Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iPXDMecbRXUP9DpusE3lw4MaCtk.roa
File: iPXDMecbRXUP9DpusE3lw4MaCtk.roa (raw, json)
Hash identifier: iiimMT/uJZkTXi6zTB5CZ7qc7JdMa88a2YTk2TVrJlE=
Subject key identifier: 88:F5:C3:31:E7:1B:45:75:0F:F4:3A:6E:B0:4D:E5:C3:83:1A:0A:D9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 168D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iPXDMecbRXUP9DpusE3lw4MaCtk.roa
Signing time: Sun 07 Feb 2021 12:12:45 +0000
ROA not before: Sun 07 Feb 2021 12:12:45 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.232.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5773 (0x168d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:12:45 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=88F5C331E71B45750FF43A6EB04DE5C3831A0AD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b5:f7:77:d3:9f:a0:43:24:2e:33:98:88:de:
d7:f3:dd:55:0d:95:e2:88:29:13:04:00:6f:92:ea:
0d:89:fb:a9:d9:45:53:d4:90:e2:79:43:1c:90:ee:
f2:5f:81:e7:3a:e3:9b:66:07:b3:28:07:45:2b:b1:
e8:35:25:88:ea:65:c9:ec:62:f6:ef:87:56:4d:fe:
48:5e:18:c0:75:32:ff:c6:3d:dc:86:8a:0f:c2:4b:
c6:38:4f:2e:13:cf:1b:32:fd:63:44:7d:d3:61:f9:
40:09:22:24:d1:23:13:7e:01:f8:de:e7:b8:86:3e:
c8:7d:39:c2:1b:fa:44:a1:69:10:59:f0:33:6f:17:
d3:3c:2f:ad:35:49:54:51:f9:08:b0:72:b2:c6:0e:
b4:dd:d7:85:49:66:ad:ea:db:7b:73:ed:8e:7f:18:
31:b0:42:04:60:98:57:e4:fe:7e:96:8e:35:ae:9e:
cd:d2:aa:cc:2e:68:04:ef:b1:f4:66:35:e4:90:ed:
39:bf:93:29:94:f5:c2:3a:e9:65:07:a6:b9:a5:92:
a8:e8:df:7b:0d:15:ba:51:d3:39:9d:2a:49:5a:05:
3a:b2:23:01:eb:5b:40:8d:d6:39:f0:3e:89:b5:91:
1a:6b:86:92:75:0a:70:af:b9:ad:a8:cf:8c:4f:5c:
f0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F5:C3:31:E7:1B:45:75:0F:F4:3A:6E:B0:4D:E5:C3:83:1A:0A:D9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iPXDMecbRXUP9DpusE3lw4MaCtk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.232.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:db:ed:e3:2b:69:7a:a0:f0:08:1c:ae:60:a3:db:f5:64:f8:
f5:34:da:bf:94:a2:f4:7e:1f:42:ef:e8:ff:e1:aa:08:96:61:
90:18:18:61:d4:d2:99:1c:42:47:c7:ea:52:ad:ec:98:f1:7c:
81:9d:54:99:e6:a8:c5:a4:62:52:86:ed:e0:a1:53:a8:45:7f:
09:2a:6e:78:df:df:1c:4b:fa:98:9b:3e:70:c7:85:bd:c6:1e:
90:81:8d:67:fb:79:06:55:70:c4:59:1d:b7:13:c6:e8:8b:7c:
d8:f6:a8:8b:bd:df:f5:ef:d2:14:8e:8f:11:e2:67:e7:ef:98:
ac:e4:14:bf:df:7c:c8:b0:a0:12:7e:c5:ef:7f:82:a3:ef:45:
78:30:57:d9:51:a7:67:7f:15:03:59:26:79:5d:ca:0b:b4:a3:
e2:0d:37:04:cb:5c:e2:39:d3:3b:da:24:5e:18:b4:16:18:df:
a6:3b:0e:ff:29:fc:22:69:8e:9b:0e:a7:9c:f4:53:34:83:c2:
cf:db:25:32:38:84:e3:a7:35:14:80:4d:e3:66:40:14:aa:cd:
9b:04:80:db:91:8b:b2:78:81:19:85:4d:4d:00:21:9a:8d:6f:
ec:10:63:72:92:56:19:a6:4c:ad:5b:e3:25:ae:c9:24:7c:55:
12:9f:d3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:38 2024 by rpki-client on console-ams.rpki-client.org