Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/l5f7a_BRw-C_4CCMqAJFZ9U4aMc.roa
File: l5f7a_BRw-C_4CCMqAJFZ9U4aMc.roa (raw, json)
Hash identifier: 6onvFmrKpZnhJmmk6gvnnVXw6jU/+wTwR3grAaWW87A=
Subject key identifier: 97:97:FB:6B:F0:51:C3:E0:BF:E0:20:8C:A8:02:45:67:D5:38:68:C7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 13FB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/l5f7a_BRw-C_4CCMqAJFZ9U4aMc.roa
Signing time: Sun 07 Feb 2021 11:56:54 +0000
ROA not before: Sun 07 Feb 2021 11:56:54 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.192.32.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5115 (0x13fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:56:54 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9797FB6BF051C3E0BFE0208CA8024567D53868C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:1d:c6:0e:b8:0c:c5:1c:10:f3:00:4d:ab:6b:
d3:f0:d8:fe:d9:a3:84:f4:11:a5:fd:4b:b9:16:fd:
ec:95:50:8f:97:81:38:d9:0a:ee:85:1f:e9:74:ee:
93:cb:e8:71:7f:71:ff:c1:22:36:51:1b:f4:77:7c:
6b:7c:8d:e4:24:83:df:be:c6:b2:0a:22:39:02:24:
62:97:ae:e1:0d:59:fc:4c:8b:62:73:69:8d:93:1e:
b2:39:0e:32:b1:4a:c3:19:3f:b5:5d:7f:3a:ca:84:
bb:91:9e:98:20:6f:cc:7b:a6:df:0f:1d:57:08:93:
d0:b1:b0:22:6e:ca:87:85:27:9a:ec:43:c7:c9:27:
65:0b:aa:5d:b5:99:fe:ad:cc:9d:cc:32:26:3b:1d:
8e:bf:77:7e:1e:aa:60:6d:f9:84:01:81:03:76:78:
45:03:36:43:d5:95:56:3a:16:4b:57:52:71:de:6f:
85:9f:ff:74:04:cc:39:51:dd:94:c8:e2:a4:86:07:
ef:65:90:46:c7:ed:2c:4f:23:1e:fa:93:e0:55:b1:
f2:62:eb:0d:62:51:60:b4:00:df:57:11:de:f9:42:
ca:da:b0:d5:79:e0:58:0f:55:01:49:0f:17:b6:37:
e0:ca:21:f5:65:0c:50:75:65:78:24:04:11:56:cb:
4a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:97:FB:6B:F0:51:C3:E0:BF:E0:20:8C:A8:02:45:67:D5:38:68:C7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/l5f7a_BRw-C_4CCMqAJFZ9U4aMc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.32.0/21
Signature Algorithm: sha256WithRSAEncryption
ad:af:10:fe:3b:44:6a:fd:e6:9c:4f:17:29:18:d7:33:2d:5b:
01:5f:c7:b0:0c:fe:c5:4c:4b:1b:d7:1d:c5:34:59:02:97:ba:
da:0d:a9:01:dd:cb:bb:33:70:4f:90:d8:73:94:64:26:8c:88:
63:dc:b3:d6:71:ed:8c:5b:45:b6:6e:e0:87:ac:86:18:60:c9:
24:c4:38:84:c8:b4:e6:a5:d8:99:95:7c:3a:5d:61:bf:16:51:
23:94:e3:86:d5:6a:91:2a:4c:fc:67:f8:97:63:51:ec:df:50:
6a:ac:3b:ca:41:54:22:46:4f:9c:18:9f:16:89:2d:3a:e0:ce:
13:8c:ae:16:a3:5d:41:ad:ea:74:2b:58:fe:27:bf:a9:c9:43:
33:01:b3:a8:68:54:96:49:3f:3a:3d:2f:24:e9:ca:ff:5a:4a:
64:e4:f1:80:3e:a3:25:17:64:ae:ee:59:5b:99:12:f8:cf:1d:
8a:2f:8b:0f:b3:e0:77:9b:66:95:a9:1f:96:15:a2:31:1f:6f:
3a:ee:db:f6:a6:ec:98:e4:80:3d:29:c5:b5:1c:66:9a:d6:22:
92:d3:7c:68:e5:f8:d8:73:7e:5f:c8:d8:ce:58:28:1e:dd:5c:
9e:c9:63:2b:76:c7:34:fd:02:fd:a1:87:3d:0c:97:5c:33:9e:
27:13:d6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:27 2023 by rpki-client on console-ams.rpki-client.org