Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JgVQNayITRFy_lyruD49_QauncU.roa
File: JgVQNayITRFy_lyruD49_QauncU.roa (raw, json)
Hash identifier: +tdVx9mF6a8e5YepTkUZgGtdtx79CYiVibrHYrcpU/A=
Subject key identifier: 26:05:50:35:AC:88:4D:11:72:FE:5C:AB:B8:3E:3D:FD:06:AE:9D:C5
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 18C9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JgVQNayITRFy_lyruD49_QauncU.roa
Signing time: Sun 07 Feb 2021 12:53:43 +0000
ROA not before: Sun 07 Feb 2021 12:53:43 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 123.193.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6345 (0x18c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:53:43 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=26055035AC884D1172FE5CABB83E3DFD06AE9DC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0e:49:4f:0e:02:ce:f4:98:3f:0c:e0:60:7e:
97:16:ff:25:15:ab:40:36:a9:0e:a3:86:b1:98:4f:
65:fb:1f:79:6c:a0:8d:8f:3b:8c:7e:b8:b7:1f:f7:
14:92:b6:a7:d4:42:8f:89:03:3e:88:18:d3:5b:1a:
6e:78:0c:a6:7b:11:b1:71:ff:3b:ff:30:9d:ae:a5:
52:16:0a:6c:f3:a2:63:43:ed:e9:bb:e2:05:4a:36:
c0:8a:ad:39:c9:9f:00:ce:a5:c7:03:07:b6:df:44:
6a:c8:b2:35:dd:f2:dd:2f:92:27:28:45:a2:6b:53:
9f:18:a7:4b:39:d7:be:a9:f7:a7:4c:db:50:0d:94:
09:01:36:fa:fd:a4:c2:75:3c:ff:5e:36:7a:1b:12:
f3:46:eb:b5:76:92:09:62:4b:ca:59:7d:c3:48:0e:
63:70:8d:6c:8e:c2:b1:86:57:90:0a:18:86:68:21:
3a:55:22:a5:44:4c:2a:4a:c9:09:5e:30:83:cc:d8:
2c:0a:d2:26:4f:b1:c5:ab:a7:99:b3:4d:15:28:e3:
22:ac:a7:1e:9b:54:1c:7d:45:d6:e3:a6:e8:4b:52:
4b:37:66:d9:60:54:d6:fd:54:23:e4:f9:82:7f:a1:
2a:ca:91:6a:da:aa:ca:e7:9d:ff:a1:63:b7:52:3e:
00:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:05:50:35:AC:88:4D:11:72:FE:5C:AB:B8:3E:3D:FD:06:AE:9D:C5
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JgVQNayITRFy_lyruD49_QauncU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.125.0/24
Signature Algorithm: sha256WithRSAEncryption
85:d7:75:e2:8e:24:4b:d3:ba:7f:be:79:53:50:24:6e:22:b3:
ea:9a:f2:81:97:46:0c:67:61:48:40:fe:8e:d3:61:b6:66:e8:
be:27:df:00:16:35:a5:12:67:b9:9b:4a:e2:dc:f3:ae:f1:e5:
c8:79:3a:35:95:ae:55:a6:46:0f:33:5b:e0:de:aa:a8:92:45:
a6:bb:8e:78:f5:e9:fe:a0:33:4f:2c:3c:db:00:87:1a:4f:f8:
bb:e6:33:20:f3:4a:f1:5d:5e:d8:37:f0:ef:ec:24:f8:a4:ae:
c6:bc:57:fe:aa:fe:9a:33:b2:b2:ac:c6:dd:a5:43:67:e4:e3:
fc:4d:c0:e8:9b:bb:b1:d8:a3:04:f7:d3:8d:a5:38:eb:9e:b0:
bf:98:9f:5e:e4:62:e1:96:21:b9:4d:a4:b1:32:19:a9:fa:f0:
c1:56:58:f3:92:19:ea:8c:55:98:66:c3:31:63:45:c3:eb:3e:
fb:dc:5e:b5:db:93:70:4f:4a:63:dd:e4:80:d2:92:5d:89:c2:
ad:a7:da:64:fd:30:e2:db:32:91:86:b0:49:e4:44:40:0e:e6:
8a:4e:cd:17:5c:bb:d3:4c:6f:b2:5f:9e:f4:8a:c1:a3:45:b1:
fb:e6:df:0d:29:33:67:da:08:2f:ca:15:f2:25:7a:94:25:9f:
4d:8e:a0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:16 2023 by rpki-client on console-ams.rpki-client.org