Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z8-mC71Pl1jdoS4eMU-r3fV52m4.roa
File: Z8-mC71Pl1jdoS4eMU-r3fV52m4.roa (raw, json)
Hash identifier: JCNCTzcr79qAIT2UzUUKk/vwf8Ayc0Viiosi3bRz9vE=
Subject key identifier: 67:CF:A6:0B:BD:4F:97:58:DD:A1:2E:1E:31:4F:AB:DD:F5:79:DA:6E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1949
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z8-mC71Pl1jdoS4eMU-r3fV52m4.roa
Signing time: Sun 07 Feb 2021 13:07:31 +0000
ROA not before: Sun 07 Feb 2021 13:07:31 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 123.193.160.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6473 (0x1949)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 13:07:31 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=67CFA60BBD4F9758DDA12E1E314FABDDF579DA6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:81:e5:bd:38:33:5d:6d:e4:10:05:bc:b0:0b:
d6:9c:f3:db:7c:8e:a1:90:9a:c4:d7:1c:4f:af:8e:
f5:5a:5e:7e:54:22:f5:5d:00:b9:aa:e0:a0:3a:87:
57:28:33:46:21:81:59:fb:a2:74:ab:b6:44:bf:ac:
06:b3:82:5b:c1:80:87:4d:dc:58:45:e1:f3:73:22:
10:6e:b7:83:7e:3e:21:2a:92:16:6b:e0:46:05:ac:
a7:fe:23:ac:1a:53:e7:e4:14:20:8a:95:36:2b:e9:
eb:3f:a0:f7:3f:b0:7d:ab:63:69:cb:37:26:82:e3:
e3:2c:98:c2:f8:32:89:e0:02:7c:ca:e7:5d:b4:49:
09:b7:cb:7d:69:56:31:28:77:10:ea:4a:01:c8:0d:
78:3e:a5:4a:52:5f:9a:e6:f0:62:92:fb:47:33:c3:
12:20:c6:a6:3b:ce:fb:55:1b:2b:ca:09:4f:9d:26:
ad:43:f0:d8:41:27:e1:1f:e0:d4:3a:92:2f:72:30:
8a:14:f3:0d:b1:e7:8e:c9:47:a4:62:3a:36:b5:2f:
e8:d2:d0:75:f9:b3:37:ce:eb:15:b7:f1:1b:f4:eb:
54:be:93:11:5a:58:63:70:bb:20:26:ce:c8:02:35:
7a:39:dd:ac:87:e4:66:02:96:ce:78:f2:de:1b:e4:
63:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CF:A6:0B:BD:4F:97:58:DD:A1:2E:1E:31:4F:AB:DD:F5:79:DA:6E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z8-mC71Pl1jdoS4eMU-r3fV52m4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.160.0/20
Signature Algorithm: sha256WithRSAEncryption
3a:f6:bd:43:f2:d7:11:57:50:3f:4d:07:fb:af:61:34:53:44:
2c:42:7d:c9:5f:7d:6b:7a:42:65:a0:ae:ee:64:7b:3d:c7:8a:
73:f4:0e:52:19:11:12:47:df:12:44:c1:9c:67:d3:2c:c1:a1:
17:95:cc:a6:f1:67:7a:30:b6:5a:bb:95:db:3d:63:5a:57:bc:
a1:e8:67:82:92:41:e8:ad:94:61:fb:70:df:c3:01:86:7f:1f:
c2:e2:76:e2:32:fd:99:4b:75:f2:39:9c:4f:05:d5:07:e5:c5:
15:91:5f:6d:07:d6:d3:13:31:fb:8b:dc:25:b6:b5:46:53:65:
82:1d:46:5c:f3:33:66:c5:eb:75:18:c9:78:2a:2b:77:da:dc:
7d:23:0a:3a:46:f5:4d:68:29:4d:f1:b9:62:98:ed:a9:ba:e5:
99:62:a7:c8:d4:c1:3a:da:34:f9:f8:e9:a9:ab:fa:1b:7e:60:
f9:3f:7c:55:9b:b6:01:64:48:96:8e:86:c1:12:ed:42:91:03:
59:be:4a:ce:18:fc:04:3b:0f:8d:44:cf:35:8a:cc:b7:05:d0:
9c:7d:d8:f4:62:54:dc:05:26:19:ad:f1:83:b3:00:c2:a4:55:
89:9e:8b:1a:59:3d:c0:56:06:80:01:19:f5:83:f4:be:11:bf:
8d:2c:08:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:34 2024 by rpki-client on console-ams.rpki-client.org