Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YP3MBkm4KRiMRpxb84E-eWsTwF8.roa
File: YP3MBkm4KRiMRpxb84E-eWsTwF8.roa (raw, json)
Hash identifier: CT/2SSVnG2iS2GRRvESkPcSFjYh2ojPDpdK3eDloeRs=
Subject key identifier: 60:FD:CC:06:49:B8:29:18:8C:46:9C:5B:F3:81:3E:79:6B:13:C0:5F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 14AB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YP3MBkm4KRiMRpxb84E-eWsTwF8.roa
Signing time: Sun 07 Feb 2021 11:59:34 +0000
ROA not before: Sun 07 Feb 2021 11:59:34 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.192.144.128/26 maxlen: 26
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5291 (0x14ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:59:34 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=60FDCC0649B829188C469C5BF3813E796B13C05F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:41:6e:63:df:a9:6b:2e:2f:df:85:36:af:57:
d1:46:81:00:17:2c:0d:16:f7:d1:f6:6b:74:46:ce:
f1:4e:ed:67:d8:bb:70:7c:ec:a6:be:9f:29:04:c7:
18:f6:ed:ba:6f:1d:5d:28:ff:98:6b:c9:f7:12:d8:
ea:3a:84:59:bf:b9:50:99:a9:ad:59:20:c0:d9:12:
51:be:44:73:4f:7d:a6:79:10:1f:79:ec:c8:23:c1:
c1:ea:29:3f:c1:93:e2:db:e6:fb:6b:d1:14:d8:33:
0e:5b:51:a4:5f:4c:59:28:10:0c:3f:d2:ce:47:48:
39:ab:d5:26:21:95:dc:42:7f:03:4d:5a:cc:e2:1c:
95:84:84:01:6e:68:88:a9:9d:b6:31:53:e8:05:1b:
10:89:3c:cc:ae:ba:eb:7c:3e:8f:9f:91:83:c9:be:
0f:00:02:97:d5:3d:a9:99:50:fd:d3:ff:a1:df:b0:
df:39:46:d1:be:f7:55:a4:76:62:6e:c7:b9:1c:e5:
ea:84:16:bd:8a:1d:3b:bc:a1:6f:d3:0f:79:62:3c:
37:9a:10:fd:4f:30:b2:17:73:fa:49:63:4b:32:60:
d8:6d:fb:8d:0c:58:3f:a1:4e:a9:d0:34:2b:b8:7c:
24:2a:e4:80:ef:02:a9:8a:93:fb:37:f1:c0:c3:c0:
fe:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FD:CC:06:49:B8:29:18:8C:46:9C:5B:F3:81:3E:79:6B:13:C0:5F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YP3MBkm4KRiMRpxb84E-eWsTwF8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.144.128/26
Signature Algorithm: sha256WithRSAEncryption
25:77:30:77:d1:61:f9:73:f8:54:e0:48:21:c9:5a:d6:ca:ec:
61:82:7b:c4:f2:c2:1f:2c:6a:9b:8f:82:27:22:55:cb:3e:6b:
2b:23:f5:82:69:a1:50:05:7b:91:05:05:39:17:aa:e5:13:5e:
2b:cc:c3:26:47:d9:96:1e:f2:06:e1:7d:75:5b:6f:39:d6:f9:
02:c1:90:5c:40:65:47:bb:61:8b:b3:35:5c:59:7e:0b:8f:0b:
05:00:c3:66:c7:d7:c0:e6:59:3f:d7:dc:29:67:20:8b:93:8c:
03:a9:51:e7:6b:88:fd:d1:61:de:ed:b7:bc:38:cb:e7:c3:e1:
08:40:7c:2f:52:11:72:05:f3:33:4c:ac:72:cd:55:99:29:2d:
c1:8f:df:30:87:c6:2f:33:05:c1:a5:07:9e:52:9b:b4:db:2d:
7a:f2:b8:dd:56:80:ee:6a:82:0a:d9:dd:ff:af:40:5e:80:f9:
62:b3:49:2a:95:70:fe:c4:57:9e:c4:d5:9c:1b:be:62:8e:14:
28:c4:73:74:f1:80:b2:9a:3d:71:eb:ae:71:7b:0e:b2:fc:74:
d8:d5:4d:b4:da:e2:7f:74:a0:03:61:7a:89:4d:f4:13:d1:d1:
f1:26:37:3b:f2:20:bf:ae:db:df:b8:47:af:10:1a:07:a5:f9:
9b:c3:40:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:34 2024 by rpki-client on console-ams.rpki-client.org