Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hmikOsZSc3KFk0_0ooNEEx9cjY8.roa
File: hmikOsZSc3KFk0_0ooNEEx9cjY8.roa (raw, json)
Hash identifier: A5xGPvOYUDq75/rD4iGByuh3RE97LHuxTr85wCnAUtQ=
Subject key identifier: 86:68:A4:3A:C6:52:73:72:85:93:4F:F4:A2:83:44:13:1F:5C:8D:8F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1AA8
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hmikOsZSc3KFk0_0ooNEEx9cjY8.roa
Signing time: Wed 29 Sep 2021 02:45:36 +0000
ROA not before: Wed 29 Sep 2021 02:45:36 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.192.8.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6824 (0x1aa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:45:36 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=8668A43AC652737285934FF4A28344131F5C8D8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d7:99:96:e5:11:83:d3:c1:ff:f1:1f:9f:66:
7d:e9:0f:3a:4a:2e:6e:9c:ad:df:56:ce:1a:13:e5:
4d:73:2d:59:b2:79:13:1d:82:cd:1b:d2:16:d7:4c:
99:75:1d:e3:13:6d:6a:57:94:34:b9:ee:ea:ed:ab:
76:4d:1f:f3:66:6d:68:e9:43:ba:74:83:23:fe:d0:
d1:07:ef:57:94:81:87:37:0b:08:ff:de:ba:97:4a:
8a:ee:58:20:77:5e:8c:eb:f2:0b:73:c1:c9:4b:18:
ec:f8:1a:2e:ee:4f:c1:a2:e2:67:22:ec:46:a7:9d:
6b:f7:b5:4a:33:b4:44:4b:ef:86:e0:1b:17:35:99:
ff:77:96:2c:bc:bc:a6:39:23:dc:9e:6a:8a:78:82:
c8:bd:7d:46:e8:e9:7f:3d:4e:25:ef:c3:e7:76:53:
78:69:6b:2a:77:67:02:bd:90:69:f8:f3:a2:df:8b:
e8:5d:3d:f2:cc:b7:34:f0:a6:dd:4e:f0:20:20:f5:
68:20:07:c2:48:c8:24:2c:52:1c:c0:00:fa:9d:93:
ee:84:bc:1e:5c:bf:ae:a8:35:26:42:9f:ab:76:2e:
b7:72:5c:79:03:3e:72:56:e0:73:80:38:28:b7:a4:
7c:fd:cb:ea:4e:3a:be:dc:4c:38:93:3d:8e:e4:b8:
a1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:68:A4:3A:C6:52:73:72:85:93:4F:F4:A2:83:44:13:1F:5C:8D:8F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hmikOsZSc3KFk0_0ooNEEx9cjY8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.8.0/21
Signature Algorithm: sha256WithRSAEncryption
54:79:a4:c4:1b:75:4c:d4:d6:ff:8a:ad:32:ec:56:aa:1e:cb:
0f:88:1d:55:69:cc:43:21:ac:eb:1b:bb:8c:94:11:a8:59:e9:
b4:e1:83:24:86:a1:be:bc:0b:29:67:ec:ec:80:f6:49:8b:b6:
1e:a4:8f:16:9e:2f:80:b8:a6:1f:a9:62:68:9c:84:09:44:8a:
de:9f:3a:66:fd:68:85:c4:73:57:13:92:34:fe:82:70:c5:3b:
16:f9:6f:14:e3:01:17:c4:21:1c:f9:f8:95:9c:c6:e2:59:ba:
cf:1d:ea:de:bc:00:92:97:12:9a:30:67:19:a3:83:37:01:8f:
e6:67:d2:42:13:bb:9d:91:c6:18:b4:45:6a:71:66:bc:f4:85:
73:24:df:d7:43:21:0b:89:33:2f:9b:10:54:35:0a:2e:4b:d1:
54:45:92:a0:06:d2:31:41:41:81:bb:44:1a:e6:b9:a4:67:07:
2e:68:2d:ff:74:d5:d0:16:ab:64:97:5e:8b:07:0d:d8:54:8d:
56:dc:6e:02:09:51:30:c8:33:42:1b:da:da:40:47:64:d4:75:
99:7d:6c:9f:71:48:37:85:00:dd:8d:62:e1:e9:fb:a7:d0:d6:
66:46:a7:07:c3:ad:da:1d:58:c6:22:10:57:07:e7:03:75:a2:
91:22:50:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:56 2024 by rpki-client on console-fra.rpki-client.org