Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UDZYh7Os1ZnnI-FW6bjzdbFyMfY.roa
File: UDZYh7Os1ZnnI-FW6bjzdbFyMfY.roa (raw, json)
Hash identifier: CFFxp4680tCsUgg6MblAaMLHNZBLr1v+z6LKSalC0hQ=
Subject key identifier: 50:36:58:87:B3:AC:D5:99:E7:23:E1:56:E9:B8:F3:75:B1:72:31:F6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1651
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UDZYh7Os1ZnnI-FW6bjzdbFyMfY.roa
Signing time: Sun 07 Feb 2021 12:09:40 +0000
ROA not before: Sun 07 Feb 2021 12:09:40 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.192.240.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5713 (0x1651)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:09:40 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=50365887B3ACD599E723E156E9B8F375B17231F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:78:e7:45:82:47:31:6e:65:d4:8b:01:6d:13:
23:30:80:b8:d6:f6:04:c7:96:69:62:55:73:b0:81:
b5:29:83:2c:65:a4:26:ed:cf:aa:47:ac:38:26:ae:
3d:97:19:7f:20:9b:aa:ce:f4:db:36:f5:ef:95:34:
9c:94:28:f0:7b:fb:5e:12:a1:34:9c:bd:38:55:00:
48:33:5d:33:6c:44:51:71:aa:5c:08:0e:fd:1d:37:
46:b0:4c:69:77:d6:c7:a3:93:22:27:47:39:7d:be:
80:72:61:8e:73:c3:62:2a:07:7f:0b:0e:cf:95:4a:
4a:62:48:49:7d:c0:25:fb:69:ba:16:4d:65:15:40:
13:f3:76:eb:e3:0d:03:a5:c5:9c:dd:4f:cd:f1:af:
cd:11:8d:96:7b:52:0b:62:1f:93:04:fc:4b:57:2f:
1d:3d:ca:1c:4d:e5:18:bb:01:f9:2a:f2:02:e8:e2:
76:c4:2b:f5:ba:1f:c4:d6:b0:f6:1b:e1:c6:7a:b6:
79:ea:fa:85:d3:c5:f7:d0:6e:f6:76:1a:89:3f:f1:
e8:84:84:9a:5f:94:f5:38:5c:e8:02:b9:52:d7:18:
65:f2:b0:2f:78:cc:f1:05:bc:7a:b3:57:01:e0:33:
a5:43:c2:2a:eb:bd:f4:51:31:ef:b3:2b:6d:87:b3:
62:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:36:58:87:B3:AC:D5:99:E7:23:E1:56:E9:B8:F3:75:B1:72:31:F6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UDZYh7Os1ZnnI-FW6bjzdbFyMfY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.240.0/21
Signature Algorithm: sha256WithRSAEncryption
41:01:50:b5:43:b6:35:96:72:32:65:9c:fa:1f:64:c7:63:d6:
61:73:63:8f:e2:55:23:e5:71:77:9c:98:54:9e:bf:09:03:9e:
d8:ae:ca:88:de:71:fc:18:7b:69:a9:10:cd:74:ea:96:22:50:
d0:fc:a2:e4:24:cf:dc:ac:23:57:46:72:70:1f:bc:af:8b:8d:
48:09:28:6a:b5:9a:dc:83:9a:c0:30:a8:35:05:f4:9a:13:a8:
50:13:d4:a9:a1:f0:7d:3b:e7:17:2d:2e:2d:b3:7c:eb:4f:09:
5a:cf:fb:77:f5:7b:4d:7c:f7:58:1c:5e:fa:3d:4b:1f:0a:fa:
36:5c:35:ad:09:08:94:c0:f7:3f:58:7e:be:11:f8:68:ea:9b:
33:da:c4:34:8b:0a:9c:ba:cc:90:02:37:5f:52:21:e1:c0:73:
0b:c4:92:25:34:6a:53:a2:79:8d:76:ba:64:ad:fe:3c:af:0b:
c4:61:d7:8e:27:cb:d0:06:26:7e:64:85:f9:e4:7a:c8:a7:81:
e2:ca:bc:20:f9:81:2d:2f:73:40:1c:f1:33:ed:3d:81:d7:70:
42:96:3f:3e:3d:4f:06:f5:55:16:90:32:fd:f7:63:4e:b0:48:
ba:84:06:f8:06:eb:bd:c0:f7:fe:62:3a:dd:93:80:92:c4:b7:
a5:fa:2a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org