Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Frzto0DD4g3GB7jooWz917u-nME.roa
File: Frzto0DD4g3GB7jooWz917u-nME.roa (raw, json)
Hash identifier: 4vROD2dyr3kxfowtQTbaCc+Hx/QjYXp4xGmFIvOgDCQ=
Subject key identifier: 16:BC:ED:A3:40:C3:E2:0D:C6:07:B8:E8:A1:6C:FD:D7:BB:BE:9C:C1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 13E7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Frzto0DD4g3GB7jooWz917u-nME.roa
Signing time: Sun 07 Feb 2021 11:56:36 +0000
ROA not before: Sun 07 Feb 2021 11:56:36 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.192.112.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5095 (0x13e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:56:36 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=16BCEDA340C3E20DC607B8E8A16CFDD7BBBE9CC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e1:26:1d:94:23:15:e7:98:4f:ab:fb:97:e3:
2d:ff:13:c2:28:71:c0:9a:67:ee:a8:8d:a8:72:69:
0e:8c:21:db:e8:30:32:bd:b8:ba:27:fa:ae:57:93:
b0:f0:c7:8c:41:31:49:e9:6d:5b:9d:36:dd:b9:fd:
27:e2:28:96:43:3c:4a:2e:3d:90:6d:32:63:a0:0e:
f6:54:1e:5f:9f:06:b1:7d:85:04:25:23:f3:dc:6c:
15:3c:f0:fd:72:ce:28:61:94:67:8b:7e:5a:9c:74:
9a:70:b9:9b:2d:1d:11:c0:e4:24:54:67:9a:77:15:
61:81:4d:14:17:92:e8:e3:45:bc:1e:11:56:5c:f1:
ba:da:db:53:ff:3f:a3:11:1a:b5:21:ba:a2:47:0b:
7a:9b:ee:b6:7a:a6:bc:73:6d:c4:80:a2:60:5b:aa:
e7:33:d9:a2:4a:47:29:82:68:77:50:1c:47:20:5c:
ff:16:f1:64:2f:ab:68:3e:44:6b:5f:10:ef:87:f0:
3d:ff:63:77:0a:1c:d8:83:83:1d:ac:f2:4f:99:96:
16:e8:ea:74:5d:e6:2b:3b:57:3d:04:d5:aa:e2:78:
0e:c6:05:a2:91:be:5a:3f:d2:6c:94:66:97:34:f5:
36:0c:0e:f9:28:6a:6f:1f:61:90:96:c4:c5:9d:9e:
b6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BC:ED:A3:40:C3:E2:0D:C6:07:B8:E8:A1:6C:FD:D7:BB:BE:9C:C1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Frzto0DD4g3GB7jooWz917u-nME.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.112.0/21
Signature Algorithm: sha256WithRSAEncryption
22:5c:fa:4c:73:a5:7d:64:30:61:fb:0f:fe:71:1d:a3:cf:d5:
ee:6c:a2:ce:cb:87:1f:aa:3a:57:c6:25:10:a5:a6:f1:34:2d:
59:74:d7:d5:63:14:c4:21:c6:e5:a8:b6:27:13:17:7f:b1:37:
41:df:c2:54:c3:fa:e5:7e:24:a0:9d:20:8a:fc:a4:a5:af:a3:
62:05:c6:15:7e:12:95:07:ad:e0:3c:ba:b5:66:e8:e5:7c:17:
e4:d6:03:06:4a:9c:a7:b1:3a:fe:db:23:fc:d6:ac:79:88:dd:
9d:a4:60:48:08:d4:9f:df:e7:10:95:7d:8c:67:5f:ae:ed:39:
d7:bb:32:75:78:f2:58:35:de:e4:fe:16:ca:e8:ca:04:a6:49:
e1:66:d7:5f:b8:56:b2:df:21:03:3e:22:83:44:b1:1f:bb:c5:
bc:d8:62:2e:e3:73:23:6a:7f:f8:40:c9:95:8c:57:b4:f9:5e:
68:e3:a3:6d:bd:77:bc:36:31:e1:aa:7f:a9:73:10:48:83:6e:
47:63:42:a0:7b:fa:4a:62:ee:c5:a1:5a:17:bf:4c:a3:9e:3e:
29:2d:59:f7:b5:75:dc:0d:5d:7d:4a:bc:e3:3b:ca:19:ea:a6:
98:8e:a8:45:70:24:76:86:35:28:36:15:11:2d:4a:6f:d5:0a:
bc:37:c2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:27 2024 by rpki-client on console-ams.rpki-client.org