Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VTYqj9HH4PREnI-a7XNVZ4rAKjk.roa
File: VTYqj9HH4PREnI-a7XNVZ4rAKjk.roa (raw, json)
Hash identifier: XItIGqDFs1n1BbTxKYXKl8chlEM04rHbkvr9OV6DeUg=
Subject key identifier: 55:36:2A:8F:D1:C7:E0:F4:44:9C:8F:9A:ED:73:55:67:8A:C0:2A:39
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 172D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VTYqj9HH4PREnI-a7XNVZ4rAKjk.roa
Signing time: Sun 07 Feb 2021 12:17:13 +0000
ROA not before: Sun 07 Feb 2021 12:17:13 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.44.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5933 (0x172d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:17:13 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=55362A8FD1C7E0F4449C8F9AED7355678AC02A39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:41:e2:75:93:bc:10:91:82:fb:ee:2e:9c:c2:
a4:b1:31:67:62:8e:08:86:f8:d5:68:5a:b1:92:8f:
06:ef:37:2e:63:cc:b3:a9:dd:c7:a4:e5:2a:18:b2:
fa:7f:b8:8f:8d:a4:4c:03:8f:a0:2d:c6:38:a4:6b:
3a:06:fa:01:9a:fb:d9:d8:c4:cf:58:41:d4:c8:77:
de:7b:ce:a1:9e:d6:37:25:da:72:0e:32:fa:5e:d3:
b6:35:ae:e4:b7:47:d6:7b:7d:ed:95:70:13:d2:51:
0d:83:f8:b9:71:7d:49:5b:fe:23:cf:17:f4:20:45:
b2:98:37:af:17:14:7e:16:67:50:22:d4:3e:86:d7:
a6:8f:ec:7c:dc:b1:36:36:ce:60:f3:b0:49:b1:cc:
27:ee:86:4f:db:1b:3d:ed:3a:3c:6f:38:c4:29:7d:
af:0b:b3:0b:c8:0c:f5:08:55:21:4b:40:07:a7:c1:
e7:ba:75:0c:6c:08:11:d2:8d:d5:79:db:56:fa:52:
3d:81:00:f6:3a:b0:83:6d:f1:85:f6:26:5f:43:cb:
58:87:39:81:69:31:71:ce:19:fd:c0:1c:de:da:17:
ff:fa:39:37:f2:d3:08:8d:33:84:7b:9d:34:2b:04:
02:74:5b:02:52:b1:71:24:09:3d:32:4d:6e:3e:f5:
42:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:36:2A:8F:D1:C7:E0:F4:44:9C:8F:9A:ED:73:55:67:8A:C0:2A:39
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VTYqj9HH4PREnI-a7XNVZ4rAKjk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.44.0/22
Signature Algorithm: sha256WithRSAEncryption
16:6a:33:32:9b:4e:58:47:9b:e7:fc:d8:13:8b:a2:67:54:6e:
6e:f8:ea:d9:1e:ad:58:ea:a2:9b:0c:3d:0e:dd:a6:aa:f8:a1:
6d:0a:dd:40:5c:bb:3e:f6:e0:12:b9:fc:a9:38:db:39:e7:4e:
c7:42:5b:20:f1:cf:f5:c9:05:96:7f:25:8f:99:41:af:a0:1c:
e1:cd:e9:50:91:16:12:d6:df:e9:f1:cd:1a:50:4d:71:2e:45:
8e:8d:a9:fe:6e:70:77:09:0d:94:86:43:32:c0:e7:16:7d:ac:
d3:63:19:7f:b1:04:68:e5:3d:ba:9b:c7:16:ed:25:e8:66:b3:
af:1d:bd:86:59:73:96:30:f0:25:7b:fc:e7:b4:e9:bd:80:be:
02:f3:2f:1f:7b:16:b4:ca:ed:ad:42:9e:df:72:f9:cd:2c:a5:
58:87:8f:89:f5:fb:d2:45:41:e6:6f:78:9d:8e:dc:eb:89:5f:
c6:e1:79:b8:ff:24:14:a7:69:e9:ef:89:95:9b:e1:02:b1:25:
47:06:fe:3c:05:d8:e7:80:c7:d7:7d:3f:85:25:cf:32:05:c8:
87:f2:2e:68:f9:f7:98:24:a4:4d:be:a3:75:c7:5c:47:11:dd:
57:c6:88:41:a1:be:16:05:c7:66:53:46:94:75:16:f7:81:8a:
d0:44:a9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org