Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hjYnnkXr-NkEY662C2SDA22zi58.roa
File: hjYnnkXr-NkEY662C2SDA22zi58.roa (raw, json)
Hash identifier: i4Z6QODmLDnTMelN0tFjka66Zn5H3bL6+55il+1uiY4=
Subject key identifier: 86:36:27:9E:45:EB:F8:D9:04:63:AE:B6:0B:64:83:03:6D:B3:8B:9F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 145F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hjYnnkXr-NkEY662C2SDA22zi58.roa
Signing time: Sun 07 Feb 2021 11:58:24 +0000
ROA not before: Sun 07 Feb 2021 11:58:24 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.193.240.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5215 (0x145f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:58:24 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8636279E45EBF8D90463AEB60B6483036DB38B9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d8:92:f5:ab:ad:73:86:41:6e:4c:f6:ab:6d:
a2:60:1a:fc:91:83:3d:1a:d3:32:f3:a2:19:e3:af:
9d:c8:fe:dd:80:96:d3:93:b0:36:19:ab:fe:95:68:
f6:9e:62:86:fd:ab:bb:d8:c9:72:5a:40:79:9a:00:
1c:4e:bc:6e:33:56:22:81:dd:71:81:85:ac:ae:3b:
f0:29:60:ad:ca:19:8e:19:14:dc:ab:07:81:84:f6:
41:e7:c8:3e:3b:81:f5:07:0d:ae:28:2e:51:f7:7f:
9b:78:54:34:76:58:4f:ea:fa:a7:c4:cd:0b:e3:24:
38:67:0c:bc:4c:da:1c:76:bb:f4:75:9f:4d:28:da:
90:de:3d:33:6d:45:c8:b9:46:99:32:44:d9:26:26:
0b:9d:a7:23:8d:9a:b1:ea:77:05:b7:f1:e7:a3:08:
9f:03:ee:61:7b:e6:b6:26:f4:15:02:cb:79:75:00:
56:64:16:45:cc:d6:95:87:66:cb:7b:0f:68:a6:50:
2a:52:61:c1:ee:d1:53:20:dd:ac:58:57:74:43:b0:
fa:fd:4b:6e:1d:b3:c7:7e:0a:00:84:68:e4:dd:fa:
db:c7:fc:f0:5b:96:be:f5:97:57:01:5a:1c:c0:c4:
79:0c:de:40:c9:2c:7c:9c:f1:37:7f:1a:12:3a:4d:
c1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:36:27:9E:45:EB:F8:D9:04:63:AE:B6:0B:64:83:03:6D:B3:8B:9F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hjYnnkXr-NkEY662C2SDA22zi58.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.240.0/21
Signature Algorithm: sha256WithRSAEncryption
8d:52:c0:66:b5:8c:cd:b6:15:9c:6f:1a:d5:60:71:53:ce:59:
7b:61:97:7a:d2:7d:63:d4:5b:12:ba:92:c4:24:4a:21:c4:b5:
42:03:5e:f0:c8:71:2d:40:c5:27:41:c1:6e:0d:f8:a4:ca:c9:
1a:2f:4d:9f:e3:19:01:a0:ff:c1:99:45:5a:2b:b4:58:e5:50:
1c:85:ed:eb:20:9f:4c:0a:57:0f:1a:b6:d4:ee:5c:18:a0:f1:
79:68:33:d1:37:0f:58:1c:d4:dd:39:ca:f9:96:a1:f1:b4:84:
6a:f2:f9:8e:1e:d1:1d:a9:02:28:bf:ac:77:f2:7f:ab:07:0a:
f0:31:bf:84:24:fa:9b:67:81:f8:f0:d7:60:95:5b:6c:41:a2:
db:35:69:e6:35:fe:7b:98:50:0a:f9:b7:cd:f3:23:ed:f6:74:
ad:57:fb:c1:5f:d0:9f:92:d2:56:0c:07:1e:e0:f6:6c:a5:23:
70:d1:ac:e6:f6:ed:5a:34:2e:4e:1f:0e:49:df:ad:91:fb:a0:
11:50:e7:42:2a:bd:ae:a7:54:da:3b:da:11:0c:80:65:d7:a3:
4b:34:8f:51:c6:e6:e9:b3:87:5f:17:e4:86:e5:68:e8:88:f7:
8d:22:e2:bf:83:22:e9:d2:40:0e:35:96:bc:32:f9:7d:f3:c0:
21:a8:53:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:37 2023 by rpki-client on console-fra.rpki-client.org