Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z2uFWIUojK47SD6O5JuS75DUFug.roa
File: Z2uFWIUojK47SD6O5JuS75DUFug.roa (raw, json)
Hash identifier: tQgdohKKEcN6Z+/5k+OHCFbOwtaMpd80ErZsehgowUA=
Subject key identifier: 67:6B:85:58:85:28:8C:AE:3B:48:3E:8E:E4:9B:92:EF:90:D4:16:E8
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1875
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z2uFWIUojK47SD6O5JuS75DUFug.roa
Signing time: Sun 07 Feb 2021 12:29:33 +0000
ROA not before: Sun 07 Feb 2021 12:29:33 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.24.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6261 (0x1875)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:29:33 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=676B855885288CAE3B483E8EE49B92EF90D416E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:76:fb:56:2f:2f:bb:1e:56:cf:d9:87:d2:8b:
ab:48:cb:a9:27:b8:30:22:0e:1d:3c:3f:9e:76:60:
66:75:ed:5b:22:64:17:ac:01:5a:3e:94:b4:54:c2:
f6:61:13:f9:b2:57:fb:22:92:7b:5b:19:cd:18:8a:
aa:a7:76:ad:74:26:b4:8e:d6:97:93:39:81:de:3f:
ab:11:c5:ef:43:dc:31:df:b8:e1:f6:b0:c3:bc:84:
f5:f3:78:cf:ce:12:24:93:c5:9a:f2:dc:2b:e7:04:
24:85:41:9b:c0:71:0b:be:5b:c7:f6:6a:a2:88:8b:
a2:b5:f3:9a:47:3a:76:59:85:7a:3a:f4:26:a4:53:
0e:98:16:d4:22:8b:7e:0a:11:07:2f:ef:a6:ad:93:
68:53:2d:45:2a:8b:05:b7:53:34:ac:9e:21:7d:eb:
b7:87:b9:08:af:f9:e6:2e:bf:19:b9:5c:07:49:af:
42:5b:46:d5:47:9f:a3:00:8c:ae:18:3d:75:4c:fd:
31:dc:25:ff:81:fe:6c:54:6b:a3:f8:c9:7c:bb:c9:
e3:30:46:13:83:e1:7e:77:b6:17:2a:61:40:a5:f3:
7e:a4:d6:79:cb:51:a6:ae:0c:1d:d8:8c:c5:01:72:
81:27:14:9b:83:06:5d:75:85:1d:b7:9f:72:4f:ad:
b6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6B:85:58:85:28:8C:AE:3B:48:3E:8E:E4:9B:92:EF:90:D4:16:E8
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z2uFWIUojK47SD6O5JuS75DUFug.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.24.0/21
Signature Algorithm: sha256WithRSAEncryption
7a:29:57:11:59:15:e6:c4:b7:20:b7:6e:9b:4b:a2:eb:9a:da:
fa:23:a3:96:df:93:ed:4e:8d:0e:9c:d7:07:cc:f1:ed:a8:c6:
70:c9:56:26:fe:09:7c:1e:43:b8:77:e1:51:93:64:5c:60:c0:
59:bb:22:d7:2c:57:ce:04:24:63:ef:9e:26:59:7c:a4:62:44:
1e:7f:bd:ba:a1:9b:f6:5d:40:40:eb:29:a6:80:cc:d2:fd:3b:
76:c1:0a:88:0b:ba:c2:f7:3a:89:b4:7c:28:08:1c:17:ac:7a:
41:72:af:70:34:21:9e:cb:c4:73:59:e3:eb:f0:d7:45:4f:9b:
83:a2:a6:0e:21:f4:dd:6e:76:d5:45:12:69:9e:4a:bc:92:fa:
b5:c5:41:16:fc:67:a7:c8:8d:a9:1f:c1:40:3a:bf:80:a1:3d:
6c:35:4a:0d:d9:3e:27:6f:fc:14:37:80:fc:2a:b3:75:04:39:
c4:13:07:f9:b2:33:d5:92:31:18:e7:f8:24:0f:60:66:27:87:
6b:41:5a:4a:86:be:57:4d:d2:48:8e:39:11:6e:e8:0d:ff:a2:
17:4a:c5:a9:b9:ab:0a:7f:9e:a0:63:48:d8:10:b2:4c:2d:b1:
87:6f:79:1b:e7:7d:8a:f1:07:d9:81:57:b1:2b:9e:9f:a9:43:
be:61:b0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:22 2023 by rpki-client on console-ams.rpki-client.org