Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dHSndyG8L3LSIAaYDH3bRMs-R6c.roa
File: dHSndyG8L3LSIAaYDH3bRMs-R6c.roa (raw, json)
Hash identifier: CGXwkkVrci+Fn4vzLLcmPm1obZPisjKz85HsH/oSc5s=
Subject key identifier: 74:74:A7:77:21:BC:2F:72:D2:20:06:98:0C:7D:DB:44:CB:3E:47:A7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 18E5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dHSndyG8L3LSIAaYDH3bRMs-R6c.roa
Signing time: Sun 07 Feb 2021 12:54:53 +0000
ROA not before: Sun 07 Feb 2021 12:54:53 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 123.194.204.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6373 (0x18e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:54:53 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7474A77721BC2F72D22006980C7DDB44CB3E47A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:26:31:5f:98:a2:e1:6e:67:84:23:75:3e:ee:
a8:97:51:20:4f:79:1b:33:93:c4:b2:98:f3:9c:f0:
f2:7c:74:ef:5f:eb:a0:b0:67:8e:94:72:cc:9b:f0:
0a:40:ee:33:2b:5d:ce:9c:1e:2a:65:ac:cb:3d:b8:
1a:8b:f0:a0:12:18:2e:d3:0b:9c:49:50:14:b2:dd:
61:37:d7:12:81:7e:04:6e:52:89:ce:73:0e:a8:66:
2e:5d:d4:09:af:f4:0a:ec:ff:3e:a2:fa:5b:6d:49:
1e:bb:0f:66:4f:96:00:59:0e:5a:cb:8a:a5:ff:76:
d9:94:fd:1b:15:de:24:4a:95:94:72:72:62:5f:81:
c5:fa:13:ad:64:89:4d:c6:22:52:08:16:6f:48:5c:
a4:5e:f1:7e:37:00:31:5c:d1:82:d5:f0:91:8a:19:
75:9c:cd:77:47:b3:ba:74:f3:24:8c:05:98:20:d9:
8a:df:2d:32:62:a4:ae:c8:73:c1:00:91:27:f3:96:
13:2a:1e:1b:51:a1:a0:cf:87:3b:91:40:6c:10:9a:
26:71:39:31:d0:97:17:8e:2e:e3:67:30:d3:ce:be:
f7:68:53:84:1d:61:ec:14:4a:c7:7d:a8:01:c8:f7:
e1:e3:49:bf:ac:7d:ee:25:bd:b7:8b:ac:64:56:0e:
b3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:74:A7:77:21:BC:2F:72:D2:20:06:98:0C:7D:DB:44:CB:3E:47:A7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dHSndyG8L3LSIAaYDH3bRMs-R6c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.204.0/23
Signature Algorithm: sha256WithRSAEncryption
29:80:6d:2d:6f:a3:a2:1e:b4:04:42:8b:ed:36:62:07:59:2b:
5a:5d:2c:bf:7b:88:6f:7c:da:45:62:32:e8:ce:33:f8:34:61:
eb:43:47:39:3c:42:2f:aa:7c:14:1a:0c:99:db:8e:7b:bc:27:
07:ca:32:7d:2a:0a:6e:b8:85:c4:e9:7d:fa:9f:27:33:bd:1e:
15:f4:19:e6:73:08:ca:0e:72:16:35:fe:b2:88:6c:b3:8e:80:
5e:19:06:95:06:e0:89:3a:aa:d2:cc:0b:20:b5:0c:fc:05:df:
0d:2b:80:60:8f:4f:ce:9e:d2:a5:f5:a4:0d:86:9b:f6:6f:be:
28:24:84:12:a1:1d:4f:63:12:ba:f2:6a:c7:ba:4b:e1:a8:dd:
91:f7:16:c0:72:37:4e:39:df:c2:0c:c0:0b:bb:1b:23:13:ec:
c4:7c:9e:ed:2c:1c:0c:8e:4a:67:ae:7d:75:3d:66:9c:35:a5:
50:6f:9f:c2:b9:10:1b:66:82:85:e8:9a:58:b4:e0:fc:28:7e:
c7:1c:66:00:0c:c3:1e:c3:ba:ee:64:8e:0e:d1:56:36:d9:6f:
6d:92:7d:10:e2:35:6f:fe:b3:9f:11:da:53:33:25:4a:0e:11:
7c:89:76:e1:f6:30:e7:55:09:03:8f:a1:59:08:99:0f:45:f3:
bf:20:0d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:36 2024 by rpki-client on console-ams.rpki-client.org