Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CV8DNBzaeZYGZDF5YTqmZrEErms.roa
File: CV8DNBzaeZYGZDF5YTqmZrEErms.roa (raw, json)
Hash identifier: C1zcE7v+sAzhKehsJHLKP08UeieZy7jcFPWx+riIrJ4=
Subject key identifier: 09:5F:03:34:1C:DA:79:96:06:64:31:79:61:3A:A6:66:B1:04:AE:6B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0DB0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CV8DNBzaeZYGZDF5YTqmZrEErms.roa
Signing time: Tue 29 Sep 2020 09:54:51 +0000
ROA not before: Tue 29 Sep 2020 09:54:51 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.0.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3504 (0xdb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:51 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=095F03341CDA799606643179613AA666B104AE6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:76:0b:79:4e:ba:31:90:cf:5a:c7:30:80:e5:
d5:16:36:aa:8a:27:66:69:46:40:99:fe:4c:4e:6a:
ca:87:f1:b2:1a:8b:55:9d:9a:b0:d8:5a:a9:f1:49:
5a:7e:db:1d:7a:7a:40:6b:10:96:eb:a2:73:35:c4:
74:1a:82:f3:15:50:95:f5:ad:61:a8:7b:37:70:3b:
8c:76:4c:5f:6c:48:7a:96:67:ca:b1:b5:95:17:65:
c3:91:84:7d:e3:41:73:18:ea:a6:5c:6b:dd:a4:94:
30:ee:4f:85:d2:ac:42:31:64:c0:b0:cc:48:c7:9c:
81:37:36:d8:51:e0:3a:94:39:21:25:03:6d:79:09:
69:0f:1e:d9:8a:42:ad:68:71:c2:2e:7d:30:fd:bc:
4b:8c:6c:d6:c0:ce:c4:b5:20:c4:43:4b:76:75:95:
5d:87:a9:4f:63:92:71:a3:c2:a0:89:0e:a6:09:7a:
13:d4:25:49:5c:5e:51:21:42:6d:25:58:a1:5e:09:
a6:3a:47:85:f9:38:5d:2f:73:17:12:9c:66:a6:ea:
b0:0a:b5:a3:f0:e5:1c:1f:49:bb:d8:60:2c:87:99:
32:02:15:5e:10:13:b1:d6:93:d7:bf:ab:11:5d:87:
48:c6:76:c5:de:9e:4d:41:77:64:97:aa:bd:76:74:
a1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:5F:03:34:1C:DA:79:96:06:64:31:79:61:3A:A6:66:B1:04:AE:6B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CV8DNBzaeZYGZDF5YTqmZrEErms.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.0.0/21
Signature Algorithm: sha256WithRSAEncryption
21:44:82:50:48:38:85:20:7e:53:ea:6c:4e:d2:b3:9f:cc:38:
68:2e:86:a2:44:e0:22:33:8f:2a:08:e2:f8:60:11:72:78:2e:
74:9c:89:b2:4f:b8:aa:84:9a:47:df:1c:69:21:fe:61:18:0b:
0c:48:6d:fc:6e:bc:07:34:69:74:d9:25:d7:31:48:d0:90:83:
18:78:a5:00:a5:b4:6b:35:45:fd:c4:78:94:6a:2d:f9:f4:5b:
f3:13:85:6d:8b:27:58:0f:53:0d:82:e8:6a:33:97:20:e5:cf:
39:5d:fc:37:a4:89:49:70:15:bc:c2:53:bd:18:75:b5:41:ea:
bc:9a:90:99:11:9f:b8:73:d5:99:67:29:ca:0e:b1:7e:9c:08:
7d:78:22:1e:28:41:85:90:ef:ec:97:6b:2a:6b:d3:00:5f:90:
10:cb:11:f8:5e:bb:2a:5f:f6:25:96:d8:84:f0:2b:6f:4f:07:
ce:92:87:20:b3:98:a3:d7:ca:bf:e3:dd:00:8e:c6:bc:ce:24:
cf:0f:36:02:88:00:ed:e1:f6:31:3c:a9:64:d0:b6:86:35:96:
ce:76:8c:e9:70:50:cd:22:44:ec:e0:ca:91:65:a3:cd:11:22:
bb:70:5c:6a:35:c8:3c:5a:0a:8d:51:f6:49:d0:65:21:c5:c6:
8b:1d:5f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:13 2023 by rpki-client on console-ams.rpki-client.org