Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/M5N8VzJGoHPuSxsOG2Telaz9Ays.roa
File: M5N8VzJGoHPuSxsOG2Telaz9Ays.roa (raw, json)
Hash identifier: RCVaA+OnctU5btlXSEO6dHGw+dOwgkIxj+AomJPqRvs=
Subject key identifier: 33:93:7C:57:32:46:A0:73:EE:4B:1B:0E:1B:64:DE:95:AC:FD:03:2B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1D4C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/M5N8VzJGoHPuSxsOG2Telaz9Ays.roa
Signing time: Wed 29 Sep 2021 02:48:51 +0000
ROA not before: Wed 29 Sep 2021 02:48:51 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 123.195.224.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7500 (0x1d4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:51 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=33937C573246A073EE4B1B0E1B64DE95ACFD032B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:82:9a:62:04:28:65:ab:14:d5:9a:51:b1:a8:
07:53:a9:5f:9a:a7:6e:78:ba:3c:5a:53:f1:ca:52:
07:3a:c5:d2:b5:2f:0b:bc:ba:f6:6b:64:ff:8e:1c:
a0:25:17:56:02:ea:ce:19:ca:b8:0e:7c:70:9f:59:
a8:a1:9c:fa:bd:15:36:01:28:1d:56:72:4b:9c:1e:
48:23:2f:03:ca:15:e8:7e:eb:9f:e2:22:fb:ea:14:
74:96:94:67:35:bc:ad:04:09:06:86:43:ad:76:50:
37:39:75:6c:18:1b:5c:04:89:4b:4b:47:56:c6:fc:
42:f7:d1:28:ac:e7:2f:f1:ff:df:3b:bc:56:58:1e:
98:21:5b:77:2e:2b:50:06:84:95:82:c7:f7:04:bb:
84:7a:c1:b9:dd:9f:31:8f:47:36:44:ba:ac:d7:1e:
6c:51:bc:5d:94:96:ef:23:a9:6c:a0:f6:db:f1:72:
15:fd:4e:d2:dc:6c:fc:0c:30:fd:f3:aa:18:b9:89:
28:39:0a:d0:8b:c7:05:3a:7d:cb:bc:22:69:cc:8b:
3d:f2:ee:06:dc:07:90:61:a7:7d:45:bb:93:ec:0a:
dd:25:ca:c6:0e:7a:8d:79:04:5e:f4:b9:55:84:cf:
43:5d:e6:81:28:6d:7a:15:37:9b:b8:bc:d7:42:ee:
87:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:93:7C:57:32:46:A0:73:EE:4B:1B:0E:1B:64:DE:95:AC:FD:03:2B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/M5N8VzJGoHPuSxsOG2Telaz9Ays.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.224.0/20
Signature Algorithm: sha256WithRSAEncryption
a0:42:1d:f5:09:5c:f8:69:5f:5a:89:81:bb:c6:20:19:65:2d:
9d:16:07:f8:60:e1:9f:a5:48:7d:87:4b:ef:e1:0b:43:1a:19:
2e:e4:a0:e0:62:e4:55:a0:3d:49:a5:59:e5:85:52:a4:db:bb:
f3:1a:45:80:80:3f:cf:c9:42:b6:41:20:0a:20:51:20:1a:8b:
04:fc:8d:f3:79:84:60:05:30:89:d6:d7:8d:0d:c6:32:4d:cb:
97:38:c0:45:40:36:22:eb:ff:15:dc:3d:ca:cd:75:e3:bd:88:
f0:49:3a:fe:32:3d:a3:8a:4f:b4:92:4a:6f:c1:cd:08:fb:0a:
d0:dd:17:83:a8:7d:52:86:ab:e7:09:f2:90:44:db:33:c3:3e:
72:67:36:56:3f:f0:55:7e:0b:1f:55:cb:8b:9d:58:c0:0b:1a:
66:0a:a5:08:06:e0:17:ba:6d:0d:18:85:8e:67:aa:37:ba:57:
65:72:70:1c:e5:51:b1:69:c9:f1:dd:ed:67:9f:64:43:a2:d5:
2c:ea:06:bd:46:69:7c:c8:44:b2:75:76:b4:a5:f0:c1:9e:1d:
6b:32:ec:3e:af:14:1a:6e:d4:37:3b:32:94:17:22:3f:07:a7:
71:7b:bb:cb:7e:8c:57:df:0f:3b:38:d6:0e:21:64:8f:b8:5b:
8b:0e:49:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:29 2024 by rpki-client on console-ams.rpki-client.org