Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kwaGTmvdW8MEkJ_SIV-YHeR6XvQ.roa
File: kwaGTmvdW8MEkJ_SIV-YHeR6XvQ.roa (raw, json)
Hash identifier: wH5mdoLFP//mjDqIoCGiJoXabsw0IHXrBOUTVNloLFw=
Subject key identifier: 93:06:86:4E:6B:DD:5B:C3:04:90:9F:D2:21:5F:98:1D:E4:7A:5E:F4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 151F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kwaGTmvdW8MEkJ_SIV-YHeR6XvQ.roa
Signing time: Sun 07 Feb 2021 12:03:00 +0000
ROA not before: Sun 07 Feb 2021 12:03:00 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.193.88.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5407 (0x151f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:03:00 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9306864E6BDD5BC304909FD2215F981DE47A5EF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2b:64:3b:bc:69:dc:01:06:78:a8:91:6e:10:
7c:10:fe:f8:8c:f5:d0:31:e4:bc:1a:8f:91:3e:41:
63:2f:a9:a0:84:d1:30:5c:ce:9a:63:a5:2d:fd:19:
b4:1c:38:7d:7f:54:a4:ba:8b:4a:e3:6f:d5:bf:62:
ba:88:58:d3:12:85:a8:c5:f0:ef:81:a4:9f:4a:14:
5b:58:b2:3d:fc:03:ac:4d:be:aa:02:dd:9c:c9:59:
e9:5b:55:30:02:45:51:72:b1:5f:55:c2:62:b4:11:
74:30:e7:c8:94:66:c9:52:5d:3a:af:dd:45:a1:6f:
02:e8:43:ba:2e:54:95:9e:7a:aa:92:1f:32:1a:03:
0c:2c:a7:83:f2:14:32:fa:6c:79:fe:96:67:72:4e:
51:9c:79:6e:46:55:87:ff:2a:66:a0:4d:a9:a2:ed:
3e:cc:f6:fa:b1:3f:8c:36:af:9e:9a:6d:0b:63:ae:
e5:14:48:be:c2:77:47:31:d8:66:35:79:a2:a8:84:
2c:4e:92:13:3d:9d:0e:13:81:ba:42:34:30:5c:af:
53:77:4c:06:2f:80:07:b3:67:90:a0:3f:1c:3e:a9:
4f:cf:60:74:51:3f:c4:43:e4:cd:a2:8d:e7:53:01:
7f:3d:76:5e:2f:ee:56:7b:b6:32:08:54:54:58:18:
49:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:06:86:4E:6B:DD:5B:C3:04:90:9F:D2:21:5F:98:1D:E4:7A:5E:F4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kwaGTmvdW8MEkJ_SIV-YHeR6XvQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.88.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:40:6d:9f:13:4f:71:4e:59:63:c3:5e:93:9c:d3:04:0e:a5:
e2:37:57:1b:08:0a:cc:8a:85:90:e6:48:22:21:cf:0d:30:5d:
5a:15:b4:e8:d0:d3:da:c3:af:01:a8:a4:8f:ec:10:58:3a:36:
ea:5d:fb:d9:3a:90:33:f0:be:93:e3:33:f2:66:16:bf:f7:32:
03:fd:a1:3c:7a:5c:a2:0a:df:38:01:34:65:d9:d1:b7:37:9e:
35:68:6b:0d:2e:12:93:12:e5:2b:02:fd:c1:fd:87:40:26:48:
04:b2:16:0f:42:ab:87:98:a9:68:d6:0a:cd:32:5d:77:1e:90:
da:cc:a1:b3:28:a0:1e:49:c1:d6:01:35:9a:8e:7f:f2:64:07:
3f:82:38:d3:56:38:d2:92:91:9e:60:d4:37:34:93:71:ac:77:
ad:c3:e7:c7:45:49:31:06:73:53:0d:6e:61:8c:f0:d3:f9:0b:
fe:75:98:82:da:a3:c8:3b:9b:7b:cd:8c:fb:70:9c:c1:00:c5:
27:c0:de:01:37:2f:c5:c1:8f:3d:fc:4a:96:be:e7:90:00:eb:
b8:e0:57:93:52:58:0c:8a:c9:97:d0:6d:4c:10:a9:61:ea:14:
d0:cb:11:08:79:a1:58:4a:90:f1:e7:a0:bb:fe:fb:70:dd:04:
25:c2:8a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:38 2024 by rpki-client on console-ams.rpki-client.org