Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YWU8gbTezJVNUcOH-aGDLx_RK5E.roa
File: YWU8gbTezJVNUcOH-aGDLx_RK5E.roa (raw, json)
Hash identifier: nGxFO3tYUDGZsTGr/ISx7SJaOOYUA+ggfCnfvrPgl8k=
Subject key identifier: 61:65:3C:81:B4:DE:CC:95:4D:51:C3:87:F9:A1:83:2F:1F:D1:2B:91
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1779
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YWU8gbTezJVNUcOH-aGDLx_RK5E.roa
Signing time: Sun 07 Feb 2021 12:19:32 +0000
ROA not before: Sun 07 Feb 2021 12:19:32 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.120.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6009 (0x1779)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:19:32 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=61653C81B4DECC954D51C387F9A1832F1FD12B91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:71:3b:2a:41:2e:5f:bd:df:25:75:f0:fc:ef:
fa:64:b3:e1:c0:1c:90:88:af:9a:42:64:8c:87:f3:
ac:a2:25:bc:75:68:8a:6d:6c:67:27:1c:d6:01:af:
2a:76:a2:db:64:49:11:1b:10:9f:1b:5c:15:6e:04:
20:22:21:8a:69:8e:cd:c7:25:24:da:a0:f8:96:c8:
2d:dc:fa:11:b0:82:f7:34:7e:6c:e7:c9:36:66:70:
a0:c1:04:6d:f3:26:f4:05:e8:8e:f2:b1:d1:ea:fe:
4a:fc:aa:87:ba:15:31:fd:bf:81:47:66:58:49:31:
7e:35:e7:71:eb:f4:78:bc:d5:28:c5:6c:d5:89:c9:
5d:a2:63:16:8b:80:b1:26:ea:2a:c6:d9:36:bc:d3:
96:5b:f4:8e:c1:e7:b5:7c:c6:30:25:19:79:38:f8:
45:89:cd:1c:c5:ec:67:62:3f:bc:0e:4a:eb:f6:03:
80:ac:1f:7d:f1:c2:9c:bc:d4:03:09:63:6c:f7:ca:
00:3e:f8:fb:7c:04:d5:bf:5c:83:70:5a:2f:87:5a:
25:ce:6e:ad:9a:4a:66:12:51:4e:af:68:c3:96:f8:
02:a3:b5:65:01:d6:99:88:de:7b:3e:88:d3:f4:b2:
62:26:7a:48:06:cd:3d:2c:9d:92:6e:c2:39:d7:1c:
f1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:65:3C:81:B4:DE:CC:95:4D:51:C3:87:F9:A1:83:2F:1F:D1:2B:91
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YWU8gbTezJVNUcOH-aGDLx_RK5E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.120.0/21
Signature Algorithm: sha256WithRSAEncryption
2a:47:ee:dd:53:13:ba:ed:aa:59:64:65:70:a3:77:5d:5a:2e:
58:e3:0e:05:dd:09:c4:3b:53:b6:ba:a3:16:79:08:8e:a9:f6:
04:f5:2a:a1:3b:13:91:95:4d:7e:12:5d:dc:5f:0e:8e:71:9b:
33:1a:78:a6:45:49:43:d1:b2:fe:f3:f3:f0:11:8a:3b:b4:ce:
4a:fc:fc:cc:4d:ba:16:d6:b8:6b:25:5a:c9:ac:e4:c4:52:76:
64:27:ec:b4:88:cf:78:3c:1b:1c:97:de:68:0d:d2:72:cd:94:
48:17:86:a7:f3:69:87:55:b0:2c:ea:7b:15:3a:6c:6e:90:2d:
3e:97:ef:ec:58:dd:88:f7:42:3b:6c:45:63:61:10:8d:32:e3:
53:e6:6e:17:ff:70:2a:64:be:e2:11:65:77:44:41:11:3b:08:
55:fe:de:e0:5a:17:af:86:e3:68:68:16:01:71:dd:d9:82:ec:
7b:10:68:7b:7b:83:26:b3:ac:0c:0b:74:1c:60:df:24:82:8b:
d1:8e:14:1a:b5:bf:c4:46:c0:37:0d:ad:75:08:8a:df:c3:ad:
35:b6:08:3f:a0:fd:e6:1b:90:b5:ab:18:3e:b4:b4:dc:ce:3f:
04:11:06:11:ff:db:9c:ac:6b:a3:0f:22:6a:42:39:bd:fa:3c:
05:38:e2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:34 2023 by rpki-client on console-fra.rpki-client.org