Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MmSf_W9epIRd8kEbYSPKENc3Fpc.roa
File: MmSf_W9epIRd8kEbYSPKENc3Fpc.roa (raw, json)
Hash identifier: TREhrKeiD7ZM247sy/GGvN20jey4ONzIQJdpoRK3bYY=
Subject key identifier: 32:64:9F:FD:6F:5E:A4:84:5D:F2:41:1B:61:23:CA:10:D7:37:16:97
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1ACD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MmSf_W9epIRd8kEbYSPKENc3Fpc.roa
Signing time: Wed 29 Sep 2021 02:45:46 +0000
ROA not before: Wed 29 Sep 2021 02:45:46 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.193.208.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6861 (0x1acd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:45:46 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=32649FFD6F5EA4845DF2411B6123CA10D7371697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e4:20:4f:f1:52:be:64:e3:07:ec:63:b8:13:
88:5b:09:58:2a:28:23:7f:7b:8c:bf:47:12:e6:b1:
3e:b6:00:8f:cd:cd:b8:3a:6e:15:7d:22:0d:6f:bd:
12:3d:ef:ff:09:49:8c:d9:92:94:2b:a1:78:0d:53:
f1:e9:8d:c4:03:bb:de:7f:d8:f9:45:3a:51:5b:95:
9e:93:6d:3b:97:7d:43:01:7f:38:2b:01:0b:41:03:
92:84:80:66:41:32:c1:d0:e9:aa:17:0e:46:53:3a:
d4:79:e2:b5:aa:17:fb:9b:e7:13:e5:d5:0a:f9:cd:
b2:d3:50:76:a3:e9:2b:1e:71:d1:40:27:26:6e:23:
ce:93:94:b9:03:8e:86:83:3a:14:7f:8a:ad:39:96:
1a:09:ce:a1:28:38:0e:e0:4c:b8:ad:9c:b7:5d:66:
5f:8d:cf:d3:ad:1f:48:3d:f4:c2:33:39:e0:17:b5:
77:46:79:ab:92:36:16:9c:96:30:63:6c:66:dd:21:
70:ef:8c:53:a3:4b:f5:51:bc:a0:0f:7b:76:dc:d3:
26:b5:99:17:7e:f4:a0:a4:54:be:63:6c:b5:d7:ee:
e3:e2:0c:0f:1d:a4:21:5e:1c:5f:97:d7:62:2f:5e:
07:b4:90:e5:4b:52:ea:6f:65:26:b8:a6:d4:bc:df:
61:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:64:9F:FD:6F:5E:A4:84:5D:F2:41:1B:61:23:CA:10:D7:37:16:97
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MmSf_W9epIRd8kEbYSPKENc3Fpc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.208.0/21
Signature Algorithm: sha256WithRSAEncryption
33:53:10:97:b0:0e:05:29:5a:b9:62:3d:88:01:ae:2c:9f:85:
e3:56:83:31:59:a6:ff:9e:75:05:34:8f:9e:25:a1:e8:e8:ec:
61:53:5a:0e:a3:a1:52:95:5b:e5:47:0e:64:16:3b:52:d5:53:
42:76:5f:d0:01:3c:b4:ea:e9:83:a3:a4:ef:92:d8:98:03:22:
df:ad:94:f9:a9:2b:19:61:42:1d:45:ad:c4:42:42:a1:03:63:
1f:d9:80:6f:3e:22:a5:0a:19:65:21:a3:5f:b9:c8:15:98:a0:
43:2d:0d:57:39:b0:6b:ae:e1:be:64:af:3e:56:21:3a:37:53:
11:95:21:32:de:c3:29:52:ae:c6:b3:95:18:a9:66:42:81:e0:
b7:40:98:fb:fe:7f:a5:4d:34:57:40:5a:12:81:b1:e0:a9:b0:
9e:09:80:72:5b:41:08:0f:8a:71:34:b6:37:a7:b9:4c:f5:17:
3e:50:8e:cc:81:83:97:02:1b:8b:ec:a8:61:83:56:56:b5:2d:
c8:39:77:57:db:8c:3b:b6:0d:9d:d8:68:1d:45:52:0d:cc:ea:
9e:19:ad:38:92:6a:d9:fe:4c:db:89:80:a1:9c:fa:f6:ad:f6:
c2:c6:1f:86:93:68:34:f1:0f:ed:d6:42:77:3c:2c:58:8a:94:
bd:33:c6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org