Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gEtDZ8MmQP92Rv0hPSLloBPotmY.roa
File: gEtDZ8MmQP92Rv0hPSLloBPotmY.roa (raw, json)
Hash identifier: FExzjX3WwLXoJxKoTJhAMI61xXy56484MA5Gc8UxUOA=
Subject key identifier: 80:4B:43:67:C3:26:40:FF:76:46:FD:21:3D:22:E5:A0:13:E8:B6:66
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1515
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gEtDZ8MmQP92Rv0hPSLloBPotmY.roa
Signing time: Sun 07 Feb 2021 12:02:49 +0000
ROA not before: Sun 07 Feb 2021 12:02:49 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.193.68.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5397 (0x1515)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:02:49 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=804B4367C32640FF7646FD213D22E5A013E8B666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c3:df:12:76:52:38:e6:a5:df:7e:1c:d0:c2:
0e:ad:30:68:c0:5f:51:c9:e3:70:2a:df:02:9d:3f:
1d:cd:49:a0:ce:a9:55:c8:b9:56:7c:97:db:37:4c:
8a:70:4c:63:92:0d:7c:82:54:aa:48:e9:59:a7:f3:
36:ce:5e:a3:66:5a:67:af:d8:d5:75:02:10:09:e6:
74:ed:7f:52:97:07:d8:65:17:62:bd:bd:3e:ba:04:
17:fe:47:42:a4:b5:1b:99:8c:25:41:3f:73:2b:1b:
c5:3a:57:39:ad:ff:a4:6f:22:a5:0c:35:af:bb:87:
c9:ce:ff:63:ec:28:f6:08:e9:1b:7b:a0:6b:40:87:
68:76:8b:16:4d:7a:4b:05:db:df:8c:c9:f8:ca:b9:
e3:25:94:0f:12:9c:41:19:12:31:6e:e3:fa:5b:46:
b3:af:13:21:e4:cb:bb:35:9c:b3:6a:2a:1a:6b:eb:
55:24:b6:fc:ca:aa:a2:3a:71:d9:2c:80:9c:61:fa:
3b:fa:13:48:3f:67:87:88:87:c4:8d:e4:5a:7f:d7:
d8:98:b0:4c:5b:c3:b5:96:47:26:d1:a5:3e:4d:15:
03:0f:04:65:67:b2:93:b9:9a:ce:db:a3:c4:25:1c:
58:3e:97:a9:d1:c5:97:78:32:94:96:90:e8:94:19:
c0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4B:43:67:C3:26:40:FF:76:46:FD:21:3D:22:E5:A0:13:E8:B6:66
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gEtDZ8MmQP92Rv0hPSLloBPotmY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.68.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:63:9f:42:aa:a3:2d:b1:c1:0c:40:e8:04:31:5e:9c:ae:d6:
d1:7e:2f:5f:87:f8:d2:88:8e:2c:05:d8:5c:ae:38:6e:e8:1e:
6f:09:0a:68:46:0a:73:21:ce:ee:9d:2f:9d:b0:26:9b:4e:b8:
8b:80:f8:3e:d0:4b:45:9c:b8:23:96:a3:ae:a3:fb:c8:20:47:
a6:28:1f:fe:81:94:e4:12:54:be:cf:3e:57:96:f4:c4:90:73:
f8:ef:07:b6:d6:7b:d2:a0:2f:66:8c:17:b0:82:3b:f3:0c:9a:
9b:6b:25:31:6d:31:ec:58:1b:ed:b3:a7:19:9b:b1:60:72:b7:
9c:27:34:09:58:d4:0a:5c:85:75:7a:d6:d8:21:a4:66:0b:7d:
c5:2d:e9:a1:78:8b:c9:a9:ef:0c:6a:76:b2:de:a9:1a:5e:f4:
14:3a:28:eb:cc:24:98:b0:78:7c:6b:78:ee:ce:15:f1:c4:52:
01:63:83:eb:55:33:2c:27:e6:1e:20:0e:09:74:0e:7d:cd:7f:
00:2f:ac:19:62:e7:0e:3c:04:d8:a6:c4:d4:55:13:d8:f0:c6:
9d:ea:29:5b:80:00:27:f2:64:d1:23:63:9f:9c:58:ee:96:ea:
14:96:a8:be:6f:17:37:11:c5:fe:82:e6:99:a1:69:f7:98:ea:
c1:ca:6e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:56 2024 by rpki-client on console-fra.rpki-client.org