Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YKmXca1tQlCTKpFImpxEqT5A1RE.roa
File: YKmXca1tQlCTKpFImpxEqT5A1RE.roa (raw, json)
Hash identifier: dgb92/8AedJ0wOgzXJn2Dewe8rFDNJ9njMDoI7JZqG0=
Subject key identifier: 60:A9:97:71:AD:6D:42:50:93:2A:91:48:9A:9C:44:A9:3E:40:D5:11
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1619
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YKmXca1tQlCTKpFImpxEqT5A1RE.roa
Signing time: Sun 07 Feb 2021 12:08:19 +0000
ROA not before: Sun 07 Feb 2021 12:08:19 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.8.192/26 maxlen: 26
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5657 (0x1619)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:08:19 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=60A99771AD6D4250932A91489A9C44A93E40D511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f2:4d:6b:44:c4:6e:77:84:4c:5f:6a:ef:4c:
8c:19:aa:73:95:0e:67:99:10:47:74:0f:8f:ce:88:
07:11:29:d0:1f:f5:40:d4:93:1b:f6:dd:77:cb:f8:
ef:af:de:cf:12:b9:fa:19:c6:31:4b:46:e4:e2:f3:
a6:09:15:ab:5b:85:84:73:76:21:c1:b7:98:ed:36:
00:5a:94:48:fb:0a:8f:d9:d3:3c:d1:53:16:f1:b3:
e2:ea:e2:fd:d9:ab:14:57:e7:ad:55:34:c4:2c:47:
fc:07:ee:59:67:f3:5d:13:63:08:fc:61:b1:ac:f4:
d4:6c:26:29:3e:5c:5a:c8:6a:2c:bc:15:00:54:ce:
8d:31:dc:09:5c:94:3a:25:67:ad:97:3e:37:ad:e3:
9a:b2:53:8f:6a:97:bc:e6:80:45:65:81:92:88:19:
00:f7:78:a9:6b:60:97:df:a5:64:7f:ea:22:cf:e4:
1d:0b:f1:76:72:e8:a0:f4:2a:3e:42:b1:1b:9f:17:
6f:58:91:09:61:c2:2a:58:9c:a5:de:6f:25:6c:06:
ba:66:a3:54:fe:74:7b:f7:bf:d5:e0:fb:90:32:e7:
33:80:f9:83:a3:94:fd:93:9e:42:88:0d:db:1e:03:
0c:2e:d6:dc:b6:60:94:d3:75:dc:09:85:0e:2a:dd:
73:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A9:97:71:AD:6D:42:50:93:2A:91:48:9A:9C:44:A9:3E:40:D5:11
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YKmXca1tQlCTKpFImpxEqT5A1RE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.8.192/26
Signature Algorithm: sha256WithRSAEncryption
4c:f6:3d:28:55:08:6b:98:f9:c0:2c:79:ef:45:5f:df:84:e0:
db:a6:06:01:c3:db:34:33:ee:96:41:30:81:2d:40:11:6f:38:
1b:1a:33:cd:a3:0f:86:b6:2f:b8:67:99:09:8e:a9:50:11:73:
cd:3c:2d:ea:4f:76:0a:a8:92:ca:84:82:9f:20:0d:bf:98:3b:
b9:d0:20:97:3b:12:c1:f4:0d:08:ea:ca:1d:fa:35:ab:8d:32:
fa:28:15:59:82:07:a6:11:4a:24:94:44:be:5c:6b:06:d6:31:
ac:c0:e9:f4:8c:2b:55:c2:1d:4d:87:58:50:16:d3:b6:36:20:
06:35:9c:c8:6c:7a:a0:c9:b0:d8:48:15:e1:20:e5:39:87:63:
2a:45:13:8c:f0:58:0e:7c:04:10:f9:96:fe:fa:99:22:b2:e5:
1a:20:3f:c5:c2:f8:9b:53:38:a3:b9:98:52:4d:28:63:6a:b1:
82:64:ae:79:80:d1:69:4c:6a:65:21:f7:8a:22:d4:36:07:ce:
82:b0:5b:8f:38:24:73:52:22:bf:82:46:59:83:47:64:99:fb:
fc:b8:21:57:85:e3:65:a5:dd:e0:30:98:6a:de:08:3d:2f:ce:
3d:5b:15:10:21:26:5f:39:92:98:31:af:9b:61:5a:fb:2c:a6:
df:81:89:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-fra.rpki-client.org