Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ze6YUBb_kXlMDcNtxFhlDSaI4NA.roa
File: Ze6YUBb_kXlMDcNtxFhlDSaI4NA.roa (raw, json)
Hash identifier: AQGxwdQ9E4T0BErElm2AKBAMGWYhYMC36FAeWT0ckwo=
Subject key identifier: 65:EE:98:50:16:FF:91:79:4C:0D:C3:6D:C4:58:65:0D:26:88:E0:D0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 14BF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ze6YUBb_kXlMDcNtxFhlDSaI4NA.roa
Signing time: Sun 07 Feb 2021 11:59:54 +0000
ROA not before: Sun 07 Feb 2021 11:59:54 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.193.176.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5311 (0x14bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:59:54 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=65EE985016FF91794C0DC36DC458650D2688E0D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d8:8e:1c:6b:fa:22:9a:c1:ac:dc:01:3f:14:
75:f0:83:4c:c9:3a:38:e4:17:a6:fd:8c:cf:77:a4:
c5:9b:f5:b8:0c:4a:26:04:c9:3e:76:72:58:dc:35:
4a:cc:15:ec:e5:d5:59:8c:65:76:de:7b:6f:5a:c1:
ad:d1:88:68:8a:5a:be:f3:4e:52:e9:f5:66:d9:98:
1e:82:db:86:1e:72:3f:b7:46:e0:a5:f4:d8:74:37:
7c:95:84:71:9c:6d:0b:d2:a3:0c:03:2e:47:3b:ba:
6a:6e:20:c5:11:98:09:e4:eb:71:bd:d6:59:d5:0c:
73:82:48:0e:4f:23:97:78:da:15:2c:f4:ab:8c:77:
40:bf:3f:80:eb:3d:cb:98:1b:06:3b:84:90:eb:fa:
20:f7:81:e6:59:74:e1:70:ae:46:45:e3:29:80:f8:
76:72:77:81:2d:d4:08:93:fa:c6:95:6c:51:64:6c:
54:38:2d:4a:a0:c2:d2:2b:32:1b:7d:53:12:52:30:
94:b1:e5:cd:8d:af:87:eb:0c:f8:81:f9:18:bc:1d:
57:65:69:b2:81:ba:d7:13:f7:e1:a2:b6:5c:c6:b7:
e2:51:6c:83:95:46:b8:49:c5:c1:f9:67:6f:0d:11:
f7:c1:be:68:24:a7:67:d1:55:7d:b8:66:91:a3:31:
77:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:EE:98:50:16:FF:91:79:4C:0D:C3:6D:C4:58:65:0D:26:88:E0:D0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ze6YUBb_kXlMDcNtxFhlDSaI4NA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.176.0/21
Signature Algorithm: sha256WithRSAEncryption
0b:fe:6f:64:5e:bb:e1:6d:11:cf:3c:01:de:ad:72:b2:d8:e7:
74:80:13:94:e7:b9:da:78:23:c1:4d:6f:45:76:9a:ce:9e:49:
01:aa:3c:3c:9a:41:08:ee:b9:fc:10:97:16:47:18:a5:c0:10:
0b:9b:35:07:1b:3e:dc:84:fb:1d:4b:52:87:43:fd:ae:61:7b:
d0:14:16:f4:9f:2d:df:60:90:3a:49:46:dd:e4:aa:ab:cf:d7:
43:22:7c:6b:c4:5b:15:27:c6:0c:9d:f0:aa:18:fe:24:77:7b:
7e:e6:b2:58:95:da:b1:4d:23:bb:ae:59:e3:fc:d6:15:e1:a2:
e5:aa:02:1b:4e:92:4f:9e:1e:d9:9e:06:b6:86:09:98:eb:1b:
fa:8d:d8:94:39:11:9a:d9:63:e5:f4:d1:af:46:9c:b9:73:4c:
f0:a7:a0:11:6e:7a:2a:f2:d5:a3:46:46:86:3d:26:39:d8:e9:
d9:42:bd:80:65:dd:bb:84:27:5d:d6:10:16:a5:c4:56:2d:0c:
94:a4:48:eb:40:99:c7:63:f9:78:ae:e6:f8:07:c9:4e:11:4e:
e9:55:53:ad:77:3f:59:e0:d2:3e:26:4b:c9:1e:b5:7a:1d:67:
fb:d6:81:39:9f:5d:a6:88:0a:a1:ce:17:07:4a:43:80:da:5a:
9d:a2:c5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:34 2024 by rpki-client on console-ams.rpki-client.org