Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z3bDZG_JmSRzE4KW_YD-YkhDEjc.roa
File: Z3bDZG_JmSRzE4KW_YD-YkhDEjc.roa (raw, json)
Hash identifier: D//RUYLvlRd3lae5xT6+mIDwxu944OJOXDFpFOIhCSo=
Subject key identifier: 67:76:C3:64:6F:C9:99:24:73:13:82:96:FD:80:FE:62:48:43:12:37
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 13E1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z3bDZG_JmSRzE4KW_YD-YkhDEjc.roa
Signing time: Sun 07 Feb 2021 11:56:31 +0000
ROA not before: Sun 07 Feb 2021 11:56:31 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.192.104.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5089 (0x13e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:56:31 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=6776C3646FC9992473138296FD80FE6248431237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ea:a2:26:a9:10:92:e3:61:9d:d6:54:3f:54:
bd:c9:b5:38:a7:85:6f:03:28:0d:13:c6:91:9f:8c:
93:38:2b:21:49:a0:de:67:89:d8:22:dd:92:72:4d:
85:a2:e4:7b:50:8b:30:d2:98:af:bf:06:cb:b0:cd:
d0:d1:eb:91:f7:33:57:31:f8:f6:7e:b9:65:0e:37:
e3:26:35:38:e0:06:6b:a5:3a:40:dc:86:23:fa:32:
b2:ce:7c:ea:3f:d2:47:ad:75:a6:a6:6d:a4:6a:6a:
e2:2e:7d:16:6b:01:43:14:e4:50:7a:f0:0d:c3:a6:
c4:a6:ae:8e:7a:25:97:09:7e:f2:33:1f:14:78:5a:
86:e4:97:a7:0b:1e:98:46:ff:6e:4e:7a:96:fc:59:
28:8f:49:69:ff:6c:5c:1d:4a:c6:b7:99:7e:90:17:
97:c5:ef:73:d6:87:9f:8f:83:8c:14:1e:a7:f1:b2:
20:97:5e:1b:a9:18:96:01:ab:2f:af:01:fd:89:a2:
dc:c0:16:d7:31:ee:d1:d7:ef:b9:d7:e0:c8:ec:45:
f1:e3:c7:65:70:63:52:72:ba:2f:25:19:56:54:bb:
75:3e:7d:fb:62:b3:6a:8c:84:d8:01:80:ef:82:a9:
8a:4f:bd:59:d0:bb:a5:04:5e:b0:f0:32:20:04:7e:
52:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:76:C3:64:6F:C9:99:24:73:13:82:96:FD:80:FE:62:48:43:12:37
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z3bDZG_JmSRzE4KW_YD-YkhDEjc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.104.0/22
Signature Algorithm: sha256WithRSAEncryption
56:e8:41:09:b8:b3:5a:99:3f:47:ae:38:c4:5f:f8:e3:cd:c7:
da:4e:66:4c:b8:e7:5a:33:0e:19:81:e8:b5:44:f6:e9:d2:14:
63:ed:85:10:ac:31:f7:3f:0c:dd:9f:96:be:0f:bb:a0:79:7d:
8b:36:0d:d0:59:24:38:88:19:7f:ca:19:b9:81:5e:92:3e:11:
88:84:d6:17:63:ea:99:92:57:7d:a8:ca:ef:32:f6:56:37:28:
3a:cd:84:10:9e:7a:3e:a2:42:0c:9f:b2:ad:43:fa:26:fc:9c:
11:72:0f:05:25:fd:5a:b2:4a:20:a1:d1:9c:1b:1a:7c:a1:94:
99:4c:41:3b:d0:09:9f:f7:2d:1b:5b:d1:8b:3a:b5:bd:f9:fc:
69:79:37:e3:ce:2c:93:ae:fc:32:0f:ca:39:ed:46:67:e4:39:
88:91:43:8e:89:b7:29:5a:e7:cb:5a:a0:79:5b:2f:34:41:c5:
c9:b4:53:45:f4:96:ad:20:ca:9c:81:62:c0:44:1c:ae:d6:1f:
7b:d1:3c:2a:97:ab:80:b6:22:b7:a3:41:e3:08:28:3f:5c:e4:
a8:5e:17:92:c7:3f:a7:e6:93:b2:8f:dc:51:85:ea:6b:a6:10:
5d:38:c5:59:20:1b:7a:b8:11:37:23:ce:fc:68:1f:c5:c2:d8:
73:ec:b4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:34 2024 by rpki-client on console-ams.rpki-client.org