Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eRDnx1NdXOXY_TWKidRogqsVrv8.roa
File: eRDnx1NdXOXY_TWKidRogqsVrv8.roa (raw, json)
Hash identifier: w6zQ/NCcnp5ZeMbLOBwsOAHJoaLxJPDnXMUgrQJYrSU=
Subject key identifier: 79:10:E7:C7:53:5D:5C:E5:D8:FD:35:8A:89:D4:68:82:AB:15:AE:FF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 150B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eRDnx1NdXOXY_TWKidRogqsVrv8.roa
Signing time: Sun 07 Feb 2021 12:02:38 +0000
ROA not before: Sun 07 Feb 2021 12:02:38 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.193.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5387 (0x150b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:02:38 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=7910E7C7535D5CE5D8FD358A89D46882AB15AEFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:13:3a:56:4e:cd:9c:ea:7c:04:37:80:70:df:
58:e8:e9:49:f1:85:ea:21:4b:1f:6b:ca:29:3c:ce:
63:db:a9:d8:fb:41:ab:4a:49:90:a8:1d:c3:97:59:
34:22:eb:05:a2:11:03:a8:71:d3:73:b1:04:47:84:
f8:c6:0c:05:a7:d1:4b:de:dd:14:6a:3b:88:5c:7b:
8e:b6:a9:83:42:3c:2f:5b:08:a8:97:06:7c:22:23:
e3:c2:57:8f:cb:bf:11:55:ae:4b:36:9b:6f:ac:d7:
84:3e:86:50:0c:80:40:82:f2:92:c3:33:23:86:5a:
4e:f2:19:5c:f3:5c:45:7e:56:2d:56:7b:38:a5:dc:
5e:e2:da:38:65:7d:70:7c:e4:bb:34:e8:04:40:7a:
2d:21:af:c1:6d:df:9f:e1:32:5d:e7:b7:29:6e:65:
e5:4a:7b:6b:ec:4e:21:b0:60:56:02:79:38:63:bf:
73:c2:7b:c3:99:5e:1a:f5:4c:6a:15:10:0b:c2:1b:
54:86:63:1c:a3:8e:6f:cc:19:c5:df:26:4f:68:69:
6a:65:17:3d:fe:24:b1:b5:a0:15:db:8d:0e:b7:b5:
98:b5:9b:f5:60:e8:06:e2:58:0b:91:31:b2:67:3f:
6b:08:de:88:90:a3:b8:1e:cc:94:0d:c4:de:20:07:
f2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:10:E7:C7:53:5D:5C:E5:D8:FD:35:8A:89:D4:68:82:AB:15:AE:FF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eRDnx1NdXOXY_TWKidRogqsVrv8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.48.0/20
Signature Algorithm: sha256WithRSAEncryption
1c:e7:c2:7b:e6:5e:39:e1:57:a0:66:c3:85:9e:4d:7f:08:9b:
8d:66:d6:d2:dd:d6:be:90:08:b1:a8:5a:bd:a1:6e:2e:50:1b:
67:4d:d8:df:2b:97:e4:86:00:be:71:ae:98:22:7a:a2:d4:fd:
1c:f1:c1:18:b9:43:22:8d:be:84:ea:3a:ac:17:aa:59:66:14:
1e:35:eb:4a:88:92:20:46:4f:4a:2b:96:ef:17:1a:f3:4d:da:
a0:64:54:cf:58:af:6b:f7:29:9e:b4:02:fe:a4:30:79:0e:37:
8d:b9:48:d1:29:f8:fc:76:4d:56:b3:e3:16:e0:01:36:9b:ed:
4d:e8:cd:c9:41:33:e3:75:16:66:ee:11:2d:40:10:e8:8a:cb:
8f:1f:ee:3a:4a:5a:76:4a:79:7d:13:09:da:76:03:d2:25:c2:
55:c0:b3:00:af:bb:1e:c2:b9:3b:af:e4:60:c6:dc:62:24:6c:
b4:73:a7:6d:ee:28:1e:31:69:bb:65:6b:08:fc:6c:f0:97:1e:
c3:bd:df:52:2b:22:50:cc:ee:8a:9b:0c:85:bd:aa:0c:0f:b6:
06:18:07:85:ce:c1:9e:ec:2d:5f:87:b0:4a:76:42:d3:73:14:
54:e1:d6:c0:d2:ff:72:8e:70:e2:11:6a:d0:1e:12:b4:50:3c:
db:ff:0a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:56 2024 by rpki-client on console-fra.rpki-client.org