Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bFwVhTw3EaaIay2wmTGPLAJlINw.roa
File: bFwVhTw3EaaIay2wmTGPLAJlINw.roa (raw, json)
Hash identifier: WKZaSZc7nP0Xc6r6iLmaXp/KuZdD+gsUPl79F4RSUgA=
Subject key identifier: 6C:5C:15:85:3C:37:11:A6:88:6B:2D:B0:99:31:8F:2C:02:65:20:DC
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 186B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bFwVhTw3EaaIay2wmTGPLAJlINw.roa
Signing time: Sun 07 Feb 2021 12:29:11 +0000
ROA not before: Sun 07 Feb 2021 12:29:11 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.193.160.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6251 (0x186b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:29:11 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=6C5C15853C3711A6886B2DB099318F2C026520DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f7:c8:38:04:15:54:05:4e:38:29:d0:c3:ef:
ca:7d:76:3f:64:4d:9a:1e:39:69:86:5b:1b:94:35:
bd:07:87:d0:9b:71:fe:32:5c:1e:95:61:ed:38:5f:
63:34:07:81:bf:69:ce:46:de:27:1a:98:84:06:66:
a9:81:e6:ef:a0:86:11:a8:4f:b6:ae:b8:97:d8:cd:
3c:41:4e:65:b7:8a:67:37:ed:ca:04:16:2c:d8:1e:
ba:be:d7:b0:ed:a3:27:75:07:f5:02:34:e0:9c:c7:
71:ab:d9:86:5d:d9:b5:54:0c:bd:c3:f7:74:3a:bb:
f9:1c:83:4b:7a:75:e7:67:9e:93:e4:a6:6a:d0:4e:
02:4e:34:9a:f4:77:7c:65:55:ad:6e:24:19:5c:b1:
24:85:d2:07:5b:91:97:39:dd:96:9f:f8:9d:8b:94:
9b:3a:ac:4c:26:48:62:6b:a9:3a:86:89:2a:c5:b1:
58:1d:f5:ea:a8:17:c7:bb:35:32:3a:63:71:31:72:
2a:92:07:7e:24:28:cf:f3:c9:87:ae:19:5d:33:4e:
b0:e5:53:08:ed:d4:2e:29:be:0f:fa:8a:c6:48:a4:
c5:33:81:9e:f9:38:20:76:0f:4e:01:0f:17:f4:18:
b1:b4:40:1c:64:65:ff:3f:0d:e9:71:50:52:f4:e7:
4c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5C:15:85:3C:37:11:A6:88:6B:2D:B0:99:31:8F:2C:02:65:20:DC
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bFwVhTw3EaaIay2wmTGPLAJlINw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.160.0/20
Signature Algorithm: sha256WithRSAEncryption
a1:0b:41:35:a1:c8:d5:bd:0a:b1:44:a6:30:33:82:4c:ce:e6:
9b:64:7a:ce:97:cc:97:f5:8c:df:57:df:2e:9a:24:59:2c:2a:
a7:ff:5f:92:a6:97:5e:ea:7a:14:5a:df:c2:f8:75:68:91:09:
34:6c:d3:ab:af:ce:41:22:68:fc:d3:6e:e2:9e:b0:97:50:f3:
0c:11:03:2d:00:7a:8c:91:4f:a8:14:cc:d4:ff:08:4a:9a:1c:
3c:d1:2f:c6:1a:93:95:b4:c9:f1:84:2c:ff:df:29:13:68:84:
3b:e1:f6:ea:b2:8b:e5:c9:4f:0c:59:b8:0b:36:76:14:c7:2a:
a1:14:89:40:bb:ac:93:37:d7:c0:6c:af:03:64:1f:29:2a:b6:
b4:01:68:ad:8a:13:dc:e4:59:6a:42:cc:cc:8e:40:ff:85:96:
ab:0d:ef:cf:59:14:55:f0:d1:18:7d:59:aa:cb:1b:c6:03:35:
f7:fd:38:00:c7:ef:1d:28:20:55:33:95:8a:ba:ef:2f:8e:45:
64:da:f9:44:50:7e:f9:9b:88:c6:a4:72:b3:40:93:49:d5:39:
5e:72:50:82:6e:1a:d8:d1:08:a5:74:41:8e:51:01:9e:be:d8:
86:7e:b3:6f:e4:e6:04:68:88:e2:b3:87:50:3b:d5:1a:bf:60:
2e:17:a5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:35 2024 by rpki-client on console-ams.rpki-client.org