Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ew1aYzqAZ8WVVYVfLcSZDNEpcl8.roa
File: Ew1aYzqAZ8WVVYVfLcSZDNEpcl8.roa (raw, json)
Hash identifier: +JH6uxQBkqECmk+Ill1D6AT+Szqr+1TK+BELg/Zntpo=
Subject key identifier: 13:0D:5A:63:3A:80:67:C5:95:55:85:5F:2D:C4:99:0C:D1:29:72:5F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1403
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ew1aYzqAZ8WVVYVfLcSZDNEpcl8.roa
Signing time: Sun 07 Feb 2021 11:57:06 +0000
ROA not before: Sun 07 Feb 2021 11:57:06 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.192.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5123 (0x1403)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:57:06 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=130D5A633A8067C59555855F2DC4990CD129725F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:46:bb:b0:08:0a:d3:f4:21:3f:7f:12:93:15:
ad:0f:95:3c:b6:dc:26:7b:c9:fe:dc:41:18:61:09:
67:cc:87:c3:4e:29:1a:2e:33:2b:1c:99:44:21:fa:
09:c5:4b:bc:7e:1e:19:f0:5e:bc:72:34:10:d1:d3:
82:a7:f1:0e:76:1b:24:eb:52:12:a4:ff:d0:38:8d:
8f:ce:56:8c:68:78:fb:32:9e:d9:7c:5c:52:1d:f8:
49:fc:96:0c:ff:5f:13:87:61:dc:a1:ca:5f:f8:da:
8a:af:18:ef:53:73:d6:6b:5d:83:ff:32:e6:cb:ad:
81:3a:ac:fc:f8:55:87:bc:c5:67:33:14:17:68:b4:
60:51:fe:6d:07:43:85:05:91:8a:af:13:9c:37:79:
60:49:a2:b2:da:d3:7a:d5:13:c4:98:ac:78:55:7b:
3f:09:d1:f9:bd:16:b0:8a:3a:b9:4a:ed:85:ef:0c:
13:20:44:b4:a1:cf:30:60:0f:5e:ba:63:96:51:d2:
6b:33:19:79:da:34:34:8a:de:26:76:e5:14:6d:a3:
c7:3d:a5:de:56:25:97:79:a2:34:79:4d:db:0b:15:
47:d7:93:a2:c0:9b:8f:f7:4a:0f:89:a3:5b:35:a5:
83:ed:4d:8b:a3:85:ea:1b:f9:c5:9e:08:85:49:47:
89:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:0D:5A:63:3A:80:67:C5:95:55:85:5F:2D:C4:99:0C:D1:29:72:5F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ew1aYzqAZ8WVVYVfLcSZDNEpcl8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.48.0/20
Signature Algorithm: sha256WithRSAEncryption
64:3f:2f:d7:f4:1b:f9:fe:52:c5:22:cb:e1:89:80:16:c1:29:
e1:2c:30:a4:aa:fe:d6:1d:72:2b:87:89:4c:18:bc:ac:9c:67:
fc:ff:4a:9c:71:ed:54:e5:96:b1:15:f9:3d:23:87:1e:e5:44:
81:c1:97:67:90:89:30:f1:07:4a:0b:f6:bf:15:b6:51:ef:9d:
a3:97:bb:1e:de:ab:22:96:2d:9a:4e:e7:17:6c:4c:c6:52:6c:
a7:26:26:48:49:c2:43:ee:a4:f0:9a:37:6d:d0:e3:48:81:2f:
20:25:76:23:25:47:f0:4f:48:f3:aa:a1:11:41:34:74:a1:ff:
9f:3e:26:c4:ba:d6:be:12:67:72:e2:3e:99:0a:46:8c:2e:c5:
63:49:aa:6f:4c:2f:f3:d4:8d:f5:76:57:66:40:0f:ff:4c:94:
b8:ba:5f:d6:11:8f:c3:14:98:36:f3:e4:cf:e5:50:71:e7:bd:
c0:f5:5b:f0:d8:dc:ed:aa:c3:86:99:3c:a5:3b:b8:80:b1:48:
cf:1b:fa:ed:92:f0:63:2b:43:b8:1f:25:da:b3:b7:70:01:6c:
3b:b0:fc:f2:fd:bb:a2:65:f6:0d:74:9a:51:2e:94:35:39:71:
37:ec:af:5d:bd:59:b5:35:44:e4:6c:80:3a:57:e0:26:2b:c2:
c3:fc:35:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-fra.rpki-client.org