Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/I11sLi2nbukC08UVQrktJovA_Ks.roa
File: I11sLi2nbukC08UVQrktJovA_Ks.roa (raw, json)
Hash identifier: k5lXSvYsLFk48AU6vLrb1aM4nbZRHvPm0+K+ux3gx/8=
Subject key identifier: 23:5D:6C:2E:2D:A7:6E:E9:02:D3:C5:15:42:B9:2D:26:8B:C0:FC:AB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1D3F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/I11sLi2nbukC08UVQrktJovA_Ks.roa
Signing time: Wed 29 Sep 2021 02:48:47 +0000
ROA not before: Wed 29 Sep 2021 02:48:47 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 123.195.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7487 (0x1d3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:47 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=235D6C2E2DA76EE902D3C51542B92D268BC0FCAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f1:81:f4:e2:5c:9b:0d:8e:35:f1:8e:70:3a:
11:20:04:5e:f2:c8:4e:7b:f7:20:f9:b3:88:6f:1b:
31:f6:6c:3d:08:cf:b8:ae:09:06:45:cf:68:8d:a7:
fc:71:d9:b1:11:e5:9c:02:4b:89:80:e8:b9:17:92:
27:c6:df:5e:35:77:a2:ea:e2:0a:ad:13:1d:e6:00:
a8:94:fb:e4:50:84:ea:db:51:da:c6:10:66:54:11:
02:06:97:c9:a7:2d:4b:26:b7:cb:18:66:7d:68:1b:
9d:4d:59:78:32:6d:3a:69:86:d7:e6:4b:31:40:31:
38:7d:c4:90:63:6b:59:2d:8d:ce:21:7e:12:2e:0f:
05:fe:a9:77:66:09:0c:21:5e:87:37:d7:bd:b6:cc:
c1:d9:c0:f9:e1:f7:52:58:b3:ec:91:a7:25:88:e9:
d5:46:93:e2:8f:74:2f:9c:27:3c:ec:63:2c:ab:c2:
d4:16:ae:c5:e5:d9:02:4b:3f:27:d6:71:8b:5a:4f:
e4:7c:23:19:aa:27:e0:d0:17:e4:9e:88:44:fc:02:
e9:44:1f:94:8d:69:8b:4a:58:d8:e8:c8:3f:fb:72:
a5:61:2c:d7:f8:1d:00:3e:18:5f:31:aa:c6:50:7a:
99:34:44:23:57:ad:3e:d1:6f:7d:b7:e7:2a:36:d3:
a0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5D:6C:2E:2D:A7:6E:E9:02:D3:C5:15:42:B9:2D:26:8B:C0:FC:AB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/I11sLi2nbukC08UVQrktJovA_Ks.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1a:e6:42:d4:fc:65:6d:5f:5c:16:fa:5d:77:8c:a3:69:3a:9a:
63:48:4e:ed:d4:1c:78:c1:f3:37:0c:e4:6b:46:3b:69:0b:00:
22:a3:75:1e:3d:14:30:0a:5f:3e:2d:c2:c1:a9:dd:24:5f:cf:
8c:60:3d:2d:42:ba:73:b9:5d:05:06:a3:be:29:39:79:8d:2c:
98:b7:99:1a:08:9c:8a:fa:b3:bd:c4:74:3a:db:f3:b0:c6:1d:
83:2b:68:d2:d7:0c:9a:51:62:2f:94:1e:a1:6d:6b:94:0c:fc:
a5:b1:79:51:46:4c:31:15:fa:e3:00:1b:7e:1b:bc:a6:8b:8b:
52:f2:90:a4:20:2b:2e:da:82:2d:6d:6f:dc:c6:7e:b1:dc:a1:
46:22:1c:b1:c5:4f:60:a0:3b:09:c2:9f:5d:2e:18:bf:5d:e3:
e7:eb:64:2e:d3:a2:72:49:c3:12:44:06:74:b0:9a:49:5f:fe:
5d:64:db:26:41:4e:08:88:09:62:1f:18:b3:bc:bb:b8:ea:18:
07:45:ac:a4:b6:de:f8:43:d6:66:61:c8:55:43:41:36:40:98:
81:13:c9:84:4c:c1:d8:d1:28:7a:4e:0e:e8:48:7a:b4:c1:a8:
33:e9:47:75:3b:a4:a0:1a:9b:c2:94:6a:b0:4f:7f:50:93:88:
5c:dd:2c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:27 2024 by rpki-client on console-ams.rpki-client.org