Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ibCaXDS0y0pWTOx64PdWI_MaOSo.roa
File: ibCaXDS0y0pWTOx64PdWI_MaOSo.roa (raw, json)
Hash identifier: P06oiQY5ftppLL2KEeCi2b5ocGASLu2gRarURsCX5sE=
Subject key identifier: 89:B0:9A:5C:34:B4:CB:4A:56:4C:EC:7A:E0:F7:56:23:F3:1A:39:2A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1517
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ibCaXDS0y0pWTOx64PdWI_MaOSo.roa
Signing time: Sun 07 Feb 2021 12:02:51 +0000
ROA not before: Sun 07 Feb 2021 12:02:51 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.193.72.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5399 (0x1517)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:02:51 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=89B09A5C34B4CB4A564CEC7AE0F75623F31A392A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7b:b2:59:b1:5e:b2:16:be:f5:7d:6e:82:5f:
42:a0:5d:89:86:52:0d:39:ee:e5:ef:90:d0:38:e3:
cf:7d:2c:24:71:8f:48:fc:c1:58:a2:5f:e5:de:f5:
d3:33:a7:4d:4b:6b:83:a4:a4:c1:da:c5:11:ec:1e:
e2:4b:e9:fa:5c:4d:56:06:df:95:b4:5c:89:3a:57:
7b:a0:ff:89:47:27:e1:fe:6a:9c:47:93:54:b3:6e:
33:40:9c:d5:f7:8b:68:91:32:f6:4c:c4:3d:49:96:
5c:76:a1:b8:31:88:6e:3d:14:4e:6e:6b:4d:58:21:
af:00:0c:e5:ff:c8:65:f8:10:ef:a9:a3:35:67:63:
0f:6b:64:77:da:59:fe:6b:42:4e:42:98:0b:74:0c:
ec:75:fa:e5:16:e7:b4:d3:3a:64:e5:19:c6:5d:dc:
06:c0:7d:68:8e:bc:6e:2f:b1:20:19:73:c3:f1:69:
63:6b:0b:82:fd:47:1b:53:c9:77:50:08:2f:75:ce:
e7:44:62:92:ff:df:95:b9:cc:91:00:ae:41:ec:88:
a2:7d:1f:be:2f:88:d6:e5:16:fa:67:e5:79:3a:e8:
c4:a6:e3:7e:b5:d2:e4:49:9d:df:f1:c9:a7:1a:e5:
74:b3:d9:0e:26:ea:8b:b2:af:ec:46:b0:b0:bd:59:
0e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B0:9A:5C:34:B4:CB:4A:56:4C:EC:7A:E0:F7:56:23:F3:1A:39:2A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ibCaXDS0y0pWTOx64PdWI_MaOSo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.72.0/21
Signature Algorithm: sha256WithRSAEncryption
6e:bd:61:f8:76:b1:62:38:ad:ab:a8:9d:0c:1c:75:bd:67:b2:
f1:37:35:52:4d:34:26:9b:4d:ef:84:1b:03:5f:51:6c:6b:b1:
69:c8:0c:a8:bb:cb:b4:1a:f5:d2:bd:03:8e:8d:a3:06:75:1e:
d8:8e:00:dc:2c:85:99:54:de:a2:a4:9f:50:aa:b3:b8:9f:12:
5d:aa:ba:03:1d:e7:03:8a:cd:c1:77:af:54:cc:65:ea:00:61:
7e:e3:34:60:c8:d0:2b:22:14:42:40:c3:18:70:ad:f5:4a:30:
af:9b:30:67:ac:43:4e:b3:5c:81:8a:93:5f:96:25:5d:cf:eb:
e8:fa:2e:63:b8:39:07:45:99:92:05:70:f8:40:09:cd:33:56:
8a:a4:d3:10:a2:5d:68:02:5d:b8:68:1a:94:5e:dc:79:e4:ed:
51:e9:17:79:27:6d:fb:36:0c:6d:42:9e:11:20:08:41:ae:e2:
c7:60:13:0b:a6:26:8d:7f:1f:08:2c:dc:41:16:83:f3:a1:03:
a1:65:27:80:c8:80:45:92:0b:bc:15:ea:4f:5c:dd:22:cb:de:
5d:81:1f:76:dc:34:28:b8:4d:fb:fa:c5:e3:51:15:53:60:dc:
04:16:9e:d2:10:cf:e7:58:47:61:c2:67:28:ad:9a:d6:aa:ba:
8d:74:06:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:26 2023 by rpki-client on console-ams.rpki-client.org