Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JYECzDUtPFJl0rd7mpKQoI8Hqv0.roa
File: JYECzDUtPFJl0rd7mpKQoI8Hqv0.roa (raw, json)
Hash identifier: Vn50yextrYlCUMLHOhCBKnmCFgJj5jftP++OMjATT3g=
Subject key identifier: 25:81:02:CC:35:2D:3C:52:65:D2:B7:7B:9A:92:90:A0:8F:07:AA:FD
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1717
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JYECzDUtPFJl0rd7mpKQoI8Hqv0.roa
Signing time: Sun 07 Feb 2021 12:16:35 +0000
ROA not before: Sun 07 Feb 2021 12:16:35 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.192.228.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5911 (0x1717)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:16:35 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=258102CC352D3C5265D2B77B9A9290A08F07AAFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2b:38:9b:df:0e:1d:63:06:cf:24:67:03:1b:
6b:a7:e5:30:11:13:9c:8d:2e:96:b2:52:9f:32:3b:
2f:28:16:1e:cb:84:da:26:04:a9:ff:62:f1:c4:52:
ef:1c:8f:0c:07:88:76:ce:15:6b:35:48:1e:c1:38:
ad:8d:44:7f:34:50:ed:c6:48:95:fe:bc:f6:48:8a:
a4:be:9f:70:39:b9:89:eb:35:b4:d2:c2:c5:fa:30:
45:9e:e7:4d:e0:fb:1a:8e:75:b2:cd:b5:f5:65:e5:
44:1b:3c:ab:fa:46:03:f0:91:65:9c:5b:b9:fb:e8:
88:d5:2a:63:9c:92:fe:02:65:26:37:90:36:09:2e:
17:26:c5:8d:a6:87:a7:7b:bc:01:b9:cd:3b:27:7b:
e6:2b:45:b3:da:f9:92:ad:c5:30:05:e5:2e:b8:29:
c0:21:58:87:17:cf:08:8e:86:54:27:32:c3:d2:22:
24:b2:4b:16:50:d8:98:98:27:c6:4d:b5:4a:e4:fd:
21:45:fa:77:52:6e:44:6c:50:b7:37:39:6f:2c:c0:
22:68:a0:db:06:66:79:81:78:43:29:14:eb:f4:1d:
f3:9e:68:35:d3:89:5e:b2:46:0c:75:ee:76:1f:c5:
61:48:6c:81:fb:c6:40:05:fa:d9:a7:0b:47:a7:d4:
85:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:81:02:CC:35:2D:3C:52:65:D2:B7:7B:9A:92:90:A0:8F:07:AA:FD
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JYECzDUtPFJl0rd7mpKQoI8Hqv0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.228.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:9b:0f:25:75:3d:db:b4:61:e9:26:16:4b:12:07:1a:c7:46:
fd:e5:6f:bc:5b:4c:21:f9:e8:1b:10:87:61:9b:21:51:ab:21:
7c:3b:ac:45:b6:f7:1e:cf:dd:cb:d5:58:1f:56:55:2b:56:97:
ac:5c:35:a1:e0:da:52:06:df:c5:4f:1f:3d:8d:f9:95:a9:c3:
30:64:9e:b5:d3:24:0b:a7:33:de:50:5a:b3:e3:9d:cd:c5:e1:
35:a5:70:d6:42:13:73:3b:5b:04:d6:93:ee:5c:e3:c9:66:53:
c9:78:34:c6:28:4f:d1:30:4a:4a:52:23:c8:1f:7c:39:1b:d1:
6b:b1:4b:3f:bc:3a:fd:c1:8b:41:87:f5:64:d8:0d:18:d4:04:
81:c5:ba:5a:5c:58:87:87:2e:d0:4b:50:ca:82:8a:17:95:8c:
4a:e2:a9:d2:16:3d:97:bd:67:d6:ad:e0:ae:c2:3f:e5:5b:b0:
2a:66:59:d3:46:67:93:5b:f9:11:a2:fb:3f:9b:0b:52:3f:7a:
1d:88:a9:43:01:06:0e:9d:3a:17:be:65:48:a1:72:65:28:f9:
46:11:ca:11:9e:5d:ac:f4:ee:71:29:9c:ef:92:b8:63:cb:6a:
ee:57:a3:bf:67:2b:b7:86:b5:2e:9e:74:d5:c2:a1:a1:dc:d8:
ad:09:3d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:50 2024 by rpki-client on console-fra.rpki-client.org