Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RHke1xKhvOaph6H-PXCWaFs079M.roa
File: RHke1xKhvOaph6H-PXCWaFs079M.roa (raw, json)
Hash identifier: 4jEqsoiO+sLcyxG/81h4sTzioKL5MKtAo3PBKjufCA0=
Subject key identifier: 44:79:1E:D7:12:A1:BC:E6:A9:87:A1:FE:3D:70:96:68:5B:34:EF:D3
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1A9F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RHke1xKhvOaph6H-PXCWaFs079M.roa
Signing time: Wed 29 Sep 2021 02:45:33 +0000
ROA not before: Wed 29 Sep 2021 02:45:33 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.192.24.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6815 (0x1a9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:45:33 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=44791ED712A1BCE6A987A1FE3D7096685B34EFD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6c:9d:fc:8b:29:cc:91:1a:f0:b6:ab:a0:f0:
f8:5e:6c:7f:bd:f3:f9:ea:5e:85:c1:5b:55:5b:3e:
38:e3:bb:00:63:3c:3c:60:22:06:25:9c:8b:cb:d4:
4b:ef:71:de:f0:39:fe:01:95:da:36:b7:7f:18:1b:
76:33:36:31:03:91:60:e9:a3:89:52:ad:42:46:ef:
19:20:60:80:8c:70:a9:0c:44:f9:19:fc:9d:dc:a0:
c4:4f:63:a4:4a:fe:f3:45:11:97:3c:d1:41:fe:4e:
02:c4:a1:32:e1:56:41:0f:77:ce:61:60:0c:fa:ae:
15:54:0e:8a:b5:56:67:93:aa:d7:e1:e2:78:7c:59:
ae:1a:1f:28:4b:17:6e:8a:a8:7f:3f:29:cc:34:c0:
50:6d:6c:89:e0:90:f7:e3:59:46:2e:ee:ba:d5:2b:
ea:ab:67:97:be:e1:47:58:83:a1:00:d7:fa:38:fd:
b1:68:b2:44:3c:41:43:91:b0:9a:3d:8d:03:60:ff:
39:68:fa:89:a9:d1:a2:11:64:57:c6:a2:62:c1:ef:
e0:99:ef:56:79:5a:38:d5:60:0a:de:69:75:3f:cb:
60:a5:af:fb:85:8f:70:bd:b8:15:8e:39:c1:b3:35:
76:8f:34:c0:ab:53:b6:75:b3:db:85:95:ce:92:6d:
98:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:79:1E:D7:12:A1:BC:E6:A9:87:A1:FE:3D:70:96:68:5B:34:EF:D3
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RHke1xKhvOaph6H-PXCWaFs079M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.24.0/21
Signature Algorithm: sha256WithRSAEncryption
88:e6:3a:5c:cb:2b:6e:b0:11:65:2b:e9:d0:83:58:e8:7c:5b:
f3:96:f5:80:cb:1a:3f:59:3a:5a:9e:af:dd:5c:3c:00:ab:ad:
9d:73:a0:f9:5b:b0:7e:ce:2b:8c:12:41:ea:40:e3:56:4e:f1:
5e:b7:a8:32:b1:c7:cf:3a:78:27:d5:fc:a8:a8:cd:2e:61:e9:
6c:29:0f:76:f0:3c:b3:bf:b5:27:04:f8:d4:a1:7e:25:cc:f5:
30:fb:6f:62:ee:99:5b:5d:21:16:8a:5a:02:c5:ad:e3:d4:a0:
6f:fb:ac:86:b3:31:d7:98:cb:7d:51:86:f7:4c:06:b0:a7:ba:
02:6b:c9:07:12:02:18:6c:d6:86:7f:92:d4:21:de:44:99:a4:
ec:1a:31:6f:b8:92:e5:1c:77:89:29:97:aa:2b:77:14:4b:65:
d9:1c:13:c5:cb:59:19:88:12:cb:c6:70:f7:01:ab:0e:6f:6f:
a4:de:1e:df:e8:b0:99:53:6f:a0:48:71:ce:4c:50:cf:b3:63:
67:27:b1:d6:cf:71:20:e5:0d:45:ca:e2:69:e4:8c:7b:80:4a:
6f:4a:35:4f:b3:8f:f6:01:86:b7:c2:82:7d:6e:57:da:f9:49:
80:57:59:38:ad:45:95:ff:f7:59:fa:b2:c7:09:fc:f4:4c:0b:
74:92:6b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:52 2024 by rpki-client on console-fra.rpki-client.org