Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fLBwRU19EeGjt7nK_2SuqwnIQuM.roa
File: fLBwRU19EeGjt7nK_2SuqwnIQuM.roa (raw, json)
Hash identifier: zrfvWMqNppMKX++WjGcjzYAUfu/e3jAE8LSEpAfPl9o=
Subject key identifier: 7C:B0:70:45:4D:7D:11:E1:A3:B7:B9:CA:FF:64:AE:AB:09:C8:42:E3
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1BDB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fLBwRU19EeGjt7nK_2SuqwnIQuM.roa
Signing time: Wed 29 Sep 2021 02:47:05 +0000
ROA not before: Wed 29 Sep 2021 02:47:05 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.195.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7131 (0x1bdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:05 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=7CB070454D7D11E1A3B7B9CAFF64AEAB09C842E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ef:e4:3d:9c:05:eb:c4:6a:52:b9:e6:aa:5c:
96:1a:c2:fd:0c:d6:db:59:f9:8c:a7:92:e7:66:09:
77:7c:3a:aa:23:61:25:ab:81:45:63:36:db:aa:0c:
1f:fb:9a:87:7b:97:d2:06:46:87:0f:fc:b2:45:36:
20:70:35:6a:d1:01:42:dd:e4:9e:9e:5f:f5:b5:b2:
db:17:91:6e:93:bc:10:0e:a1:66:79:b1:51:49:64:
c3:46:0d:53:29:cb:0c:a0:76:66:60:8d:6f:0f:1e:
2c:10:5a:23:f6:95:3c:a5:35:b4:10:d4:15:8c:4f:
94:72:68:43:ec:7a:52:91:8f:48:2b:8a:ba:bd:00:
ed:51:16:a7:1c:28:6c:ae:0b:84:7b:ff:c8:ec:80:
25:8a:f0:56:d0:c7:8a:2d:e3:98:6b:bc:08:f7:bb:
e1:e8:c2:83:95:8b:b0:c1:b2:92:d1:90:ca:3e:38:
12:8c:51:38:3a:86:68:b0:02:ee:5e:af:62:4a:72:
6e:b6:83:8e:21:48:24:b6:dd:9e:a5:65:97:77:be:
31:2d:8c:b8:db:74:25:47:41:ab:d6:3f:5a:51:ce:
14:e9:49:fa:95:3c:c9:0b:50:0e:4b:9d:cf:75:c2:
84:41:60:ad:f5:93:9f:4b:54:53:b9:99:f2:61:30:
22:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B0:70:45:4D:7D:11:E1:A3:B7:B9:CA:FF:64:AE:AB:09:C8:42:E3
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fLBwRU19EeGjt7nK_2SuqwnIQuM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.151.0/24
Signature Algorithm: sha256WithRSAEncryption
77:7a:c7:8e:23:b5:6c:b7:52:cf:5a:38:33:0d:94:f5:c7:1b:
23:de:e7:4f:8e:41:f6:c8:c6:c2:7b:60:55:cd:12:fd:d6:3d:
e2:2d:84:2c:50:75:ee:1b:f2:5a:e7:0f:5f:f0:7d:d6:1a:68:
17:c0:a6:be:59:5f:18:fb:02:cb:2b:34:ba:6f:56:44:47:7a:
eb:a2:3e:64:74:f0:a6:5a:ff:65:db:f7:c3:af:43:68:3b:6d:
db:b8:b2:a2:85:d7:4d:5d:78:40:88:8d:a6:94:09:f1:4b:3f:
8e:3c:2b:30:d6:c9:58:3a:8b:29:c2:ff:01:4f:1c:20:8e:df:
e0:42:ec:f1:c1:58:07:ff:ca:4a:d3:84:d9:5a:72:ed:26:6a:
8b:c2:96:3c:fc:07:7c:21:a9:3e:19:eb:00:9f:04:67:df:b7:
01:41:b9:25:b8:b3:dd:16:29:08:e7:39:09:42:2f:5a:a1:5a:
ff:44:e1:7c:cc:45:a5:91:27:e5:fa:e9:2d:be:5a:ae:08:8a:
a5:56:19:bc:28:73:14:51:0d:b0:77:75:49:7a:97:7f:6f:d8:
d9:77:e5:70:77:7e:04:77:ae:e5:f6:ee:dd:62:d2:36:a9:4b:
38:fa:c4:a4:3a:32:b2:76:fd:26:36:6c:d1:90:b2:8a:c8:10:
1e:c5:94:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:25 2023 by rpki-client on console-ams.rpki-client.org