Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RVRmLKsHEAwo6ozgUtxmGo1FaXc.roa
File: RVRmLKsHEAwo6ozgUtxmGo1FaXc.roa (raw, json)
Hash identifier: +ZgGbgYYSWEu0GhA9tWhz0yAqWsGa/LI44r/gUiyXic=
Subject key identifier: 45:54:66:2C:AB:07:10:0C:28:EA:8C:E0:52:DC:66:1A:8D:45:69:77
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1B03
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RVRmLKsHEAwo6ozgUtxmGo1FaXc.roa
Signing time: Wed 29 Sep 2021 02:46:01 +0000
ROA not before: Wed 29 Sep 2021 02:46:01 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.194.205.32/27 maxlen: 27
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6915 (0x1b03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:01 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=4554662CAB07100C28EA8CE052DC661A8D456977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:13:68:9d:ec:25:0c:f1:1b:db:90:90:85:10:
7e:fc:20:00:09:48:7b:6e:73:c3:0c:ac:a2:ec:9f:
0a:3e:5f:59:a2:3c:4a:52:52:30:9c:15:4a:4f:ac:
44:23:a0:74:b2:f7:bd:4f:91:9e:e5:ff:82:b1:ed:
e2:3d:6a:4c:80:75:85:04:31:84:da:b3:03:30:64:
84:37:3b:54:5f:c6:29:96:92:34:b2:59:a9:98:f9:
98:8d:17:c4:59:c9:63:cc:7b:55:ae:ab:0a:35:73:
02:dc:f9:30:13:58:1e:bc:31:c9:36:cb:f6:d2:e9:
53:40:99:48:45:b0:dc:4b:69:7f:72:ec:99:81:11:
9b:b7:78:f6:0e:56:2b:0b:1b:f7:b6:5e:26:f5:08:
27:60:83:d0:d6:0a:4b:96:9a:3d:66:f6:89:c4:52:
f9:13:58:69:22:6b:c1:e3:4a:a1:0f:f2:6b:69:df:
a9:b6:d4:04:e5:5d:dd:de:45:46:36:3f:65:27:46:
73:e7:21:d8:eb:1c:e9:bf:39:30:0a:96:ac:f4:b1:
58:4e:9e:c0:10:16:bb:b9:3e:6f:63:50:5d:a0:77:
8a:b1:ce:e2:31:24:14:a9:0b:13:75:a5:f8:76:55:
1b:54:5d:da:d3:16:3b:ec:09:21:8a:11:14:e2:2b:
b4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:54:66:2C:AB:07:10:0C:28:EA:8C:E0:52:DC:66:1A:8D:45:69:77
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RVRmLKsHEAwo6ozgUtxmGo1FaXc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.205.32/27
Signature Algorithm: sha256WithRSAEncryption
89:c3:94:59:9a:72:c0:8c:75:14:e8:74:dc:43:c4:54:d3:f5:
9f:20:1b:37:51:fc:83:75:81:60:54:1c:c6:c7:db:a0:e9:86:
cb:de:41:fc:07:ec:2a:a1:38:73:27:64:aa:ac:fb:1b:40:ee:
e3:c5:c2:75:1f:1d:b1:d5:21:ce:36:74:d8:ca:37:cc:6f:c3:
26:02:7e:65:95:55:15:57:06:01:f6:86:80:dd:5a:52:b2:b5:
98:61:b2:6f:05:35:d9:bc:98:1b:b7:c0:a3:32:77:9b:67:52:
3a:b0:03:d4:1b:8c:ee:e5:1c:79:b1:98:4a:e3:aa:c7:4d:06:
3e:c5:d1:ec:30:70:1a:0d:8c:5d:eb:c8:ac:5b:9e:76:9b:ec:
1a:73:a6:57:e1:75:76:2d:03:12:b5:d5:63:aa:e5:ac:4e:5a:
f7:d3:cf:01:cd:08:7f:bf:ee:8a:c7:28:6c:3c:8b:34:b9:e7:
82:44:63:7c:d4:fd:0d:6b:07:dc:d8:c6:16:56:d8:d0:34:81:
29:a6:3d:e2:49:3d:73:98:df:55:f8:33:d9:e5:da:bd:c0:93:
50:73:81:18:cf:3a:35:33:20:5d:1f:4b:df:00:88:20:e2:fe:
19:49:4f:cd:e8:41:2a:ae:2f:d5:ab:7a:46:f3:7f:2d:1c:a8:
39:79:6d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:31 2024 by rpki-client on console-ams.rpki-client.org