Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LAvTAlnclno4qpqsez3ceAU1-uQ.roa
File: LAvTAlnclno4qpqsez3ceAU1-uQ.roa (raw, json)
Hash identifier: yYWGecTQhLs6YYdJISYvPKE81yXwbu0rtcGNGwuZZ24=
Subject key identifier: 2C:0B:D3:02:59:DC:96:7A:38:AA:9A:AC:7B:3D:DC:78:05:35:FA:E4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0E19
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LAvTAlnclno4qpqsez3ceAU1-uQ.roa
Signing time: Tue 29 Sep 2020 09:55:20 +0000
ROA not before: Tue 29 Sep 2020 09:55:20 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.193.88.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3609 (0xe19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:20 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=2C0BD30259DC967A38AA9AAC7B3DDC780535FAE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:06:ed:23:cf:b8:05:9d:6f:a4:53:cd:57:19:
32:ff:ca:1f:02:b6:36:5e:d6:34:ea:e2:c3:ef:77:
63:d5:71:35:5d:09:fb:20:20:b1:c6:05:b2:66:28:
af:a6:29:ec:38:0e:69:2a:ab:d5:bf:b1:8f:71:5a:
d2:21:e0:6c:ba:ee:b4:83:da:1d:28:9b:2e:71:17:
8b:cf:40:91:bd:54:9e:39:6d:16:97:bf:4b:91:9f:
75:c3:63:10:41:1f:30:84:4f:d2:95:bf:0a:37:98:
d5:98:cc:4a:fc:de:65:c4:f6:10:a2:83:37:18:7f:
f7:3c:be:17:5f:c9:a7:20:bb:c4:e9:bf:d0:0d:1b:
08:70:e5:7f:5a:6c:51:32:2f:0a:12:15:19:ea:d6:
6f:28:f2:46:3a:93:1c:ca:68:b6:97:b0:f0:fd:75:
74:4a:3b:e5:02:07:06:75:e0:d3:16:37:37:2c:aa:
a9:f3:78:51:19:39:45:ee:c5:d0:b4:df:88:39:4d:
fc:c3:42:61:bf:74:73:ef:e0:b8:e7:46:86:73:9c:
ea:27:92:20:89:61:ea:cf:32:b9:6a:78:60:fe:88:
de:74:85:53:5f:0d:8b:ba:58:ab:04:d7:e6:cb:4e:
1d:1c:cd:19:63:87:ad:37:7c:18:32:77:c1:dd:1c:
22:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:0B:D3:02:59:DC:96:7A:38:AA:9A:AC:7B:3D:DC:78:05:35:FA:E4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LAvTAlnclno4qpqsez3ceAU1-uQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.88.0/21
Signature Algorithm: sha256WithRSAEncryption
22:90:84:85:0c:99:8b:a0:4b:35:57:08:1f:d8:9b:36:8e:78:
50:c9:d2:95:03:ef:64:50:a0:b8:8d:15:62:67:4d:03:36:92:
67:5d:e5:92:76:f3:a5:49:d5:6e:98:68:db:4c:45:f2:29:b7:
3e:65:5d:99:52:46:90:50:05:46:db:c2:04:1f:8b:f5:7d:b1:
2e:96:93:45:b1:17:6e:dd:0b:39:7c:26:90:d2:b6:bc:e9:ab:
5a:77:ff:20:39:80:d5:49:1f:4c:ba:d2:1c:53:f9:9f:42:df:
88:ca:b5:a4:63:53:21:80:28:0c:d5:20:d2:61:c3:83:38:5b:
fd:5b:a3:f7:7a:a1:7d:7c:38:80:e1:92:93:1c:3e:29:da:d9:
e9:55:94:be:ae:bd:d9:57:7f:9a:e3:c3:6b:8e:26:7b:d0:39:
aa:06:02:e4:6b:e3:eb:b2:54:25:17:f9:7e:d2:33:13:35:4d:
05:8d:da:b0:da:c4:45:4b:98:da:c4:7b:e2:8c:90:fd:33:5c:
2d:df:3f:8b:38:58:98:54:8f:a2:ee:94:ee:1c:4b:80:f1:e8:
ab:5c:00:25:75:87:c5:20:40:5b:4c:05:20:80:5c:56:1a:36:
c0:bb:49:d3:b5:8d:01:b9:6d:b1:ae:68:76:9f:06:35:73:c2:
ff:23:3c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org