Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HHDe9rMzkSIcUmuYa73meP9jlLE.roa
File: HHDe9rMzkSIcUmuYa73meP9jlLE.roa (raw, json)
Hash identifier: KMoycGNRIom6+7aoTNsd37rL5WyOv9EDQIuEr4w9HbI=
Subject key identifier: 1C:70:DE:F6:B3:33:91:22:1C:52:6B:98:6B:BD:E6:78:FF:63:94:B1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 18F5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HHDe9rMzkSIcUmuYa73meP9jlLE.roa
Signing time: Sun 07 Feb 2021 12:55:34 +0000
ROA not before: Sun 07 Feb 2021 12:55:34 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 123.195.32.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6389 (0x18f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:55:34 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1C70DEF6B33391221C526B986BBDE678FF6394B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3e:23:ab:77:dc:4d:51:c9:f1:96:f1:e8:86:
3d:25:73:b2:f0:9a:7a:bd:ee:ea:e5:6d:37:10:e4:
3b:79:40:96:48:4a:42:99:ad:8c:1b:75:74:1d:c1:
25:78:c2:38:07:2e:6e:d7:a1:1c:c7:28:99:4d:6d:
50:73:cb:17:e5:3b:30:7e:64:3c:54:af:99:61:49:
c5:c3:57:55:48:fd:80:1c:50:58:d6:14:af:e8:7a:
15:2a:cd:73:2c:21:68:8c:d8:1c:72:7c:fb:75:68:
68:1a:57:d2:8a:44:f7:29:5d:02:57:e0:97:4f:3b:
ae:f9:4b:b7:be:51:d6:46:11:ad:22:09:1a:6b:fd:
05:3e:4d:f6:d5:5d:63:e6:01:ba:4b:db:82:73:4a:
de:e6:ff:5f:e1:85:64:82:6b:5c:d0:c4:cf:a6:e0:
2f:06:a7:87:d0:52:d4:aa:55:21:a0:42:6e:74:8f:
90:65:02:28:0b:7c:e8:27:11:d2:1a:1b:77:0f:f5:
1a:65:a7:51:3a:29:67:83:25:bf:24:87:56:15:bd:
fc:72:2e:92:03:85:f7:8f:f7:f5:f9:00:6e:52:54:
d4:da:23:87:7d:e3:10:1e:89:a1:74:9f:bc:bc:2c:
e0:31:7d:78:67:42:7b:b2:1e:cc:52:b4:56:5c:dc:
72:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:70:DE:F6:B3:33:91:22:1C:52:6B:98:6B:BD:E6:78:FF:63:94:B1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HHDe9rMzkSIcUmuYa73meP9jlLE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.32.0/19
Signature Algorithm: sha256WithRSAEncryption
ad:9b:1c:2e:53:8f:71:b5:06:2c:f0:f1:76:e1:a8:80:0a:34:
54:e6:58:9a:4e:1d:e9:c1:81:99:e9:6d:cc:ee:3a:bf:d5:25:
b2:42:0e:61:12:d3:57:41:93:33:f7:d8:9a:f9:7b:e8:41:af:
a5:e2:b5:de:ff:f8:21:0a:9f:5b:13:e8:79:ea:f7:ce:10:63:
20:d7:7c:74:9d:13:a6:30:12:3f:74:15:b2:db:4b:44:d1:e7:
5a:46:28:6b:49:20:09:79:96:00:82:10:9e:bb:88:bb:e5:6c:
c7:3b:1b:28:ae:12:bc:09:51:f4:f9:7a:57:be:b5:da:b9:1a:
8e:49:0f:8c:3a:74:31:5c:f3:24:9a:6f:35:d0:6b:cc:1f:24:
f0:ab:98:e6:e5:97:c2:23:7d:ef:68:13:19:c6:f6:9c:2c:38:
4d:50:c8:41:ca:a0:31:bc:ab:2b:38:1d:a7:2c:1f:bb:3e:8e:
05:eb:a3:1e:43:a8:59:dd:a0:8c:f3:be:14:58:40:1b:fa:fb:
ba:31:e3:fe:53:fc:c7:8b:49:de:38:ab:c5:f1:46:23:0c:12:
3b:0a:88:c9:31:7a:58:aa:05:c9:d3:cc:c9:7a:97:07:0c:13:
fb:6c:11:53:fc:20:f4:41:dc:55:cd:9b:0a:61:ea:cf:7e:fe:
42:f2:3f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:27 2024 by rpki-client on console-ams.rpki-client.org