Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YfaXXL9gLyEIxaEEsm2mUzgAf48.roa
File: YfaXXL9gLyEIxaEEsm2mUzgAf48.roa (raw, json)
Hash identifier: X+3GFbXmFtEwGR5T+l9KSG8Oqi0zB6vYqAwvCK76Fmw=
Subject key identifier: 61:F6:97:5C:BF:60:2F:21:08:C5:A1:04:B2:6D:A6:53:38:00:7F:8F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1785
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YfaXXL9gLyEIxaEEsm2mUzgAf48.roa
Signing time: Sun 07 Feb 2021 12:19:55 +0000
ROA not before: Sun 07 Feb 2021 12:19:55 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.88.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6021 (0x1785)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:19:55 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=61F6975CBF602F2108C5A104B26DA65338007F8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:95:b7:95:44:92:d7:c8:be:8a:f0:77:fb:ee:
fb:8c:a5:2f:57:92:b7:a4:3c:69:2d:3e:93:b1:92:
a6:b7:b2:9e:49:0d:bc:f5:bc:a0:65:01:3a:dd:4f:
2c:25:10:ac:23:e6:77:e6:e9:d2:0f:7b:4e:e4:9a:
e8:43:5e:ac:47:b8:22:b1:2f:cb:eb:f6:08:cf:8f:
2a:82:24:bf:f9:84:04:a4:5b:58:0e:4b:3c:b4:c6:
d0:bd:0f:7f:61:4f:56:72:a4:b2:b1:0b:c2:a8:40:
8e:06:6f:13:86:1a:84:3a:f3:9a:a0:68:57:eb:1a:
1a:9d:d5:20:fd:7c:2f:7b:3d:f9:02:9f:1e:84:ae:
56:43:47:b2:a0:49:a7:fc:4c:2c:31:18:3a:b4:97:
f5:03:b4:23:f8:bc:cb:26:8d:96:62:40:d4:ea:c4:
ab:d7:0f:dc:0f:08:73:df:8b:9c:5e:c7:4d:16:bd:
ca:6a:a9:d2:71:ae:87:ea:1c:41:81:5e:c6:9f:ac:
94:d8:25:1f:a9:b7:5b:2e:5e:88:98:0f:ca:60:18:
d1:b1:cc:2c:4c:37:2a:60:7b:a9:17:27:9e:fc:61:
60:5e:53:7f:17:69:46:c0:ec:a8:a7:11:8a:fe:f0:
10:22:bb:e1:4e:da:f0:36:4f:50:70:fb:6b:db:67:
57:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F6:97:5C:BF:60:2F:21:08:C5:A1:04:B2:6D:A6:53:38:00:7F:8F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YfaXXL9gLyEIxaEEsm2mUzgAf48.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.88.0/21
Signature Algorithm: sha256WithRSAEncryption
8c:4b:3d:f8:c9:9e:85:22:47:17:39:14:39:56:ec:b2:72:62:
2b:91:10:a8:66:59:51:29:34:8f:59:8c:cb:09:08:45:6e:3f:
9e:9c:bf:c3:de:dc:95:d7:dd:b1:60:0d:73:47:16:ec:6d:59:
5c:27:1f:eb:f6:fa:5d:12:05:5f:85:a2:bf:a4:5b:35:5b:db:
06:ce:69:79:27:a0:b8:f5:58:2c:47:15:35:74:02:59:77:85:
1e:b3:3c:67:2f:de:54:30:41:79:47:fb:74:b4:45:dc:bf:2f:
c3:1f:31:c0:c3:07:78:0b:ea:22:53:ff:53:8c:21:39:d1:11:
f8:5d:37:3e:64:83:26:f9:3a:b6:33:23:dc:be:b8:0a:38:60:
d0:c4:7b:a3:5e:89:e4:76:10:00:e4:f3:5d:48:cb:48:67:90:
07:b9:c5:f6:8f:c1:b8:46:71:1b:97:3f:f8:46:6a:e7:c3:3a:
2c:22:0a:14:86:73:92:92:b3:2f:8b:cb:f3:c3:0e:52:b6:e2:
40:ff:05:24:05:d5:c7:ee:5d:3f:31:c2:73:f8:bb:05:c3:fd:
a7:ea:79:12:45:64:82:c7:bb:bd:9e:d0:2a:93:27:67:b8:68:
ea:0d:c8:e2:db:05:43:37:12:83:8b:61:f2:de:c3:c1:79:c4:
cb:32:14:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:22 2023 by rpki-client on console-ams.rpki-client.org