Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KT-FNcvO7EvtVgL7-A2p9zQYWXc.roa
File: KT-FNcvO7EvtVgL7-A2p9zQYWXc.roa (raw, json)
Hash identifier: I6InlZ+MKDu33WuhYKZid8yNUSpmgSW2JZVJlQTQHMc=
Subject key identifier: 29:3F:85:35:CB:CE:EC:4B:ED:56:02:FB:F8:0D:A9:F7:34:18:59:77
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 166B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KT-FNcvO7EvtVgL7-A2p9zQYWXc.roa
Signing time: Sun 07 Feb 2021 12:10:20 +0000
ROA not before: Sun 07 Feb 2021 12:10:20 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.160.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5739 (0x166b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:10:20 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=293F8535CBCEEC4BED5602FBF80DA9F734185977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ce:9d:8f:91:20:8c:f3:87:9a:a7:1c:27:56:
8c:b2:7d:88:d6:93:ab:45:98:18:b6:15:7e:fe:fe:
38:ca:23:98:e7:c2:ae:55:3a:8a:12:6d:0e:4b:36:
f5:87:dd:02:de:c6:7c:77:a0:d4:9d:55:b5:0e:60:
c7:72:04:4d:67:f1:6d:2d:93:8d:07:11:7f:3b:cb:
f3:96:f3:49:ca:b9:65:20:2b:cb:aa:b2:5c:66:7a:
fb:00:70:ee:16:5d:1c:f5:95:fc:cb:bc:6b:5e:2a:
12:21:7e:ae:76:02:8d:94:4d:0b:13:e9:88:2f:b2:
1c:d7:15:53:90:8c:0d:4d:88:28:32:c4:cd:f6:02:
ee:76:d0:7c:bc:39:41:bf:a1:55:93:17:ed:0c:60:
3f:5d:1a:8b:99:3d:26:5b:cb:32:0f:50:57:51:e9:
7b:00:00:6c:1a:b0:19:6e:2c:f9:7c:75:97:3a:ee:
f9:fa:5c:ee:d5:95:ae:cf:77:21:36:e5:95:ed:b9:
ad:80:4b:e3:8a:30:3e:a6:af:3e:00:c2:90:44:a7:
64:13:57:13:1c:91:23:03:28:38:9d:76:6f:c3:e1:
4e:db:dd:f4:b3:4b:30:3e:63:69:e4:0c:ef:9a:8c:
33:96:f5:7f:d9:9c:e1:17:1e:84:0b:de:e5:82:3b:
fd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:3F:85:35:CB:CE:EC:4B:ED:56:02:FB:F8:0D:A9:F7:34:18:59:77
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KT-FNcvO7EvtVgL7-A2p9zQYWXc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.160.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:14:a8:e1:1c:d4:cd:2b:05:84:81:c0:94:8b:f6:43:5e:ac:
b5:8d:4d:b1:f0:1f:f2:94:60:59:84:4f:bf:82:ae:fc:bf:43:
17:a7:31:33:ac:02:35:2f:de:c1:e5:dd:bb:3b:43:b0:8d:55:
73:d6:5c:81:a2:cb:02:a2:c7:6c:70:5c:53:6d:51:9a:a2:81:
f1:b0:1e:10:64:1d:fd:ee:50:7f:f1:72:fc:ae:7d:e7:65:e3:
37:e1:0c:e6:ce:9d:4b:ae:08:1a:bb:af:2d:c2:1b:c7:62:00:
e1:b9:a0:70:01:19:d6:e1:8e:22:43:ef:3e:8e:78:36:e3:25:
6c:fe:98:08:72:19:07:86:c4:1a:b0:e0:98:d7:66:1e:e2:96:
d9:f1:a3:42:cd:83:14:46:72:f1:21:d0:c9:b8:0c:a0:ee:65:
9a:db:36:52:c5:e2:b4:05:54:d9:3b:51:2d:c8:c1:a8:69:ae:
1e:d0:15:73:20:77:c9:bf:50:e0:56:ca:6c:93:89:09:90:cf:
43:31:95:bd:dd:90:22:3b:fe:af:31:fa:37:13:e7:99:dd:91:
96:0b:21:d3:76:dd:15:7e:27:71:96:08:c0:74:5e:80:f5:38:
8f:31:68:50:2e:7f:d1:43:ea:f6:8e:9e:14:ea:52:73:de:ad:
ee:8b:36:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:28 2024 by rpki-client on console-ams.rpki-client.org