Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PUa5WrkHJUYTVmxRsuqECjdwKSM.roa
File: PUa5WrkHJUYTVmxRsuqECjdwKSM.roa (raw, json)
Hash identifier: sn+CN3Zk+USelSd2w3Qo9ZXdVMkvL7npq61br/MKIEQ=
Subject key identifier: 3D:46:B9:5A:B9:07:25:46:13:56:6C:51:B2:EA:84:0A:37:70:29:23
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1A9E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PUa5WrkHJUYTVmxRsuqECjdwKSM.roa
Signing time: Wed 29 Sep 2021 02:45:33 +0000
ROA not before: Wed 29 Sep 2021 02:45:33 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.192.16.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6814 (0x1a9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:45:33 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=3D46B95AB907254613566C51B2EA840A37702923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ed:85:1f:35:ff:b1:55:15:ad:9c:92:06:b1:
91:3b:60:24:7f:86:23:bd:67:34:e5:ef:7e:6d:04:
54:26:32:84:db:1f:0c:c9:04:84:37:5e:b3:9b:40:
88:a9:02:65:00:82:20:7b:ef:d1:9b:c1:ce:d7:59:
50:48:37:10:3a:2d:c4:a9:9f:17:1a:17:0f:15:21:
4d:ea:53:da:2c:a3:4f:fd:6e:15:0f:02:8d:33:6b:
f6:a1:04:6b:d4:95:06:c9:c1:28:23:27:de:84:b0:
fd:b4:07:08:16:5d:9e:a9:59:77:cc:75:e6:0a:ba:
ec:a5:e0:59:17:44:8c:e3:4d:6c:6e:c3:c7:96:f0:
81:73:3b:a1:3b:63:f3:27:94:84:2f:1a:a9:83:b8:
f9:ef:57:93:a2:18:75:14:55:bf:40:62:89:f1:99:
6b:00:cb:6e:15:b6:00:e0:a1:97:11:8c:cf:44:10:
20:90:ac:90:65:3f:49:42:3b:b8:c3:8a:69:41:47:
63:4e:dc:70:c7:9a:f4:e6:d1:cf:cd:9d:66:ff:01:
82:77:8b:ed:51:49:3a:94:d6:49:e4:83:a9:f6:3b:
5c:a9:98:e6:56:59:2c:c6:1b:3a:fc:b3:52:03:86:
d5:7a:7e:1d:ff:11:9d:41:5d:5f:bb:e7:4e:a8:55:
0f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:46:B9:5A:B9:07:25:46:13:56:6C:51:B2:EA:84:0A:37:70:29:23
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PUa5WrkHJUYTVmxRsuqECjdwKSM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.16.0/21
Signature Algorithm: sha256WithRSAEncryption
29:e9:0e:ae:88:95:e5:d0:a8:6c:16:82:1e:01:56:dd:fe:c8:
b3:51:8e:a9:6d:d2:e7:d7:a2:57:84:4e:af:d8:cc:99:f5:2e:
09:60:b8:23:25:75:f7:e0:51:36:20:43:0d:44:76:d1:e4:b2:
5f:e6:e8:79:1c:71:e3:63:0f:05:aa:c4:18:b0:7e:66:c9:d9:
f8:db:75:95:8f:ec:de:fe:82:17:8e:50:a3:eb:71:b9:52:42:
36:03:32:cc:64:75:af:47:09:1e:e4:45:6b:90:05:5e:4d:cf:
2b:2a:ee:9c:e1:45:a6:42:47:fb:be:04:c2:1d:c1:42:2e:7f:
c4:c7:9c:4a:52:bd:9b:19:45:57:d7:3a:45:37:d4:52:62:78:
cb:57:c6:32:f3:f2:ff:ab:4c:48:8b:1f:50:42:a5:a6:da:ca:
27:34:ba:46:ec:86:21:ac:1a:e5:a0:09:1e:38:80:08:38:7b:
03:a9:7f:72:95:c0:17:45:ed:9c:81:66:e2:67:29:92:87:7a:
04:ec:2d:1e:53:e6:fc:02:4d:2e:86:a7:9d:7a:62:d4:c8:77:
b2:fb:84:ed:cd:ea:7a:4e:3b:4e:8a:c6:71:01:6b:ae:27:a8:
98:ef:22:59:ce:a8:dc:38:ad:72:93:6a:56:49:af:0a:3b:7f:
d8:db:7d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:30 2024 by rpki-client on console-ams.rpki-client.org