Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HSvCdgxDg5Q9qVwuCQp4Uo2dtz8.roa
File: HSvCdgxDg5Q9qVwuCQp4Uo2dtz8.roa (raw, json)
Hash identifier: 7kN6PxijDUSiEboVLFGE4ISCZW79WxYfMrvN+dpOUFw=
Subject key identifier: 1D:2B:C2:76:0C:43:83:94:3D:A9:5C:2E:09:0A:78:52:8D:9D:B7:3F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 172F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HSvCdgxDg5Q9qVwuCQp4Uo2dtz8.roa
Signing time: Sun 07 Feb 2021 12:17:17 +0000
ROA not before: Sun 07 Feb 2021 12:17:17 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.8.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5935 (0x172f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:17:17 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1D2BC2760C4383943DA95C2E090A78528D9DB73F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:2d:d0:60:b5:72:57:ad:b8:f6:c9:5d:02:43:
b3:0b:b2:6e:7d:75:2d:cd:bc:4e:bb:39:cd:80:9a:
23:a2:5f:34:33:1d:5f:cf:bc:e9:51:a7:bd:c4:d1:
bb:9f:99:e4:26:5e:f4:0b:6d:39:da:80:74:f7:91:
c3:a2:36:44:0b:2f:1f:57:b7:4c:e1:dc:40:ff:f2:
a8:5b:32:53:4e:33:8a:21:13:c0:16:28:7a:0c:62:
7a:fe:fe:2f:96:fa:c4:b2:4c:b3:a3:00:ed:3b:8d:
7c:6c:94:69:04:be:29:a2:7a:2e:4b:2e:6d:f5:7b:
9f:e8:15:40:e8:13:14:84:67:52:85:d0:df:96:d1:
c9:0b:22:55:7c:bd:c0:b0:86:3d:65:15:a2:4f:8c:
42:03:4e:d4:33:a3:34:36:cf:1f:82:dd:4a:fe:84:
6c:8f:73:42:67:d0:86:79:d5:28:b6:d4:c4:56:d5:
b8:64:a1:d2:dd:ec:83:13:28:cd:c5:12:49:23:00:
fc:07:4d:68:66:cf:21:70:5e:d2:e4:fb:39:3c:70:
f1:e1:fd:68:46:ea:6e:12:2b:c9:df:6a:6b:63:d7:
71:0d:fb:13:3c:91:9d:15:da:19:f5:60:b6:78:bf:
9b:65:8c:dc:da:1d:6e:19:0b:4a:a9:67:5b:1b:90:
62:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:2B:C2:76:0C:43:83:94:3D:A9:5C:2E:09:0A:78:52:8D:9D:B7:3F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HSvCdgxDg5Q9qVwuCQp4Uo2dtz8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.8.0/22
Signature Algorithm: sha256WithRSAEncryption
05:e9:95:9f:66:74:d6:8d:ec:87:c7:f5:fa:2b:bb:ef:8a:72:
51:84:1a:93:bf:57:ec:f7:bb:86:4b:1d:69:7f:5b:a2:52:b6:
6e:87:e5:ee:bb:2f:e7:b9:39:05:d1:65:29:5b:a5:3e:05:e8:
95:2f:ba:e7:05:bc:97:6c:1f:ea:77:cb:a2:45:ba:e6:c8:de:
29:c6:7e:b0:0e:d7:b1:4b:9f:57:57:83:f5:c0:ec:bf:ee:77:
0b:66:97:00:2a:ad:9b:06:0e:9c:74:98:09:d5:ae:7d:cd:90:
97:eb:f2:aa:61:eb:0c:9b:e5:2a:52:a1:d3:57:62:d4:0c:35:
de:6e:bf:9c:39:7a:e8:bb:fc:83:a3:b6:ce:3f:99:c9:d6:51:
c7:ef:d0:2d:fa:e8:4d:05:8e:8e:82:fe:17:3e:d3:57:80:2c:
ab:4c:0f:da:1f:5b:d5:e8:ed:31:f7:a8:93:36:97:f5:22:6f:
ab:f6:64:07:9f:b0:e1:c3:5e:12:14:aa:a5:9d:b9:22:12:40:
b6:c9:ae:75:ec:c2:28:50:6a:ec:5d:37:bd:f8:6a:e2:fe:d6:
31:7e:0e:ae:d6:0c:ad:ab:29:de:6c:84:3e:eb:30:a5:2b:8f:
5e:ff:ac:40:21:fd:e2:54:ce:e5:15:6d:98:8c:60:cc:51:e8:
4e:e8:be:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:50 2024 by rpki-client on console-fra.rpki-client.org