Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OujEUSetvrEt-un7z8VN6evtqbI.roa
File: OujEUSetvrEt-un7z8VN6evtqbI.roa (raw, json)
Hash identifier: EWGTT7E3jYUK50TKrnfG8ETYWX3caLPTitVyAI4IRas=
Subject key identifier: 3A:E8:C4:51:27:AD:BE:B1:2D:FA:E9:FB:CF:C5:4D:E9:EB:ED:A9:B2
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1BB3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OujEUSetvrEt-un7z8VN6evtqbI.roa
Signing time: Wed 29 Sep 2021 02:46:54 +0000
ROA not before: Wed 29 Sep 2021 02:46:54 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.195.8.0/26 maxlen: 26
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7091 (0x1bb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:54 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=3AE8C45127ADBEB12DFAE9FBCFC54DE9EBEDA9B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d7:3c:e3:18:1b:f8:76:83:eb:a9:f0:a1:38:
93:23:b7:55:1d:8c:28:b0:d3:63:2a:24:bc:64:51:
7a:18:66:f9:32:1a:6f:ae:ee:b0:4e:8b:6b:39:8f:
5e:74:57:3a:42:3a:97:83:6b:d5:99:d9:8c:84:b3:
8f:8e:01:bc:d3:64:8a:fb:46:26:21:f2:04:1e:cb:
2d:eb:24:6f:1f:48:b8:18:d7:ab:6c:56:dc:ee:72:
b2:42:f1:85:65:fb:6e:7f:14:17:f8:99:52:e8:9c:
c6:0b:e9:d2:5f:42:8d:2b:fa:99:a2:2b:47:95:82:
97:b3:10:a4:1b:fd:14:a1:cd:a9:56:b9:54:f0:9a:
50:66:47:7f:09:1e:df:34:95:2f:7e:c2:b2:79:b4:
8f:10:e9:9e:3d:87:52:05:ff:67:f7:6e:e8:64:d9:
e3:07:c6:dc:d9:4b:e7:27:9e:3a:9d:e7:84:33:29:
84:b9:59:5f:5a:67:32:5a:c5:fb:ae:59:5e:84:4b:
58:f8:dd:bf:86:92:03:f7:a0:0f:87:8c:29:42:07:
b5:82:d2:38:6d:39:2d:2a:25:ed:fa:1e:77:96:94:
88:de:87:5e:3c:d6:1a:20:be:f3:7f:75:db:07:52:
04:5a:89:ae:73:50:4e:c8:ac:13:01:25:be:28:76:
4c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E8:C4:51:27:AD:BE:B1:2D:FA:E9:FB:CF:C5:4D:E9:EB:ED:A9:B2
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OujEUSetvrEt-un7z8VN6evtqbI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.8.0/26
Signature Algorithm: sha256WithRSAEncryption
66:48:e7:97:de:d3:ef:1a:ed:64:e4:88:db:5b:84:f3:00:b0:
0c:3f:17:e8:e3:71:9a:0e:fb:1d:39:51:1d:57:50:84:81:c4:
32:f6:ba:22:38:89:aa:aa:8e:5e:f3:a4:9f:7c:09:0b:22:44:
c8:20:e6:cf:bc:cd:ea:80:8e:90:0f:cb:c1:87:43:e3:e5:98:
2f:55:74:09:e9:01:d2:81:a5:2d:02:e7:64:b0:7d:dc:bc:8a:
4c:61:a7:a6:b6:63:65:68:01:af:8b:cc:4d:4a:90:3e:49:e1:
69:dc:c3:46:7a:a1:2c:2c:06:fa:57:80:ea:32:39:24:e2:22:
84:c9:d8:b8:e2:d9:11:1e:05:a8:4d:2b:94:6e:04:63:ba:dd:
74:b4:4c:a4:56:87:1e:c3:d5:f5:ac:60:79:e5:4a:20:33:1c:
4b:8a:4c:22:61:bd:9a:04:f2:e7:b6:11:05:31:da:29:6f:1f:
7d:28:a5:ec:28:9b:1d:83:ae:11:ee:be:df:ad:a7:08:ca:7f:
51:a9:c8:76:8a:e9:6d:f6:ee:8d:c1:6d:44:19:84:f6:31:c5:
88:5d:d8:a9:49:98:5e:98:83:c9:1d:52:77:3e:ac:82:93:c5:
81:01:73:64:d5:a0:de:62:50:05:af:fc:8b:78:a9:db:81:0b:
da:61:1f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:52 2024 by rpki-client on console-fra.rpki-client.org