Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eYsjyrW5DaizaRWOH5I33wBo_PY.roa
File: eYsjyrW5DaizaRWOH5I33wBo_PY.roa (raw, json)
Hash identifier: 4Wo1mDlhp++tzatXzq9VVazP9Drn57BN2+jL0gOJeZA=
Subject key identifier: 79:8B:23:CA:B5:B9:0D:A8:B3:69:15:8E:1F:92:37:DF:00:68:FC:F6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 18CF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eYsjyrW5DaizaRWOH5I33wBo_PY.roa
Signing time: Sun 07 Feb 2021 12:53:59 +0000
ROA not before: Sun 07 Feb 2021 12:53:59 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 123.193.160.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6351 (0x18cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:53:59 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=798B23CAB5B90DA8B369158E1F9237DF0068FCF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c6:b4:70:7a:a7:9d:bd:5b:ca:7b:c7:8c:e2:
d0:32:0f:0a:1a:92:c0:fd:18:84:8f:f8:d1:9b:0f:
70:59:1c:a1:31:d1:e1:ca:e6:81:12:0e:83:96:5a:
45:24:92:e7:01:7b:b1:8a:5a:94:14:97:bc:99:8b:
ba:28:d2:8b:5e:94:4f:c3:b0:93:3e:39:95:ca:e5:
82:41:48:67:ef:87:8b:92:f0:8e:06:b8:f3:1c:43:
6a:a9:aa:e8:6b:4f:b0:48:7f:6c:c9:a9:98:68:69:
2c:dc:bc:aa:8c:47:0f:cf:fc:80:32:21:5e:55:77:
5b:f6:9c:e9:58:02:d3:31:66:4a:20:a1:c6:8b:aa:
7f:c5:ac:18:82:8f:ff:c1:7b:da:08:5d:6e:a7:8c:
00:13:45:f4:fc:4d:c5:0a:af:28:0a:fa:e2:e2:cb:
5b:ea:71:2c:fe:2d:8d:97:36:49:d9:44:4b:91:9c:
fd:9a:f6:03:80:29:3c:a9:fa:75:fd:ed:c0:15:c8:
0c:3f:1e:34:97:11:38:8c:9d:88:e3:89:24:2d:e5:
09:36:48:74:bb:65:4d:90:31:09:78:1d:1e:8b:b7:
a1:9d:fd:5c:ac:ca:7e:2a:d4:ac:65:09:e5:65:0a:
3f:09:7e:16:e7:5c:aa:38:e2:c3:52:a3:e2:d7:6b:
b2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8B:23:CA:B5:B9:0D:A8:B3:69:15:8E:1F:92:37:DF:00:68:FC:F6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eYsjyrW5DaizaRWOH5I33wBo_PY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.160.0/19
Signature Algorithm: sha256WithRSAEncryption
a9:73:bf:a4:4a:85:fe:63:0c:8d:d9:a4:d4:0c:bc:70:2d:28:
b0:56:bf:c1:36:27:7e:71:31:66:69:8f:ce:a6:e4:29:96:57:
a2:41:69:41:96:f3:74:57:e5:1e:cc:cf:3f:43:2f:e4:05:fc:
8b:a3:65:27:38:1e:67:77:a6:75:08:cd:0f:b1:b6:b3:9f:bb:
9e:b9:e4:42:af:8c:47:1b:46:b7:d9:26:ba:e3:17:4d:86:3e:
f4:ad:49:5b:07:b4:01:7d:82:d9:ad:11:19:26:fe:bd:88:bc:
00:06:03:f4:cd:e6:00:0f:2e:c0:91:b8:e3:82:55:1b:04:92:
e8:0e:6b:21:2b:81:2a:b5:61:42:42:d8:34:2f:4d:1c:3c:0e:
af:e6:95:d8:c2:31:96:41:7c:eb:39:8c:9b:fe:fb:3b:f8:6b:
a2:52:48:b9:c0:e8:78:a7:3e:13:8b:44:d8:0e:fc:8f:78:2a:
49:f9:5a:9c:37:92:68:98:0d:74:cd:9f:67:e3:9c:ca:a6:28:
77:a0:7b:bd:f0:af:ae:a5:22:6a:06:d8:b7:ba:8f:08:45:ce:
36:b1:7e:07:c6:43:4e:a2:7a:28:bc:98:04:78:3d:da:03:cd:
e9:14:8b:fb:0e:7a:b0:83:a8:e0:b2:fe:0c:ee:5c:4d:58:96:
72:e5:80:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:56 2024 by rpki-client on console-fra.rpki-client.org