Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ebP5b2ex1oZ8OVL8dvtdHh7yJ1o.roa
File: ebP5b2ex1oZ8OVL8dvtdHh7yJ1o.roa (raw, json)
Hash identifier: hjXmfdi6+Mxnacv0Tp85C5FZEQarwhA6z+OUSziT7MM=
Subject key identifier: 79:B3:F9:6F:67:B1:D6:86:7C:39:52:FC:76:FB:5D:1E:1E:F2:27:5A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 18EB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ebP5b2ex1oZ8OVL8dvtdHh7yJ1o.roa
Signing time: Sun 07 Feb 2021 12:55:09 +0000
ROA not before: Sun 07 Feb 2021 12:55:09 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 123.195.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6379 (0x18eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:55:09 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=79B3F96F67B1D6867C3952FC76FB5D1E1EF2275A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:eb:56:6c:32:0a:a1:5b:1e:12:74:5c:e6:2a:
80:81:f4:ea:45:d0:d2:59:c1:4a:9b:05:31:57:6b:
d6:12:d5:b4:55:ca:96:ee:a1:7f:96:94:f3:44:b6:
48:56:2f:2d:5d:a4:5a:18:0b:37:5a:b7:4d:81:a6:
ce:c2:27:36:73:fe:a8:4f:4e:11:0e:d9:07:90:d6:
4a:fb:13:b2:db:c7:96:9c:5b:64:9d:ff:50:49:3d:
ed:93:75:71:1a:06:e7:00:f9:3a:06:d3:1b:d4:4b:
7e:80:8c:4a:f5:7c:86:54:03:e8:9d:a6:d4:00:21:
74:7c:3b:f7:55:8d:02:b0:77:50:65:df:90:39:52:
91:6b:26:c8:b8:ca:5f:dc:69:97:22:90:8e:91:f9:
59:93:28:1a:98:3a:ba:f9:1f:21:28:0f:7e:da:43:
ad:17:ff:97:27:fa:f9:0c:08:0a:2e:cd:04:bc:f4:
f9:db:00:be:d7:88:f7:17:cb:59:85:46:87:47:15:
8c:26:e0:de:d6:38:9d:3e:97:f3:57:a6:f8:60:f6:
c9:3f:d8:44:4d:e8:56:fb:ae:b6:14:88:a4:2d:98:
36:a7:8e:eb:3e:1e:3d:b2:ac:6e:e6:dd:86:9f:c3:
56:22:ab:3c:ed:14:0b:c0:36:e2:e4:a5:52:84:e4:
cb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B3:F9:6F:67:B1:D6:86:7C:39:52:FC:76:FB:5D:1E:1E:F2:27:5A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ebP5b2ex1oZ8OVL8dvtdHh7yJ1o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.0.0/16
Signature Algorithm: sha256WithRSAEncryption
60:20:f2:a4:49:ad:42:a2:7d:dd:b3:fc:21:92:a5:e1:44:8f:
63:06:22:8f:df:d1:a1:70:64:44:9d:a2:85:49:61:b6:4e:60:
e5:e1:ac:3c:15:37:f5:02:e3:b9:11:4c:75:a4:a8:76:a4:ec:
9c:f7:df:9d:3f:f2:14:42:36:1b:b5:34:4e:ba:14:3f:96:55:
12:95:3b:0b:8a:d0:75:6f:12:e6:64:63:60:00:1c:5d:df:8d:
2c:fd:20:ac:e7:63:03:e6:2b:21:50:20:91:0b:42:a6:6c:87:
3d:da:22:c2:08:84:17:ac:a8:56:95:43:49:8a:48:38:76:14:
16:29:5c:67:d6:37:ae:00:f4:c3:5a:06:7d:22:c1:3e:3b:26:
12:9b:7c:eb:8c:ec:04:7d:77:37:e9:b2:2e:bc:ce:e4:23:66:
6b:cc:c7:d9:0b:89:f5:4e:bd:d9:b6:3b:f2:d9:f5:9d:18:38:
d6:bd:84:39:fa:49:11:b2:fe:b8:69:50:82:05:ed:06:a5:78:
c5:af:a9:24:0f:83:89:d5:c8:a1:2a:00:37:ae:01:0e:ca:e6:
f0:71:1b:38:1b:f2:92:8e:29:22:4a:fc:05:06:fb:f2:50:36:
79:14:a6:8e:f9:7d:4d:b0:40:95:12:83:e9:38:52:42:69:f7:
29:e4:5b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:56 2024 by rpki-client on console-fra.rpki-client.org