Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IZGbP2ZFcst9A4tyZM-bNIJMhTc.roa
File: IZGbP2ZFcst9A4tyZM-bNIJMhTc.roa (raw, json)
Hash identifier: 6Wfmmh8RdHsyXMS5tfzkNriCDHMtZFevNDY6yWAG3j0=
Subject key identifier: 21:91:9B:3F:66:45:72:CB:7D:03:8B:72:64:CF:9B:34:82:4C:85:37
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 14AD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IZGbP2ZFcst9A4tyZM-bNIJMhTc.roa
Signing time: Sun 07 Feb 2021 11:59:36 +0000
ROA not before: Sun 07 Feb 2021 11:59:36 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.192.144.192/26 maxlen: 26
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5293 (0x14ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:59:36 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=21919B3F664572CB7D038B7264CF9B34824C8537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8b:79:bd:12:d5:f7:f5:7d:df:e9:e6:bb:9f:
cc:dd:8e:91:f9:29:04:1e:f8:2d:d6:16:c2:c5:f5:
4f:91:c0:b3:47:23:cb:ec:af:f6:4e:0f:f7:0f:0f:
ee:65:71:26:8b:59:01:b8:60:1d:2c:1c:b8:c4:fe:
f2:74:e3:be:72:2b:ca:20:ed:f2:b7:5f:56:4b:ab:
92:8b:c0:8f:84:19:23:89:75:7f:87:c4:5c:28:91:
cc:07:37:3e:39:9a:c9:64:92:bc:63:08:da:91:b4:
cb:1d:a3:0e:c7:e2:d0:c9:29:37:8f:94:09:e8:7a:
4a:20:68:de:b3:7e:ad:ab:3f:32:1c:4f:f8:b1:8b:
8e:06:99:c5:ca:42:43:66:d1:96:8e:15:9e:a3:6f:
4a:02:bd:d6:96:75:d9:fa:a5:09:f5:8e:5a:56:73:
52:ca:9e:88:c4:f2:5d:6b:97:bd:42:86:54:b4:c5:
ba:42:87:7a:ab:f8:fa:61:de:8c:ab:d4:8e:b7:ef:
d0:31:55:20:90:a5:aa:15:b2:4c:41:f9:83:23:50:
bc:f8:6c:b1:af:37:67:b9:86:25:f4:a9:b9:c8:85:
15:b6:13:ca:c2:fe:84:a4:48:1a:63:f7:56:03:02:
e9:74:a9:23:01:21:b2:85:7d:54:0d:84:4f:7e:41:
29:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:91:9B:3F:66:45:72:CB:7D:03:8B:72:64:CF:9B:34:82:4C:85:37
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IZGbP2ZFcst9A4tyZM-bNIJMhTc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.144.192/26
Signature Algorithm: sha256WithRSAEncryption
5b:33:b9:c8:13:28:09:c5:30:d3:af:49:59:79:de:a8:ed:02:
97:d7:54:7e:29:85:66:5e:1e:e3:b6:28:bf:75:88:34:2c:38:
5a:2c:d6:3c:8f:a7:b9:7f:61:97:81:4c:fd:5e:2c:bc:5b:5f:
b3:51:fc:88:15:db:22:e3:91:72:f1:d1:9f:b7:d8:e7:80:69:
46:b2:90:68:5c:b6:50:dd:36:05:8e:68:ac:6e:cb:ca:a1:03:
d2:8e:64:db:5a:18:89:d4:5b:09:af:a9:2a:d4:be:18:a9:47:
d4:c2:06:58:6e:e4:a0:36:55:86:43:7d:a8:1e:7f:09:c2:70:
e9:82:ea:0c:20:2e:1a:a0:98:bf:d7:f9:1c:d7:2d:34:9c:01:
83:ba:2d:a4:6e:65:c1:93:3d:3c:c7:be:1b:da:c5:eb:fe:d4:
c8:4f:7a:53:00:60:33:67:ff:40:48:a6:62:c6:47:73:11:e1:
db:88:c9:62:99:db:37:4e:7f:d7:07:3f:41:f4:70:d1:b0:9f:
d6:bb:a6:87:39:0c:19:31:c6:2f:f0:5b:93:2f:01:85:93:d5:
d5:02:e3:08:f9:6f:81:b9:6e:51:6a:5f:ae:dc:e4:d5:cb:18:
ba:82:a2:4a:bc:b1:e0:83:3e:5a:99:7b:9f:ef:0b:96:95:c0:
e8:81:e6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:27 2024 by rpki-client on console-ams.rpki-client.org