Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S-C78UQLhNNUKCgZV6mZGLO9VeE.roa
File: S-C78UQLhNNUKCgZV6mZGLO9VeE.roa (raw, json)
Hash identifier: L5c/di29F7p97gZ0JkuRO2Mgw7w9wJmFcFLqDyFTAek=
Subject key identifier: 4B:E0:BB:F1:44:0B:84:D3:54:28:28:19:57:A9:99:18:B3:BD:55:E1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1CDD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S-C78UQLhNNUKCgZV6mZGLO9VeE.roa
Signing time: Wed 29 Sep 2021 02:48:19 +0000
ROA not before: Wed 29 Sep 2021 02:48:19 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.194.204.128/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7389 (0x1cdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:19 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=4BE0BBF1440B84D35428281957A99918B3BD55E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d5:db:f1:a2:d6:a9:3b:98:f6:43:d4:f0:66:
f1:79:c6:a3:1d:34:98:81:03:49:3c:2f:d8:0d:fd:
b1:e9:a8:44:86:5a:8c:ec:39:7c:08:30:6f:60:c8:
94:a8:74:b2:17:a0:0a:31:90:8e:c0:9f:ed:30:24:
ff:15:2a:8c:22:a4:d0:10:10:29:9b:07:a2:41:c1:
9c:47:00:be:33:6e:f1:8d:23:a8:b0:53:40:16:40:
09:89:9c:e7:af:92:de:8c:1d:d6:e2:21:79:63:c2:
7b:26:cd:33:0f:2e:59:c1:09:06:53:98:bc:dd:7c:
e1:f9:ea:11:71:20:a9:5a:3a:2c:e3:09:83:14:68:
61:26:be:8c:76:48:ca:26:06:94:21:a5:44:1f:2b:
9b:b1:17:fb:ab:83:ee:f9:2e:89:01:57:19:cd:96:
fd:de:68:d3:a1:9a:ee:1d:2b:19:84:dc:a9:be:37:
a6:2a:ac:28:6a:7d:9c:f0:bc:d3:71:65:24:e3:3a:
1c:6c:35:e7:ed:5f:b0:99:a5:40:64:4e:14:56:d1:
da:ca:66:3e:1c:eb:90:27:ef:bc:90:8b:4e:aa:4e:
01:54:a2:76:00:37:fd:82:86:62:ef:62:cd:c2:59:
6c:ac:90:23:85:b4:7e:ef:21:29:61:78:c4:19:3e:
52:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E0:BB:F1:44:0B:84:D3:54:28:28:19:57:A9:99:18:B3:BD:55:E1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S-C78UQLhNNUKCgZV6mZGLO9VeE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.204.128/25
Signature Algorithm: sha256WithRSAEncryption
69:76:d6:50:12:3d:e6:2d:e7:ca:59:09:2e:46:c5:b2:8c:6e:
d8:65:77:86:4b:c6:65:13:88:4c:99:3e:ef:c6:4b:e9:35:19:
e7:bf:bf:98:17:ab:59:17:78:df:b9:91:b8:c2:4e:b5:3f:fd:
97:eb:6c:1b:61:22:a2:59:72:0a:a9:38:8b:68:a3:fb:fa:1e:
7e:bf:9f:83:78:e6:86:8c:9f:07:1f:f2:62:de:f0:12:57:f4:
df:8e:f2:a9:1d:48:c0:63:73:45:60:45:1e:ea:2e:3a:83:db:
71:42:a3:92:42:08:bd:db:89:00:2c:07:c2:9a:9d:14:72:8a:
f5:a0:16:0f:51:fe:0f:14:a0:c1:5b:71:85:33:e8:00:56:e1:
15:1c:59:db:7e:f6:04:fb:03:e3:2d:3a:19:b3:14:e0:4d:ed:
48:ee:6d:d3:d5:f8:bb:83:3b:67:0b:b0:97:b4:d8:fe:9d:66:
63:4f:34:4c:81:07:d9:38:c3:13:f0:5d:c6:78:45:1d:80:0b:
fd:e4:d1:56:d2:f3:d1:f8:c1:08:99:a5:0e:00:89:44:80:17:
44:85:b1:b3:14:c8:f1:38:b3:6d:32:5c:f6:df:04:74:39:13:
b4:8f:e6:e3:c9:e0:33:10:43:a2:9d:20:81:60:e2:6d:c0:d7:
69:49:25:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:31 2024 by rpki-client on console-ams.rpki-client.org