Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NXeRZ5N-viryMFCooCbFeoLnHBs.roa
File: NXeRZ5N-viryMFCooCbFeoLnHBs.roa (raw, json)
Hash identifier: sAN9gkCLDFNvPv9XUAEqlio4a1zEBvWL2RjO/p+8ek0=
Subject key identifier: 35:77:91:67:93:7E:BE:2A:F2:30:50:A8:A0:26:C5:7A:82:E7:1C:1B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1CDE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NXeRZ5N-viryMFCooCbFeoLnHBs.roa
Signing time: Wed 29 Sep 2021 02:48:20 +0000
ROA not before: Wed 29 Sep 2021 02:48:20 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.194.205.128/28 maxlen: 28
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7390 (0x1cde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:20 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=35779167937EBE2AF23050A8A026C57A82E71C1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:81:6b:42:dc:79:23:54:43:91:f6:79:34:76:
d2:5b:02:73:e4:bb:63:ee:5d:61:51:ad:fc:d7:4a:
9a:66:c2:d4:e0:af:3a:bf:52:00:36:b6:fa:aa:df:
b3:be:16:62:d5:3b:b6:30:9d:3d:45:b7:b1:9e:7a:
b7:fd:3d:88:40:9d:80:5b:4d:ec:97:9c:3a:e9:69:
d2:cc:e9:93:a3:35:6c:17:32:bc:47:cd:e5:cc:3e:
aa:89:89:be:70:3b:a0:9b:cb:75:d7:5b:6a:b7:ef:
b7:34:55:3b:cc:42:9c:f1:b5:ef:36:77:7a:e0:de:
24:33:a8:69:d4:51:86:04:4d:c8:f0:02:10:af:ef:
20:37:07:ff:d2:32:6a:8c:1b:12:2c:c9:d6:36:f5:
3f:e6:41:20:16:d0:0d:a7:8b:71:e9:d6:2c:f1:82:
60:39:88:c6:b0:34:cf:85:54:5c:8a:a1:65:dc:12:
39:2c:49:87:0f:f9:2a:52:80:f0:7e:ee:52:f8:a0:
69:b0:a5:33:e4:80:d5:4b:1c:6e:ee:b4:7e:47:7b:
3d:2e:43:65:cd:83:b2:1a:89:16:6d:43:57:f3:56:
e7:d2:24:e7:87:d8:9a:9b:0f:e1:99:f3:fe:b9:73:
8f:a1:c3:9a:d4:bd:5d:23:59:d5:7e:0b:c8:d6:06:
85:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:77:91:67:93:7E:BE:2A:F2:30:50:A8:A0:26:C5:7A:82:E7:1C:1B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NXeRZ5N-viryMFCooCbFeoLnHBs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.205.128/28
Signature Algorithm: sha256WithRSAEncryption
a7:40:22:80:b1:08:88:35:9d:74:ea:30:d2:e9:c9:08:cb:f8:
ce:aa:a3:49:f0:46:82:7f:8e:78:ab:e4:77:ae:d0:d7:ff:a3:
6c:27:17:69:ea:f7:d4:64:e7:89:31:e8:02:ee:2c:e7:bd:ff:
79:e1:c0:e4:c0:69:f1:9f:06:b1:bc:b6:85:a8:f6:26:94:be:
ab:ee:9c:c9:0f:28:a4:7a:65:35:d1:99:07:33:16:f5:c9:08:
86:34:c2:6e:c8:ac:27:9c:d2:3f:88:7d:f9:23:17:82:4a:b1:
f7:6e:72:91:e8:0b:f5:db:ed:a8:23:7a:19:5b:18:99:27:63:
f5:08:a7:1c:42:71:e3:ed:fe:53:37:44:7f:9c:2d:4c:e8:26:
44:4a:86:10:77:60:b4:2f:dd:5e:82:0c:8e:6b:7b:0d:22:7b:
68:f2:da:d9:e2:05:e2:22:1b:b8:06:80:d6:6f:f3:f9:21:1d:
d2:d8:13:9b:f5:e9:da:72:78:b7:c1:fb:76:6a:ca:ba:53:c9:
fe:2f:0f:a9:43:58:72:ba:aa:15:f2:00:de:6f:a5:9b:4f:1f:
47:ee:dd:9b:64:61:09:d6:a0:ef:66:75:dc:4a:04:98:55:a4:
16:a6:28:67:ef:25:e6:7c:0a:62:e8:45:f8:96:a0:4e:8a:5f:
59:81:35:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:29 2024 by rpki-client on console-ams.rpki-client.org