Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/k4mw3exhYIIFMqaPtcARxYlkpoY.roa
File: k4mw3exhYIIFMqaPtcARxYlkpoY.roa (raw, json)
Hash identifier: 9Pq+h+/DaiGYxAJluzMj+wXl/6FJuPqQagZDu0cRiwY=
Subject key identifier: 93:89:B0:DD:EC:61:60:82:05:32:A6:8F:B5:C0:11:C5:89:64:A6:86
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0DD4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/k4mw3exhYIIFMqaPtcARxYlkpoY.roa
Signing time: Tue 29 Sep 2020 09:55:03 +0000
ROA not before: Tue 29 Sep 2020 09:55:03 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.193.176.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3540 (0xdd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:03 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9389B0DDEC6160820532A68FB5C011C58964A686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:60:7f:52:cc:0b:b3:40:df:63:4b:87:62:2f:
0c:90:b9:80:da:d7:61:0b:ce:0f:6f:0f:92:a4:33:
c3:28:9a:a8:f7:77:6a:f8:87:11:aa:07:49:c2:e9:
5c:42:d5:bc:aa:57:02:0c:c1:2e:eb:6c:c4:26:80:
e8:43:a7:8a:dd:af:76:e5:71:55:b8:e2:82:ca:9a:
35:a3:79:74:39:ec:80:a8:4a:dc:35:6e:5b:b5:b9:
77:81:10:dd:ee:25:bc:65:d2:77:51:ab:cd:14:ce:
8a:22:ac:06:b7:1a:c7:d4:e0:05:7b:69:32:9a:c6:
a2:e6:6e:c9:3b:bc:6c:3d:29:5b:5d:28:e1:fb:7f:
ec:25:7f:80:91:93:22:75:dd:85:39:c8:6c:56:2e:
66:17:70:6d:0f:2f:27:c1:02:77:d0:4d:9c:00:d9:
a2:54:36:89:a2:d8:c2:2c:f2:71:da:ed:ad:a3:a9:
bc:68:97:7a:ab:40:5b:4c:35:02:65:fc:0e:f8:f6:
dd:4a:d1:98:f7:32:12:8a:ea:e5:d1:50:38:96:dc:
7b:45:d4:f2:94:d8:dc:34:5a:d7:f9:72:5c:70:06:
ff:ff:ef:c7:61:12:16:75:86:a7:f7:ef:09:04:e8:
d0:dc:13:1e:93:d0:d5:6a:ba:53:68:bd:2c:74:5e:
63:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:89:B0:DD:EC:61:60:82:05:32:A6:8F:B5:C0:11:C5:89:64:A6:86
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/k4mw3exhYIIFMqaPtcARxYlkpoY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.176.0/21
Signature Algorithm: sha256WithRSAEncryption
ab:fd:7a:a2:4a:92:46:99:82:09:69:48:7a:62:07:a9:ce:95:
5f:a1:ec:68:17:ad:1d:4e:9f:a7:83:97:f9:83:51:18:1d:ae:
28:24:2f:9d:27:f9:18:75:c3:9b:a9:41:f0:13:46:55:89:c2:
a7:7e:b1:43:f6:29:4a:43:e9:47:47:ad:b6:9b:51:a0:4f:9b:
7f:c1:a1:9f:c5:33:20:55:48:5c:25:a1:d3:06:95:fa:a8:3d:
99:69:b2:a0:88:1f:9b:9c:d2:8b:1b:00:7e:37:e9:bd:7b:6b:
17:a3:30:7d:cd:de:2d:d4:5c:e4:79:3b:33:00:14:3f:d5:d4:
6f:f6:55:92:fb:a1:40:ea:39:05:48:77:1f:95:16:4e:1b:23:
1b:1f:14:79:7b:76:62:40:9c:20:2b:4e:09:05:79:03:74:e4:
53:77:30:7a:09:97:80:bc:e2:ea:8a:20:f9:34:6e:b8:58:0e:
6f:d3:dd:05:1e:77:45:71:a5:24:1b:20:86:f1:38:f2:9d:ac:
c7:79:c1:0a:d0:2d:08:cd:91:50:29:a9:7c:3b:eb:09:61:88:
f1:af:b0:78:ab:e3:83:1e:ee:be:89:0f:a6:55:c4:a4:08:26:
72:5c:be:d0:07:03:b5:7a:2d:6b:11:2b:8a:19:92:c3:0d:bb:
8d:78:17:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:57 2024 by rpki-client on console-fra.rpki-client.org