Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JhkMySmqx9OJRn5xSMU01RFLC1g.roa
File: JhkMySmqx9OJRn5xSMU01RFLC1g.roa (raw, json)
Hash identifier: WgAKYWgUWu8wM2mukhyOq4UpCxK4BQ4ydDcEKr4LOqg=
Subject key identifier: 26:19:0C:C9:29:AA:C7:D3:89:46:7E:71:48:C5:34:D5:11:4B:0B:58
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1781
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JhkMySmqx9OJRn5xSMU01RFLC1g.roa
Signing time: Sun 07 Feb 2021 12:19:47 +0000
ROA not before: Sun 07 Feb 2021 12:19:47 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.72.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6017 (0x1781)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:19:47 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=26190CC929AAC7D389467E7148C534D5114B0B58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b4:89:2b:17:91:91:93:b5:0a:10:91:43:e1:
88:57:4e:df:53:df:3b:fc:62:55:5e:e8:64:23:0f:
0c:79:c3:c4:65:c3:f9:d0:56:20:95:03:6e:91:29:
76:76:c5:d7:8a:ce:24:c5:93:9a:39:8e:7f:f0:1d:
c6:a9:1d:45:49:66:e9:f4:6b:5f:6f:09:24:e0:7a:
7d:04:e4:98:9d:7b:32:c6:56:65:2e:9e:a8:1d:c0:
d1:47:d4:b1:c1:c0:b7:b3:0a:94:ba:85:d5:43:ce:
b9:37:f0:3c:c4:f8:0a:f8:ca:f7:ba:22:d9:6d:ce:
2a:97:6d:8b:d0:98:98:f3:31:a4:f1:7b:eb:1b:b4:
76:cf:f6:6f:7a:a9:71:74:b7:e6:fc:65:17:98:27:
3f:34:0b:c5:83:5f:34:58:5d:7c:bf:86:34:c6:51:
6f:c9:aa:46:80:a5:b7:87:d3:ff:54:02:80:ef:d8:
a1:be:72:2e:a7:69:c5:16:2b:b4:a7:de:f1:cc:75:
25:56:2d:01:e3:e7:d7:7e:f9:02:ec:7b:7e:7a:e5:
5d:eb:59:e1:1d:5f:1c:09:bf:dc:03:06:90:2b:21:
fb:44:10:b5:a0:2c:88:f5:02:09:db:3f:8e:b6:a9:
ae:3d:21:16:4e:8e:9e:c2:8f:77:bf:d8:ce:1f:72:
5f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:19:0C:C9:29:AA:C7:D3:89:46:7E:71:48:C5:34:D5:11:4B:0B:58
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JhkMySmqx9OJRn5xSMU01RFLC1g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.72.0/21
Signature Algorithm: sha256WithRSAEncryption
75:6a:2b:2b:1d:84:c0:23:0e:43:d6:af:a3:5c:e2:70:d1:ac:
9e:dc:0e:df:67:d1:df:07:a2:93:c8:1b:a6:00:3d:fd:7e:11:
da:58:8c:d7:fe:8c:71:b4:64:b9:ab:58:d7:32:77:ec:97:58:
dd:4e:53:68:da:a4:31:29:b2:67:de:d3:6f:c4:5b:f3:a5:9e:
44:ff:19:f1:06:fb:dc:86:76:a8:91:1d:d1:5a:23:fd:ca:1b:
9c:28:b1:84:ed:cb:49:c7:64:8f:d7:d4:14:fa:a0:91:a9:15:
b8:22:bd:c0:91:e8:9e:e4:97:19:35:09:94:91:5c:dc:d4:49:
72:39:93:6f:f9:2d:30:b1:a3:fc:44:d0:a5:21:3f:02:4a:ce:
c0:76:eb:3e:41:27:db:b3:89:e6:3a:78:7a:3c:7d:3a:41:fa:
32:69:55:ba:89:5b:0f:8f:db:c5:2e:09:3f:2a:ae:0e:6e:44:
cf:9d:53:b9:0b:8c:71:de:04:ff:57:81:85:08:07:b5:19:a9:
52:85:cd:16:91:c1:c1:3b:fe:69:e9:27:a7:1f:e6:52:d9:76:
83:a5:53:46:87:7b:4c:ca:79:f0:c9:cf:1a:eb:3a:74:c5:7c:
ae:d7:57:99:d1:ce:7d:d6:e1:da:6d:17:33:d0:1d:b7:1b:04:
ac:25:67:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:50 2024 by rpki-client on console-fra.rpki-client.org