Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/I9m00feY1kwdbASnE-AhbSYAvUk.roa
File: I9m00feY1kwdbASnE-AhbSYAvUk.roa (raw, json)
Hash identifier: m+V9RrFHeukhZH8jyeEZidixbVSV78QGrOdPZ5Nwrb0=
Subject key identifier: 23:D9:B4:D1:F7:98:D6:4C:1D:6C:04:A7:13:E0:21:6D:26:00:BD:49
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1C34
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/I9m00feY1kwdbASnE-AhbSYAvUk.roa
Signing time: Wed 29 Sep 2021 02:47:28 +0000
ROA not before: Wed 29 Sep 2021 02:47:28 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.193.144.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7220 (0x1c34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:28 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=23D9B4D1F798D64C1D6C04A713E0216D2600BD49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:07:e8:86:14:8c:aa:a3:59:fe:d5:ac:c4:b6:
52:79:e4:92:23:e8:66:c2:47:cd:15:29:12:fa:3a:
17:2b:bd:c5:72:8a:c3:85:d5:4c:a4:70:f4:e1:0b:
78:61:cf:ef:b2:ba:78:59:3f:a2:64:01:32:41:2d:
8f:50:f6:90:98:c9:c6:f9:62:44:ae:a7:94:bf:dc:
29:7d:a1:4b:23:b7:9b:9d:6e:cc:5c:a1:f4:df:81:
78:25:51:9a:03:7a:1b:5d:8d:c3:86:db:cc:5e:cd:
0c:77:64:82:1d:c4:b5:31:7d:a8:7f:16:f5:a2:0e:
cc:d6:9e:a4:7c:38:41:dc:b5:19:5c:3f:47:a5:64:
f5:b0:2e:aa:f2:94:d6:86:54:1d:38:f9:e5:91:b9:
0a:bf:ea:54:9e:f9:83:14:04:27:0e:b6:41:04:b1:
e3:a4:f6:cc:63:7d:e9:66:53:f7:b4:08:aa:f5:62:
ca:25:d6:d9:a2:78:06:ab:72:db:88:11:e3:8a:5b:
fb:cb:61:24:22:30:8e:ea:6b:55:b6:53:7d:fb:3c:
23:15:aa:d8:bb:e4:67:20:ba:3e:b8:39:2e:be:4a:
92:5d:c9:e8:03:76:4d:52:c5:be:3b:5d:44:ec:43:
29:68:a3:eb:6e:bf:72:b0:56:79:0b:be:05:82:b6:
e2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D9:B4:D1:F7:98:D6:4C:1D:6C:04:A7:13:E0:21:6D:26:00:BD:49
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/I9m00feY1kwdbASnE-AhbSYAvUk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.144.0/21
Signature Algorithm: sha256WithRSAEncryption
9f:05:50:d6:1f:b3:7f:56:3d:9a:b5:ce:ff:bd:06:6c:7c:c2:
3e:2c:ca:61:11:96:ec:b2:03:cc:cf:c3:c8:ac:7f:be:01:18:
d5:85:e5:ce:3d:34:87:40:c9:dc:d1:7d:19:3d:99:94:4e:81:
c2:79:45:35:3f:c5:2a:5f:df:34:3a:eb:07:de:9a:91:29:96:
17:c4:74:90:96:c9:03:7e:23:e6:36:c0:f4:91:e5:d1:c0:cc:
0c:c7:57:b2:92:15:bb:ce:97:c5:43:50:c6:38:07:27:ac:3f:
a1:04:1c:c0:ff:8b:57:cf:6d:66:1b:3e:1e:4d:43:0e:f9:b2:
bf:17:36:dd:68:52:77:2d:95:8d:ec:d0:91:de:4f:7e:6b:14:
d8:ed:db:72:fe:7a:10:db:dc:f2:64:f2:8d:25:fd:a3:d3:e5:
f1:de:9c:db:db:c6:09:6d:df:50:49:c7:fd:d9:40:1e:34:7d:
2c:f3:11:f0:c3:ab:f2:a2:dd:96:f7:14:a0:62:87:64:fb:19:
b6:ad:a0:b8:63:18:fd:da:81:ca:a7:4f:97:37:af:6b:7f:b8:
05:70:f1:34:47:ee:c7:25:c7:65:f4:c5:0f:bf:d3:38:c8:c8:
af:8f:91:29:22:ac:61:e0:82:61:b1:40:68:19:d7:16:25:fa:
97:a4:80:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:27 2024 by rpki-client on console-ams.rpki-client.org