Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YPpxd-T2GfkAg7lDjTVwKEIrq-k.roa
File: YPpxd-T2GfkAg7lDjTVwKEIrq-k.roa (raw, json)
Hash identifier: ne2bF7XWYZ/+KWDu5TNz05qsxwOMo5jD0mN0IxLQ1T8=
Subject key identifier: 60:FA:71:77:E4:F6:19:F9:00:83:B9:43:8D:35:70:28:42:2B:AB:E9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 15BF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YPpxd-T2GfkAg7lDjTVwKEIrq-k.roa
Signing time: Sun 07 Feb 2021 12:06:18 +0000
ROA not before: Sun 07 Feb 2021 12:06:18 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.68.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5567 (0x15bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:06:18 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=60FA7177E4F619F90083B9438D357028422BABE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2e:2b:95:d5:80:49:0d:30:67:3f:bd:8e:0b:
e4:da:95:3c:d8:0a:9a:cd:14:00:f7:1b:1f:37:7b:
1d:e2:74:06:dc:12:c2:d5:dd:34:45:b9:02:be:8a:
fe:0d:24:8f:dc:9f:4a:e1:c5:c1:8f:d1:df:43:05:
be:8c:82:1c:d8:22:4a:4c:44:be:79:f2:6c:8a:b8:
f5:1f:2a:44:20:fb:9d:29:5f:ea:99:e9:c9:c3:99:
09:44:98:a2:31:57:14:7a:61:80:2b:e0:63:98:ae:
a7:4c:9a:a2:86:7e:5f:43:a1:8d:ae:8f:bc:65:97:
b2:e2:10:3a:d9:c4:53:96:17:36:6e:42:6e:90:e8:
1e:94:f5:fa:91:16:4e:65:57:90:dd:0c:20:32:fe:
6a:31:cd:e7:d9:c2:ab:81:df:6b:6b:68:8d:4c:73:
eb:2d:db:95:e8:e1:92:3b:6a:be:87:27:33:81:b5:
d0:64:73:cb:40:1d:ee:1d:cc:f7:4c:b3:18:12:61:
41:f6:49:f2:04:f2:ab:62:fa:38:16:00:f0:fb:01:
c4:13:10:b4:77:a4:b7:36:56:3e:02:c7:85:48:96:
d7:8c:13:29:57:73:f7:1c:7b:36:c9:f3:35:d2:33:
ed:ba:c5:1b:90:6f:34:bb:cf:e7:f8:8b:76:06:7f:
0b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FA:71:77:E4:F6:19:F9:00:83:B9:43:8D:35:70:28:42:2B:AB:E9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YPpxd-T2GfkAg7lDjTVwKEIrq-k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.68.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:8d:30:cf:9f:fe:b2:dd:78:57:5c:35:b7:aa:74:5e:cc:96:
9e:81:a6:57:f6:f3:f4:54:fe:18:12:bb:95:d8:9d:68:ac:6a:
07:8b:3a:7b:5b:6f:43:c5:c1:51:5e:7e:9d:41:a7:e8:43:a3:
64:ad:a3:62:37:bd:a1:b2:10:39:51:69:c2:35:3b:f5:f3:fd:
2d:bc:c1:a3:54:26:c1:5c:21:c2:b5:7f:07:8a:f2:b6:59:d9:
96:e3:aa:f7:4a:48:4e:6c:33:de:15:7d:23:26:09:c9:cc:04:
d4:69:2d:20:ce:aa:c6:3c:44:40:66:0c:dd:75:f4:c0:7e:1f:
f1:b2:2e:53:0d:c3:76:ea:3e:4d:2b:7b:8e:ff:c9:14:84:3e:
0b:65:f5:fb:6d:b9:58:ea:ac:89:4e:59:4f:04:c8:3b:11:89:
54:76:94:bb:01:c0:77:19:77:85:b1:a0:98:0d:9e:da:bb:cd:
a7:1f:3b:32:18:84:72:85:fe:b3:da:27:43:52:30:f2:5e:d2:
d8:ac:5f:ab:95:11:23:e5:9d:b8:ef:07:a8:e9:c4:db:48:3f:
c8:0c:47:06:0f:fe:75:6d:01:f1:ba:79:be:59:0b:d3:10:90:
3b:d5:f0:a1:c7:e2:3a:dc:0a:98:05:bf:2f:7a:dc:b6:aa:62:
11:6d:29:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:34 2024 by rpki-client on console-ams.rpki-client.org