Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UAv9OkJ8gnhEsKMZSmHMd2l3t7c.roa
File: UAv9OkJ8gnhEsKMZSmHMd2l3t7c.roa (raw, json)
Hash identifier: VQJM7JUZTSHaDKxsmG0yuvA0pOUZMhn14Q75NdcBHA4=
Subject key identifier: 50:0B:FD:3A:42:7C:82:78:44:B0:A3:19:4A:61:CC:77:69:77:B7:B7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 13F7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UAv9OkJ8gnhEsKMZSmHMd2l3t7c.roa
Signing time: Sun 07 Feb 2021 11:56:48 +0000
ROA not before: Sun 07 Feb 2021 11:56:48 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.192.24.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5111 (0x13f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:56:48 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=500BFD3A427C827844B0A3194A61CC776977B7B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:71:4c:0c:60:4d:47:bc:4b:76:28:f7:16:7a:
dc:5e:a4:b5:b2:7c:cd:fe:f5:02:f8:d1:7a:25:d3:
fe:11:e4:9a:75:c8:3e:d4:39:3f:e5:31:ae:0e:83:
ae:e1:76:f1:cd:2c:60:15:12:b3:52:a9:17:7e:42:
0d:7a:ec:99:ee:07:a4:48:46:a8:7a:d6:c9:42:8d:
51:08:df:f2:c7:41:1e:b3:81:85:5f:50:fa:41:8e:
d8:dd:c1:c8:41:c3:e3:f8:53:43:b6:4e:a9:ab:ca:
94:d2:7d:39:48:81:41:cb:7e:46:81:61:0c:07:ee:
15:35:77:00:83:a5:1d:47:64:1e:4e:8a:99:26:3b:
d1:f3:ec:03:60:fb:71:78:17:4d:97:72:59:a4:c7:
96:fb:ba:93:38:0f:b5:e4:5b:03:53:01:53:3f:1a:
bd:8a:7b:66:dc:dc:ec:de:75:67:6c:08:c8:3a:c7:
e5:3f:e1:69:5a:27:72:2d:65:e3:03:7b:17:a5:d0:
b0:50:d0:c1:29:69:c9:8c:c2:ad:ed:90:9d:91:11:
10:80:97:76:bd:79:1d:8c:6f:93:c5:dc:77:c8:b5:
d9:89:03:86:3b:4c:a3:61:e8:f2:17:c6:24:89:0b:
1c:03:02:be:d3:90:95:76:d4:82:9d:ea:7f:26:9d:
8e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:0B:FD:3A:42:7C:82:78:44:B0:A3:19:4A:61:CC:77:69:77:B7:B7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UAv9OkJ8gnhEsKMZSmHMd2l3t7c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.24.0/21
Signature Algorithm: sha256WithRSAEncryption
5b:a1:68:63:92:19:60:66:ca:e3:ec:2a:a8:4b:52:d7:84:e7:
ed:6f:d1:45:7e:dc:5e:90:41:fb:27:47:42:ac:a0:98:9e:da:
a3:32:b9:2a:01:4f:e9:4e:86:80:72:8d:1d:de:7e:64:3c:0d:
9b:4a:a6:19:b1:3c:00:ba:1d:c9:35:57:1e:21:6b:b7:77:b9:
3a:d7:a5:25:70:0c:22:4c:a9:31:30:86:46:c4:c4:47:bf:7d:
70:24:07:f7:6f:61:07:08:94:23:58:2b:da:bc:2e:d0:01:9b:
3c:9b:1e:68:2f:70:5c:b8:4f:02:ac:7c:14:f9:5f:b0:53:81:
b7:16:ca:98:42:3f:0e:58:e2:7b:44:af:de:0f:9e:98:c6:e3:
86:db:8b:e4:01:eb:04:eb:f5:91:67:68:33:0f:8b:9d:03:11:
b4:af:d5:25:01:03:0c:ba:7f:0e:99:94:e9:66:2b:e5:ad:bf:
e7:eb:2b:a7:29:2d:a9:7d:e5:c5:57:e6:6a:35:6f:88:30:f6:
8d:9d:ac:c8:92:1e:02:d5:bc:04:04:fe:8d:8f:ea:59:47:fc:
4c:5d:08:7f:b8:ee:3c:74:1b:53:7f:0a:1b:40:33:ef:5a:84:
9e:7f:10:b6:0a:c0:f6:6c:13:52:7c:e0:85:e9:85:7b:a1:13:
75:01:5a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org