Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DtqDxn5QVyhygFQ-DGxAw5TkgqQ.roa
File: DtqDxn5QVyhygFQ-DGxAw5TkgqQ.roa (raw, json)
Hash identifier: hP9uzdidOpmjmZ5GDbqnWiIybmzRiyN3LRXdT8p55Es=
Subject key identifier: 0E:DA:83:C6:7E:50:57:28:72:80:54:3E:0C:6C:40:C3:94:E4:82:A4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1AE7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DtqDxn5QVyhygFQ-DGxAw5TkgqQ.roa
Signing time: Wed 29 Sep 2021 02:45:53 +0000
ROA not before: Wed 29 Sep 2021 02:45:53 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.195.236.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6887 (0x1ae7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:45:53 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=0EDA83C67E5057287280543E0C6C40C394E482A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f9:27:ed:a8:c7:b9:26:7f:ce:da:48:5f:f2:
4e:c4:4d:2d:25:05:3f:3c:13:2a:ec:a0:85:d6:47:
94:86:fd:46:0e:c4:78:75:a7:d4:21:0e:d2:fc:99:
22:b4:8b:69:3d:df:d5:e2:22:39:ba:95:6b:cb:8d:
f3:99:b7:24:f6:43:f0:ba:1f:8b:35:b8:20:b0:2d:
88:e2:66:28:00:5e:a7:dc:69:f0:ba:64:72:44:45:
4f:2c:a2:9e:9a:02:98:4d:e1:e4:b5:09:64:7c:0f:
52:d7:dc:e7:8a:10:66:cb:74:89:94:3b:d7:9a:1c:
43:5c:a3:9c:2f:22:70:76:f7:e4:1a:54:e6:15:79:
09:cd:ac:c3:f5:be:bb:b6:60:4c:3b:b3:ff:76:a5:
b3:87:98:69:b1:71:d4:9c:d3:f4:83:f8:57:12:bb:
4b:af:6c:9f:55:68:55:b0:97:0c:61:cf:33:b9:0f:
41:42:44:07:ed:c0:36:f3:03:bf:a3:6d:0e:46:1f:
d4:dd:dd:b7:53:37:8f:ae:f9:e0:fd:90:e3:f3:2a:
69:9c:cc:e5:7c:c0:63:df:98:4f:a2:bc:8e:08:3a:
ca:55:93:f9:ec:d1:14:36:48:1d:a6:a4:ad:3a:f8:
ec:f2:7b:99:9d:5b:8c:b9:10:a0:59:d3:cb:81:bc:
db:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DA:83:C6:7E:50:57:28:72:80:54:3E:0C:6C:40:C3:94:E4:82:A4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DtqDxn5QVyhygFQ-DGxAw5TkgqQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.236.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:3b:fe:b9:b3:24:80:ce:dd:55:b2:a5:a4:b7:fb:1d:4b:0b:
a8:44:37:5e:44:78:af:47:1e:b9:d3:40:ea:8d:00:c0:b8:17:
19:1f:ee:33:2f:69:f1:e6:c1:d2:dd:1e:86:88:4d:90:cd:80:
bd:29:28:38:68:5c:70:00:47:44:60:79:33:d0:86:0d:25:6b:
3d:14:a1:f0:b6:53:20:01:57:35:8b:d0:0c:59:bf:ec:fe:35:
f1:26:9f:fc:0a:f1:6f:f4:51:34:e8:79:cc:48:1b:f1:a9:6f:
5e:a1:10:f9:4f:b6:16:df:70:db:43:50:9e:53:0e:76:d7:fd:
4c:1c:65:0c:90:ad:c1:64:81:1e:ca:32:3a:ac:c8:42:11:fb:
a7:3c:48:42:fd:9c:89:66:fb:31:d4:4a:e7:bf:86:19:a7:a4:
8f:da:4f:6f:9b:f0:8e:28:f3:80:ef:d2:b3:a2:a9:75:f5:9c:
ad:54:e0:96:f1:a1:76:83:58:3c:a8:97:c6:db:b6:b0:54:a6:
ad:ce:bc:63:28:19:23:1e:57:a2:2d:84:ee:86:59:94:80:14:
73:0d:d8:bd:ab:36:83:06:0e:e0:ec:53:74:65:04:59:16:7e:
00:31:44:79:d6:62:97:c1:8d:27:75:30:e0:a0:57:a2:65:6d:
18:f1:70:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-fra.rpki-client.org