Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VJsQrhAANHQfeUondOGFCuhOXzw.roa
File: VJsQrhAANHQfeUondOGFCuhOXzw.roa (raw, json)
Hash identifier: c7JfJwfFT7IEA29HwJguBhIqvW+pJSyM9vYlsMWkVfs=
Subject key identifier: 54:9B:10:AE:10:00:34:74:1F:79:4A:27:74:E1:85:0A:E8:4E:5F:3C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 176F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VJsQrhAANHQfeUondOGFCuhOXzw.roa
Signing time: Sun 07 Feb 2021 12:19:13 +0000
ROA not before: Sun 07 Feb 2021 12:19:13 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.193.232.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5999 (0x176f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:19:13 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=549B10AE100034741F794A2774E1850AE84E5F3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d5:90:cd:58:30:89:da:67:67:e3:ac:86:4d:
cd:63:dd:1d:62:69:ee:9e:6f:51:f0:35:54:b6:76:
7a:6e:41:9c:b0:53:eb:9e:f1:69:09:3f:d7:74:d4:
6a:19:d9:54:88:32:e1:18:79:7a:18:f0:cd:ee:6b:
37:2f:4e:32:89:cd:27:95:df:24:cf:45:ba:12:67:
d5:62:71:2f:6b:ef:00:21:de:6b:e9:21:81:76:2b:
dd:fa:a6:42:e3:3b:ce:cb:11:d4:21:ba:7f:96:62:
79:ce:9d:0b:52:a1:de:9b:37:ec:87:14:7e:06:03:
88:40:3e:7e:86:f5:4e:9c:f0:8d:e2:0a:fe:df:dd:
b4:7f:23:83:fc:64:5a:c1:10:8c:50:aa:4e:30:6a:
4b:b6:e5:d4:17:09:b8:82:1e:fb:6f:9b:4b:ed:09:
ae:93:f3:e6:d5:50:57:67:10:06:59:d2:38:64:b9:
65:52:18:88:57:54:b3:9c:ec:ba:96:49:49:a6:83:
36:63:dc:17:a0:ea:ff:67:43:68:f9:7f:89:d9:7e:
21:4a:cd:b4:30:d6:78:dc:9b:76:8c:f6:fb:a8:0e:
aa:c7:6b:e0:a8:65:87:9b:04:15:72:6f:d4:41:a4:
35:3f:e0:9b:43:94:43:40:f1:f1:44:71:78:38:2c:
27:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:9B:10:AE:10:00:34:74:1F:79:4A:27:74:E1:85:0A:E8:4E:5F:3C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VJsQrhAANHQfeUondOGFCuhOXzw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.232.0/21
Signature Algorithm: sha256WithRSAEncryption
68:66:d4:38:8e:7b:8d:4e:f3:f9:af:c3:c7:80:d4:d9:35:5b:
c6:35:60:9f:db:31:b2:f0:9d:fc:8f:4f:8c:1b:6f:d2:be:d2:
78:9f:57:c6:bc:ee:c9:f6:3d:ed:ba:6d:84:78:19:0c:2f:77:
76:bc:89:cd:30:ea:f4:50:19:b1:91:60:82:c2:3f:c6:9c:62:
a9:03:2a:c3:df:59:61:68:a5:f0:b2:e5:ca:2b:35:78:27:7b:
25:a6:74:af:32:9a:4c:6b:f4:79:51:b3:ed:24:ea:38:6b:ff:
4e:5f:c3:43:6e:a7:8c:81:7c:cd:17:bc:3d:5d:67:e0:c5:31:
73:ae:45:bb:45:25:b4:58:79:72:0e:bf:b4:4a:b6:7c:c1:18:
c3:8c:a5:86:f1:4b:c1:c5:84:cb:81:3a:4d:70:4d:d9:7f:cd:
5a:79:1f:dc:68:dd:20:bd:a4:d6:b4:28:a0:0f:17:4d:2d:10:
e6:33:de:2a:b8:75:b7:6d:1f:74:b7:f6:76:a0:7e:75:45:44:
d6:c5:b3:50:3f:12:01:9c:34:77:42:03:40:5b:9e:a5:8a:31:
07:fc:20:33:98:19:1c:25:ed:3c:3d:e8:10:b4:c0:06:59:bd:
da:e0:12:bc:92:2c:85:50:92:50:47:99:0d:f6:39:21:6b:06:
7e:0f:f3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:32 2024 by rpki-client on console-ams.rpki-client.org