Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jqjPcUrHU5f14Fck-BstJXIYxpc.roa
File: jqjPcUrHU5f14Fck-BstJXIYxpc.roa (raw, json)
Hash identifier: Oy0EkepH1JwhIxaxtRQKAPW0mFm47lyOAOhoSdjdDGY=
Subject key identifier: 8E:A8:CF:71:4A:C7:53:97:F5:E0:57:24:F8:1B:2D:25:72:18:C6:97
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1B63
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jqjPcUrHU5f14Fck-BstJXIYxpc.roa
Signing time: Wed 29 Sep 2021 02:46:33 +0000
ROA not before: Wed 29 Sep 2021 02:46:33 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.195.0.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7011 (0x1b63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:33 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=8EA8CF714AC75397F5E05724F81B2D257218C697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:21:10:f0:53:03:6b:38:d5:a3:64:48:c0:ed:
aa:0b:bf:5e:0a:8a:ef:25:6a:53:e9:19:43:68:a0:
b4:b4:ea:4b:35:90:4f:7c:5b:eb:ad:48:04:8d:fa:
3a:d5:15:e5:6b:f9:db:2b:de:6e:1d:bb:df:e6:4e:
26:1f:06:fe:dc:bf:26:ac:06:76:26:a5:cf:82:c6:
3f:db:ab:21:46:48:c4:26:eb:09:dd:b7:91:22:a4:
c3:d5:06:03:31:3c:ea:63:ee:72:a2:e7:09:81:8b:
bd:f8:6b:16:de:fb:da:30:39:35:b0:77:b4:15:d3:
d4:c4:d4:95:11:62:a3:eb:bb:af:37:a0:75:98:2f:
a3:f5:60:1d:22:da:66:fa:32:9e:71:39:3d:29:fa:
30:4b:1e:24:19:f1:97:21:e2:51:22:3d:f8:12:3a:
a4:11:45:ef:b5:21:02:63:43:52:56:cf:66:c4:ec:
8d:61:0d:d2:85:df:09:c5:76:3b:ad:e1:69:0d:a5:
69:db:bb:20:c9:ca:4f:2a:32:f5:dd:e8:51:12:82:
08:47:c6:ce:fd:7f:8c:9f:fb:29:75:e9:b0:f0:be:
d2:08:21:80:0e:c5:64:73:9c:c7:2f:2a:2a:1e:59:
a5:a6:2a:cc:10:d8:00:1c:b2:c8:d2:78:6a:e4:e4:
b1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A8:CF:71:4A:C7:53:97:F5:E0:57:24:F8:1B:2D:25:72:18:C6:97
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jqjPcUrHU5f14Fck-BstJXIYxpc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.0.0/21
Signature Algorithm: sha256WithRSAEncryption
19:8e:f2:a1:fd:27:a8:0b:bd:da:21:70:f0:d8:78:18:85:55:
c4:07:00:e4:97:02:06:9d:28:42:4c:cb:b7:6e:7d:f2:ff:04:
a6:7e:e5:8a:64:76:cf:d2:a2:03:4e:1e:c7:e7:ee:f6:06:33:
53:22:4e:d3:3b:e9:e7:d8:72:37:8b:ca:56:ce:b2:74:51:ff:
75:66:3f:9b:63:60:37:34:00:47:b0:63:16:f4:ad:85:96:52:
83:fb:9e:2e:0e:6e:72:41:5d:74:bd:b3:0b:68:c7:74:33:9a:
03:68:c2:45:5b:d7:e2:34:93:35:0d:e3:6e:76:42:15:37:45:
f0:ea:9c:64:98:1c:53:0f:22:df:2b:cf:b4:47:5c:b8:23:16:
f4:57:8a:47:6e:f7:40:d4:f5:f4:6a:a8:79:b5:8e:fb:0b:bb:
0b:be:2e:cc:0d:99:54:ac:26:23:d3:2d:b8:4d:36:b3:5c:90:
03:fc:bb:1b:51:d4:5c:a8:46:0c:f0:1a:45:2c:c5:7a:14:ac:
df:04:66:e9:47:2f:81:88:a9:c2:ec:38:f8:ed:31:ba:76:6c:
cb:46:7d:92:3b:dc:e0:ef:b2:d8:71:e9:d7:2e:2a:35:27:b2:
40:25:74:b1:28:12:53:84:58:ba:4e:34:d0:11:03:ff:58:59:
d2:ae:2e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:57 2024 by rpki-client on console-fra.rpki-client.org