:52:0f:bf:31:47:46:a9:
7e:89:b2:5d:10:44:ed:f9:b3:c0:5e:f7:8b:77:d3:
54:b2:60:39:d4:b1:9d:82:86:37:7a:dd:84:8b:6b:
4d:95:78:69:22:c6:0c:86:50:76:68:69:16:af:08:
a1:f2:b8:07:36:88:5b:c4:54:95:fd:fc:49:2c:49:
82:66:af:ec:02:5b:8d:54:d7:98:15:5d:82:60:cc:
a3:29:7a:e8:82:dc:bc:fb:93:29:ee:e1:0c:db:d4:
2c:90:e3:3f:b9:8c:c5:74:65:af:19:f8:03:b7:06:
70:24:9d:e7:28:85:12:a6:01:b8:9b:ba:8c:a9:1d:
20:fd:0d:00:e4:ac:72:aa:d6:50:42:eb:61:3f:ec:
00:19:18:12:4f:0a:c5:43:db:26:54:b2:70:f5:e1:
77:9a:fa:50:63:77:5e:61:48:e5:04:12:43:cd:c2:
43:50:44:72:5c:08:23:fd:5b:5e:ea:d9:c1:56:c8:
f0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:0F:F9:D8:87:5B:D9:C5:49:B0:C0:F9:FE:32:CA:0C:40:C4:F9:86
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Bw_52Idb2cVJsMD5_jLKDEDE-YY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.244.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:ea:cb:04:80:53:9b:06:3e:d3:c3:4a:39:98:37:fe:e7:dc:
e8:d2:3d:d4:80:c5:f7:9c:53:71:be:d9:4a:bd:43:0a:32:22:
b4:33:40:41:b3:7e:d9:12:84:9b:95:7c:90:64:6f:f5:5b:8e:
de:4c:7b:80:60:c9:e1:e2:2f:a0:3c:c5:41:02:cc:3c:ce:48:
87:6a:d5:85:f2:ba:33:c0:22:b0:d6:cc:d9:f3:96:6c:74:d2:
8b:0e:dd:94:b4:78:58:b4:3a:3f:17:7e:ca:30:9d:b6:21:e2:
d1:88:96:5f:6c:53:6f:6e:61:db:de:20:c9:28:8b:4d:fe:f6:
5c:4c:5c:65:bf:6e:ed:0f:a0:03:76:d1:b9:3f:8b:73:58:75:
0c:b5:4c:36:93:a3:f2:6f:25:7f:92:04:cc:8c:a9:38:aa:0d:
49:8d:88:d1:f4:f6:ec:ad:71:d7:53:22:dd:17:e0:02:b0:84:
73:3a:53:c3:73:cc:08:6a:08:3c:91:f0:01:60:d9:d4:d3:e6:
fe:b2:9e:ed:78:f9:48:ef:14:af:b3:a8:47:6c:ca:ae:c9:da:
e9:2e:4b:f4:08:5f:fe:3e:2c:06:af:75:18:03:ab:dd:35:b9:
1a:80:3d:7c:c0:12:9b:ab:68:16:c3:74:24:01:53:86:4a:50:
a5:4a:ca:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:13 2023 by rpki-client on console-ams.rpki-client.org