Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RwXTDBSRZQPf2nY9sVEbdI3tdv4.roa
File: RwXTDBSRZQPf2nY9sVEbdI3tdv4.roa (raw, json)
Hash identifier: TzbLvRvAOBRnEhYPXG5Ji95dp+7c7up8cUzwCWxPsPI=
Subject key identifier: 47:05:D3:0C:14:91:65:03:DF:DA:76:3D:B1:51:1B:74:8D:ED:76:FE
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 166D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RwXTDBSRZQPf2nY9sVEbdI3tdv4.roa
Signing time: Sun 07 Feb 2021 12:10:23 +0000
ROA not before: Sun 07 Feb 2021 12:10:23 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.160.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5741 (0x166d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:10:23 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4705D30C14916503DFDA763DB1511B748DED76FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:25:f8:3b:fb:d4:a4:9b:11:a4:4b:8e:bd:33:
75:4e:12:c3:7b:22:74:c6:10:e9:f6:ac:08:49:63:
46:ea:e9:d8:ca:98:55:3d:78:6f:f6:1c:3a:97:c8:
8f:71:53:30:d8:76:37:2b:3b:b9:03:ce:39:ff:87:
92:8d:72:49:5a:91:aa:78:70:9f:ff:d3:2f:44:39:
17:f2:be:0d:ec:76:fc:2c:f9:ea:5d:f2:a7:b8:2f:
b9:5e:7f:7d:54:d3:3c:bc:2c:a9:33:c5:6c:57:50:
d8:41:11:fb:ed:62:b3:57:99:bb:ec:f7:69:1c:1f:
d0:6a:52:78:7d:9d:e5:dc:9c:78:37:35:ad:a3:31:
6d:84:13:b0:49:3f:f1:c7:6e:a8:df:b3:89:95:bc:
b7:b7:14:29:18:a9:65:09:70:e7:8f:e7:2f:89:35:
7d:6b:5b:8f:3c:62:9f:2b:63:08:fe:3b:00:5d:ca:
15:d8:21:5e:61:6d:42:b5:65:50:dc:bc:69:91:28:
c0:4c:36:d9:25:57:8e:00:8a:c5:75:4a:8e:a1:eb:
24:09:25:6c:9e:e8:3c:8d:09:5b:b1:0e:97:2c:83:
82:b8:5c:d8:ef:88:e9:cc:05:60:63:39:1d:d9:ae:
ba:d2:47:78:35:8e:70:84:50:39:1e:8d:22:92:d9:
19:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:05:D3:0C:14:91:65:03:DF:DA:76:3D:B1:51:1B:74:8D:ED:76:FE
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RwXTDBSRZQPf2nY9sVEbdI3tdv4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.160.0/21
Signature Algorithm: sha256WithRSAEncryption
53:23:e3:3b:e7:92:77:56:d5:aa:f8:5a:2b:73:f3:36:bd:98:
e9:bd:0b:fe:7f:c0:4c:8f:f0:6a:b9:1c:bb:e2:2a:44:0b:76:
a7:ad:5d:82:16:e8:58:eb:19:89:ac:c9:fc:7f:94:1d:15:c5:
62:8f:3c:3b:a2:1d:ec:6c:11:2c:dd:1b:bb:a3:8b:60:ac:dc:
21:18:8f:e5:96:0d:47:29:9f:23:25:87:93:ba:74:cd:a0:b6:
b8:f8:ca:e1:89:3c:d6:0e:90:1a:03:2e:64:16:58:18:63:10:
d2:cd:6c:d6:4f:9a:8e:49:2b:30:3f:88:ef:ff:ff:63:a6:88:
ae:46:cb:59:93:e1:86:fc:7f:81:6a:d0:e9:60:df:e6:a5:85:
96:48:c0:2d:d3:43:f3:e2:8a:83:3a:c6:63:8b:59:c8:b8:f4:
0c:8e:43:81:47:73:24:93:a3:91:52:d5:61:4b:ec:c9:8b:38:
e5:25:53:bb:17:0a:68:f6:a3:ef:a7:90:28:d9:f7:22:72:70:
d6:bc:72:8b:7a:45:dd:0b:ae:6c:35:43:9a:d8:06:69:e0:85:
5a:3a:ef:77:23:ac:b1:14:30:37:3c:91:f8:72:09:c9:fc:66:
ca:8b:6a:90:fd:e1:ca:05:9b:6a:38:0a:27:25:d1:7c:4f:08:
74:1f:53:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:52 2024 by rpki-client on console-fra.rpki-client.org