Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VZtbFSzs7S5rt4_bmr7KVhOlsPg.roa
File: VZtbFSzs7S5rt4_bmr7KVhOlsPg.roa (raw, json)
Hash identifier: 8pVp+cDms3S2+rYBt1Aae5ieOnni9vtCLqLenbsCIug=
Subject key identifier: 55:9B:5B:15:2C:EC:ED:2E:6B:B7:8F:DB:9A:BE:CA:56:13:A5:B0:F8
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 13ED
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VZtbFSzs7S5rt4_bmr7KVhOlsPg.roa
Signing time: Sun 07 Feb 2021 11:56:40 +0000
ROA not before: Sun 07 Feb 2021 11:56:40 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.192.128.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5101 (0x13ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:56:40 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=559B5B152CECED2E6BB78FDB9ABECA5613A5B0F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:39:c3:f7:1e:41:c9:b7:27:30:08:c3:8c:59:
6b:ae:ea:b2:33:b0:b6:d1:81:fd:fb:63:de:86:59:
2b:6f:cc:9e:d6:4e:1b:f3:d1:58:0d:95:36:e4:b8:
db:dc:75:45:71:19:67:29:ff:38:b7:ab:a7:72:89:
e6:b7:d7:eb:32:51:16:03:50:f3:aa:ec:df:cd:18:
6a:37:e3:98:d6:80:26:07:8f:16:d5:eb:17:44:c7:
15:47:a9:23:a3:7a:d7:31:c1:91:45:5d:8e:1f:5a:
2b:3d:a9:b6:5e:85:3f:a3:2e:28:db:e4:ef:52:56:
97:1c:b3:41:b5:9e:5b:63:5f:4e:7f:38:c1:d6:ed:
c5:73:8c:7d:57:9e:28:be:33:36:8e:73:62:26:04:
05:9b:2c:ad:d0:be:b3:c5:8b:af:8d:40:5b:ca:3d:
5b:4d:4a:6c:a3:04:bc:14:39:ca:10:b1:c9:bf:3d:
ef:9d:1d:74:46:a3:2d:9b:a0:2b:b7:d1:0a:bb:6b:
68:2a:85:e3:20:80:c2:68:a4:7a:ea:8e:16:77:4a:
fa:b4:59:ce:42:0c:24:69:71:2f:74:a0:ff:69:c4:
ce:24:cd:f7:04:ea:16:64:04:e2:05:57:86:6e:81:
84:6a:79:46:b9:a9:f2:8b:dd:8b:7f:89:ae:c7:32:
61:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:9B:5B:15:2C:EC:ED:2E:6B:B7:8F:DB:9A:BE:CA:56:13:A5:B0:F8
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VZtbFSzs7S5rt4_bmr7KVhOlsPg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.128.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:c1:7e:26:ab:e3:1d:c7:1b:d2:ac:8f:02:ea:ad:ca:fa:66:
59:75:3c:aa:97:e4:01:76:99:48:34:71:d4:88:d7:40:fb:a9:
cb:60:08:aa:f6:8c:77:8a:f4:75:31:7c:53:29:65:3f:06:f9:
aa:b3:ee:8b:50:27:82:21:6c:c5:cc:4f:fb:df:ba:0e:1e:27:
85:65:2d:e1:31:17:f8:b2:b5:48:39:f6:9b:a9:a8:61:4b:a7:
8e:79:e2:09:ee:48:91:bc:ff:56:fc:37:11:14:11:49:af:a4:
0f:35:61:c1:1d:4f:66:35:1d:e0:2e:b6:c6:80:92:75:af:45:
90:d1:07:06:9a:35:46:e1:b7:f1:24:86:c4:07:2f:65:67:3e:
14:ea:48:d7:cf:80:8c:bc:55:81:d8:f3:eb:67:13:20:69:e8:
e4:db:36:b9:ef:3b:9f:eb:cc:c4:c5:4a:70:76:a5:38:56:3b:
47:81:f0:90:ca:6b:5f:42:dc:47:64:e7:4c:ce:25:9a:47:64:
2d:2c:89:e8:53:08:ed:92:cc:73:8b:0a:1d:6a:8d:84:23:5e:
f5:28:16:e6:4a:da:39:a6:e1:ef:13:61:6d:b1:44:e2:bb:5c:
bb:20:3d:de:05:d2:33:54:76:ff:d4:28:e5:1c:48:87:5e:9f:
03:68:d8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:32 2024 by rpki-client on console-ams.rpki-client.org