Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ISiFRmxgWXEBZM3fE7D8187INCs.roa
File: ISiFRmxgWXEBZM3fE7D8187INCs.roa (raw, json)
Hash identifier: kKQCz+SKHUz7S7iqR/L+qPn40CPDZFcPdiWRZ6gaLao=
Subject key identifier: 21:28:85:46:6C:60:59:71:01:64:CD:DF:13:B0:FC:D7:CE:C8:34:2B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 147F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ISiFRmxgWXEBZM3fE7D8187INCs.roa
Signing time: Sun 07 Feb 2021 11:58:53 +0000
ROA not before: Sun 07 Feb 2021 11:58:53 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.184.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5247 (0x147f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:58:53 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=212885466C6059710164CDDF13B0FCD7CEC8342B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:16:fd:65:f4:e8:b5:75:6b:35:3c:1d:2f:7c:
1d:72:d6:67:38:e6:9f:24:68:b1:4c:04:a3:4a:e4:
83:65:39:aa:21:93:e6:fd:57:7b:b0:3b:57:d0:ac:
29:16:21:0e:4f:e2:23:bc:95:18:3a:d0:03:8f:87:
50:4e:d8:7a:c5:50:8c:3d:ba:40:23:8f:91:f8:28:
cc:9a:ae:82:39:ec:16:97:ba:de:0c:79:6f:26:76:
a9:0b:18:4e:fa:17:99:c0:80:06:fc:ed:8c:91:4b:
78:42:5c:42:60:be:6e:2f:36:10:a9:10:b5:fe:9f:
34:9d:6b:7f:c8:07:50:c7:1e:db:0f:79:58:80:36:
d9:e1:5f:81:c3:67:35:89:8f:e9:d3:99:3f:ec:69:
10:72:18:15:a7:c8:fa:d8:9b:d7:93:67:e9:5f:76:
27:2f:09:31:17:b0:cd:94:dd:bb:97:90:45:42:47:
1a:82:a2:96:ad:94:b3:ff:eb:e8:ca:3f:d1:7d:02:
28:60:14:43:0d:f3:b7:d7:7e:0a:c0:0a:d3:64:47:
30:32:68:ed:7c:83:7e:a7:ee:4b:c8:9c:ea:18:aa:
4f:a8:b9:34:ae:06:5b:cd:d3:73:c5:69:6a:a3:73:
f7:22:d8:e6:9b:98:f4:83:f6:56:1e:fd:48:d7:a6:
77:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:28:85:46:6C:60:59:71:01:64:CD:DF:13:B0:FC:D7:CE:C8:34:2B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ISiFRmxgWXEBZM3fE7D8187INCs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.184.0/21
Signature Algorithm: sha256WithRSAEncryption
0c:2c:c7:36:07:c7:da:a5:95:3d:e6:03:30:49:2b:7a:37:7f:
3e:56:4b:c0:04:70:fd:d5:37:da:55:b9:19:63:e7:b3:cb:f0:
91:fe:5c:22:42:6c:d1:8d:a1:a6:81:f2:bc:ba:51:ba:82:12:
63:a3:61:c8:43:6b:4b:1c:63:9e:21:3d:73:d1:3d:d3:b2:07:
34:3b:1f:5f:8f:55:70:b4:c5:7c:f5:66:18:84:1c:e5:ac:e8:
84:53:33:13:57:e8:9f:bb:e6:86:2e:eb:18:ca:57:ba:db:9b:
c3:c2:7f:90:a1:61:ce:2b:85:7b:42:a7:fb:34:8b:cc:4e:08:
f2:a6:23:43:63:a1:17:a6:0e:bd:5a:94:89:f6:2a:89:12:e3:
fb:f0:95:ee:b3:3e:b1:42:77:f5:7c:2d:5f:33:d8:93:ea:a7:
7e:bb:4c:5e:86:69:7c:aa:20:f4:03:49:5c:df:de:62:19:87:
5e:8c:47:43:92:5b:23:2e:0a:58:d7:c3:a3:8f:70:93:a6:ed:
2e:2a:88:4a:26:1a:97:84:4a:fe:08:34:99:bc:b5:bf:60:54:
c6:47:68:2c:37:77:c0:dd:0d:7d:d6:56:c0:51:c6:80:b3:34:
03:da:3c:83:fd:6b:df:fa:c1:e6:ed:63:ab:9d:4e:55:38:ba:
51:33:4e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:27 2024 by rpki-client on console-ams.rpki-client.org