Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/j5xFVl-Lu6JDY6JulnYOtRFYIxA.roa
File: j5xFVl-Lu6JDY6JulnYOtRFYIxA.roa (raw, json)
Hash identifier: ZZzDcADh8dQzHJtI2iFXV6Ew0WLaBc4sAGL1hpakKnE=
Subject key identifier: 8F:9C:45:56:5F:8B:BB:A2:43:63:A2:6E:96:76:0E:B5:11:58:23:10
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1B28
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/j5xFVl-Lu6JDY6JulnYOtRFYIxA.roa
Signing time: Wed 29 Sep 2021 02:46:14 +0000
ROA not before: Wed 29 Sep 2021 02:46:14 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.193.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6952 (0x1b28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:14 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=8F9C45565F8BBBA24363A26E96760EB511582310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b1:cc:48:9b:f7:a8:38:29:b7:9f:66:89:97:
56:14:0b:3c:cc:30:8b:4c:58:a6:c1:17:2b:90:19:
35:35:be:a6:06:05:b7:cf:ee:87:d6:78:aa:4d:3c:
e2:21:41:af:62:d5:52:ec:ba:e6:5d:d7:8f:3b:13:
21:02:3c:72:b3:d1:12:66:f0:6f:68:76:18:3e:0f:
ee:7f:cb:6b:af:ca:3d:b4:4a:94:6d:7f:4a:d8:12:
b1:1c:ba:91:e1:4b:b8:54:1d:c5:23:21:fb:90:a1:
3c:33:f9:48:77:01:d8:e8:a5:30:5b:fd:b6:70:0f:
86:43:3d:8a:f0:dd:04:7a:89:fd:92:e5:35:d4:df:
e3:56:7b:c8:0a:3c:9f:a7:34:a9:45:f5:bc:8a:18:
cb:1e:4a:b7:be:c9:0b:c1:a3:b8:18:ee:07:f5:16:
a0:ce:7f:f1:9b:84:ba:2e:ae:86:4c:37:99:4b:fc:
0d:09:ad:d8:3f:bc:38:a4:87:48:68:88:6a:d8:82:
22:34:62:53:8c:27:e1:40:18:6d:e1:16:9b:62:b9:
2b:a7:7a:eb:39:dc:41:ba:4d:23:d6:99:b1:05:cb:
ab:e9:f1:91:05:3c:ec:cd:f5:f9:df:b7:9d:3a:69:
70:99:51:a1:fb:30:b3:2a:dd:94:9e:99:0d:23:c9:
ed:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9C:45:56:5F:8B:BB:A2:43:63:A2:6E:96:76:0E:B5:11:58:23:10
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/j5xFVl-Lu6JDY6JulnYOtRFYIxA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.32.0/20
Signature Algorithm: sha256WithRSAEncryption
36:24:f4:08:58:ea:a4:99:06:d3:e4:fe:40:4e:56:b9:9e:19:
a9:0c:44:5f:9b:cd:50:53:42:1d:80:58:ed:80:92:bb:2f:2b:
d8:50:c7:cb:e9:8f:e4:a1:87:8a:4a:9e:97:c4:0c:03:4c:86:
18:59:0f:8f:16:ca:ff:e8:7f:13:f8:63:eb:f0:bc:79:02:e3:
e5:c8:50:a1:5c:be:7b:1b:7d:a5:46:75:4d:ca:04:ea:da:8d:
c0:ea:7c:21:32:ab:ef:a5:1a:10:23:97:d1:b6:39:62:f9:eb:
82:da:88:41:ae:fe:27:8c:af:14:f4:30:b8:47:4e:44:ac:d4:
8f:7e:03:47:b4:cc:6c:1e:d0:26:2e:53:16:4b:7c:56:c9:74:
ec:57:d7:e2:e8:6b:0a:e4:5d:5c:43:b0:ff:47:48:f5:f4:e8:
fd:76:fe:08:8d:e1:34:74:a2:62:3f:64:7a:b5:86:3a:92:2d:
57:89:1b:20:06:73:2f:da:0f:ce:63:7d:4f:25:15:b4:d4:d2:
d0:9a:65:82:98:0c:8f:d6:7d:cf:b1:6d:91:f9:4f:6e:44:d6:
4f:fd:63:3d:1a:35:74:77:8f:9f:04:a4:98:f8:22:ed:d2:88:
eb:0d:98:f1:83:4b:18:0a:a8:f5:b7:10:69:9f:69:d4:84:9b:
14:99:4a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:57 2024 by rpki-client on console-fra.rpki-client.org