Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_aqIJLRZeQauJPMHvtpPml1JcA4.roa
File: _aqIJLRZeQauJPMHvtpPml1JcA4.roa (raw, json)
Hash identifier: FZVWyMzcaXnkCpXRvWwARX+f6MWrxk5AgxTEakNzWsQ=
Subject key identifier: FD:AA:88:24:B4:59:79:06:AE:24:F3:07:BE:DA:4F:9A:5D:49:70:0E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1663
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_aqIJLRZeQauJPMHvtpPml1JcA4.roa
Signing time: Sun 07 Feb 2021 12:10:08 +0000
ROA not before: Sun 07 Feb 2021 12:10:08 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5731 (0x1663)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:10:08 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=FDAA8824B4597906AE24F307BEDA4F9A5D49700E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e7:79:b4:97:c2:ab:81:9b:3f:ec:4b:75:49:
77:01:37:7d:00:3e:6b:c9:b1:0c:3f:e1:35:45:53:
a2:dd:23:ab:24:e8:69:c4:cb:20:45:e1:b2:0a:91:
95:76:7f:17:77:a3:64:c2:46:ba:11:1c:71:89:95:
13:4f:6d:6d:37:63:fd:4a:8e:f5:8a:97:13:00:00:
93:58:80:43:08:b7:d5:5c:b5:17:bb:2c:ad:da:42:
de:4e:8d:8a:79:44:db:85:88:5f:3a:cf:83:50:3b:
aa:40:b8:f0:f8:ba:9a:12:fa:b5:2f:1e:9f:0f:e8:
97:8a:75:9c:3e:96:4b:05:c4:e1:02:a7:74:00:ca:
0c:9c:d9:2e:a8:89:e2:5a:43:7e:b8:dd:b7:03:ce:
24:fe:96:ae:3d:03:64:e7:79:ef:7a:72:28:2b:7b:
23:a4:ab:3d:3a:b2:64:74:47:82:25:eb:26:e3:f4:
6b:6b:e0:82:51:94:27:79:7a:c2:19:ce:c0:2b:69:
bc:12:22:05:7b:c3:d0:97:c1:4d:89:57:66:91:92:
fc:ab:5f:10:1a:05:02:62:36:91:37:9c:65:cb:60:
d4:ad:bb:e7:07:a7:75:f0:68:66:ee:ab:95:9d:1d:
f0:a9:e9:15:e1:30:19:fc:56:c7:05:68:0c:5d:13:
17:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:AA:88:24:B4:59:79:06:AE:24:F3:07:BE:DA:4F:9A:5D:49:70:0E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_aqIJLRZeQauJPMHvtpPml1JcA4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.150.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:e3:76:42:6a:c0:84:e5:29:ed:67:af:eb:62:80:9b:cf:fb:
55:8f:bb:4b:07:da:e4:b6:2e:14:89:44:26:d1:82:35:60:e8:
04:10:84:c1:54:ad:6e:68:bd:fc:4d:61:e0:26:12:bd:7c:d2:
a7:2b:1d:94:6e:bc:20:1f:84:74:f6:94:69:db:a6:48:59:60:
71:64:86:ee:58:fb:d2:70:2a:ca:2d:34:2e:3f:45:2f:38:44:
4b:d7:c5:0c:c0:e5:55:e5:46:22:30:69:34:60:e0:6c:02:16:
aa:69:54:82:2f:a5:1e:6a:7c:0c:ac:bd:ad:37:f9:a8:58:38:
0f:4f:c8:6b:80:57:ac:1b:40:a0:1d:d7:6c:a4:53:f7:29:ff:
6a:2a:1a:54:45:1c:f0:b6:84:72:1e:3f:40:11:d7:78:12:4c:
00:f1:ee:76:f4:3e:8b:b9:b9:30:6f:b9:52:86:08:75:bc:40:
dd:6e:88:00:a2:df:74:71:46:f7:5a:73:42:41:3f:5a:a7:72:
15:e4:a3:67:52:c1:00:26:23:a0:36:b8:61:52:f1:f3:00:24:
cc:c6:e8:d4:08:86:26:16:9b:36:d7:07:9b:d6:81:7b:c7:3e:
82:88:f5:bc:78:cf:c0:68:21:87:ac:6b:df:81:69:05:93:c7:
90:73:1d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:22 2023 by rpki-client on console-ams.rpki-client.org