Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ajhJiGN5rFk042fF6Go8cjgZcmw.roa
File: ajhJiGN5rFk042fF6Go8cjgZcmw.roa (raw, json)
Hash identifier: qq7Zdx7kbJKYXIU8Au5olTogrm/Xqqc0gC3JyzJcfYo=
Subject key identifier: 6A:38:49:88:63:79:AC:59:34:E3:67:C5:E8:6A:3C:72:38:19:72:6C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 160F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ajhJiGN5rFk042fF6Go8cjgZcmw.roa
Signing time: Sun 07 Feb 2021 12:08:05 +0000
ROA not before: Sun 07 Feb 2021 12:08:05 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.56.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5647 (0x160f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:08:05 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=6A3849886379AC5934E367C5E86A3C723819726C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:29:1b:19:cf:ff:58:41:be:04:9f:7e:73:c1:
4f:f7:97:b8:88:7d:73:a0:81:bb:e2:0e:f3:92:7a:
63:d8:87:16:fd:19:7b:47:57:70:15:6d:49:b4:62:
c2:1b:2f:1b:ef:c4:61:72:35:41:ee:6b:fa:30:9f:
d0:a4:2e:31:a4:45:4e:03:95:9a:f9:2e:5d:48:06:
75:8f:a2:c9:b1:f8:3c:7d:f9:92:4d:10:c5:88:30:
23:7b:e3:66:79:b2:9a:67:38:a9:53:e7:48:af:15:
03:f1:04:23:49:d1:18:1e:f7:8a:a1:34:5f:ed:bc:
c0:f5:91:6d:6e:bc:03:3c:ef:9e:a0:55:c9:a1:ea:
76:01:2e:23:c2:2c:0c:61:55:90:a2:77:15:fe:b0:
2e:0e:19:a4:29:60:f7:9f:ae:68:a4:c3:b8:26:c5:
ed:ec:91:6c:5a:1a:34:52:2c:d5:3b:dd:63:d3:40:
e2:a8:13:f2:30:8c:66:d9:da:e5:b4:b7:ad:c6:60:
cd:de:cf:88:49:d9:7c:8d:71:6b:53:f4:32:2c:0b:
f9:cc:9f:f0:f1:be:1b:54:ec:bc:4b:ec:80:b1:78:
89:06:0a:63:77:6c:52:83:cb:96:a6:4f:ec:11:76:
af:5e:5d:2e:4b:18:1d:44:82:e4:ef:70:fb:9b:88:
cb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:38:49:88:63:79:AC:59:34:E3:67:C5:E8:6A:3C:72:38:19:72:6C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ajhJiGN5rFk042fF6Go8cjgZcmw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.56.0/21
Signature Algorithm: sha256WithRSAEncryption
83:95:d4:77:af:ed:70:c7:b6:04:85:e2:8d:3b:02:7a:85:02:
7e:56:da:28:a8:32:c7:10:b7:9a:cc:bb:5c:5b:ba:64:cd:66:
e8:00:6c:5a:32:9b:80:34:16:eb:19:7a:68:40:8a:96:d5:b5:
ae:4e:97:60:19:3f:9c:ff:10:53:f9:c2:f4:a4:41:58:c8:82:
16:11:be:c9:d8:2a:69:d2:d2:47:35:70:11:50:c9:c2:5a:c9:
95:53:de:f0:ea:de:db:11:07:75:67:74:e9:fc:b6:ca:6a:86:
48:44:48:c1:f7:87:96:38:f4:7d:bd:a5:70:97:78:79:c5:63:
f6:67:84:e5:ae:ef:cd:90:82:17:3d:f9:4d:6f:a4:dd:69:b7:
8a:6d:00:08:2f:51:20:45:72:6a:79:ce:25:45:a3:6a:66:6e:
e1:ca:58:ae:f7:0b:29:84:d7:51:25:d2:d2:29:4b:bf:f1:97:
60:53:89:57:8c:6e:c5:b6:21:7a:f4:87:e0:f0:f3:7c:04:a4:
63:a7:e0:58:74:19:74:14:dd:77:f3:30:c5:db:50:7f:99:6a:
d4:c3:a2:76:c2:35:c0:f4:1c:dd:88:42:25:dd:5b:fb:cf:a9:
09:3b:71:27:9c:f0:32:24:91:09:6e:95:82:a2:09:46:29:eb:
9f:8a:93:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:23 2023 by rpki-client on console-ams.rpki-client.org