Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/geq_C12G1ifczDT7x-M6hnZph8k.roa
File: geq_C12G1ifczDT7x-M6hnZph8k.roa (raw, json)
Hash identifier: gjgDo3wz1/1chmU0DGeCMiFChhoTh6ylAU4GxdAo+RE=
Subject key identifier: 81:EA:BF:0B:5D:86:D6:27:DC:CC:34:FB:C7:E3:3A:86:76:69:87:C9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 15C5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/geq_C12G1ifczDT7x-M6hnZph8k.roa
Signing time: Sun 07 Feb 2021 12:06:26 +0000
ROA not before: Sun 07 Feb 2021 12:06:26 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.76.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5573 (0x15c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:06:26 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=81EABF0B5D86D627DCCC34FBC7E33A86766987C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:31:1e:64:61:b2:fd:05:53:4a:9d:db:d9:43:
79:e1:db:89:9b:18:64:57:51:4e:2a:ed:ed:af:3d:
73:80:60:8a:8d:97:7f:38:4f:d4:23:c2:2d:5c:14:
4e:b1:02:d9:dd:d8:8f:02:77:8e:b0:dd:3c:56:92:
09:6f:df:b2:1e:f4:5e:47:e8:61:8c:f4:37:d2:9d:
17:cd:a9:ef:83:3f:bf:6e:79:d1:c9:fe:56:c9:a2:
7a:97:60:08:81:d5:10:fb:6c:3a:85:e4:3f:35:0a:
a2:52:a0:e9:56:e6:4e:cf:09:f1:b8:d7:3b:09:81:
76:43:26:79:7d:0a:db:66:07:3b:ea:e5:dc:30:ca:
a7:49:49:7e:1e:e6:02:8f:cc:23:2e:07:2e:47:8d:
7b:21:21:a3:be:0f:6f:ef:92:fb:9b:be:50:a8:e6:
01:ba:b1:9b:7d:98:0b:e8:f5:77:27:b3:28:85:ed:
09:55:e7:83:e2:25:00:1e:cc:24:1d:dd:89:eb:69:
2e:be:03:1f:77:50:6e:8a:d4:a4:ef:ce:ff:78:94:
1f:c8:71:b0:79:45:0a:0c:4d:fb:07:e0:39:b1:5a:
c6:13:14:0a:7d:cb:41:0a:48:d1:25:77:23:f7:66:
1e:bf:70:d4:82:39:19:c4:5f:5a:12:b1:d4:4f:e9:
32:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:EA:BF:0B:5D:86:D6:27:DC:CC:34:FB:C7:E3:3A:86:76:69:87:C9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/geq_C12G1ifczDT7x-M6hnZph8k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.76.0/22
Signature Algorithm: sha256WithRSAEncryption
01:d5:29:14:b5:7b:d1:f1:b5:43:1f:7c:9c:2d:71:16:91:d1:
88:00:41:84:48:50:35:46:3f:0e:fe:0d:e0:3f:67:bc:3f:95:
75:cb:59:64:cc:68:e6:67:07:70:05:78:63:be:4f:c0:4c:54:
50:c0:9e:07:37:11:8f:a5:1b:ca:03:ad:4f:4c:f9:5f:99:c9:
a0:89:bb:89:58:f3:a7:13:20:27:db:9b:9e:36:78:88:f2:b6:
64:9f:80:ed:f1:a2:ee:3b:4f:de:80:f8:e0:86:e7:6c:86:2c:
fc:e8:bb:e9:28:9a:71:9b:ee:80:be:c7:84:59:e3:c0:e4:b7:
1d:00:76:3c:ff:4f:6b:eb:14:cf:44:b5:5b:4e:ab:b6:38:3b:
c6:25:90:12:3f:5f:c4:7a:69:51:b0:92:e5:be:f6:03:ef:4d:
da:84:79:a1:e5:84:ad:f5:99:9d:d2:9d:eb:dc:28:e0:8e:58:
48:be:e3:5b:2e:96:a5:56:52:d0:a5:3c:38:7a:0c:8e:0a:ee:
8a:4e:c5:31:b9:e7:ff:5c:d4:4f:e0:02:92:3d:dd:cc:70:81:
0f:30:ce:81:23:1f:15:44:3c:02:a0:19:72:68:18:48:68:31:
09:63:b3:68:8a:c3:dc:59:96:c7:c1:e8:33:a2:21:5e:45:4d:
0d:56:c5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:25 2023 by rpki-client on console-ams.rpki-client.org