Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mBY7CTutKEbO_uc4hxli77zgP6A.roa
File: mBY7CTutKEbO_uc4hxli77zgP6A.roa (raw, json)
Hash identifier: mo1rzJ5TKKhIJYbx9ylFW601l7qsr/sY73/pOp1P/Vo=
Subject key identifier: 98:16:3B:09:3B:AD:28:46:CE:FE:E7:38:87:19:62:EF:BC:E0:3F:A0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1D4B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mBY7CTutKEbO_uc4hxli77zgP6A.roa
Signing time: Wed 29 Sep 2021 02:48:50 +0000
ROA not before: Wed 29 Sep 2021 02:48:50 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 123.195.208.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7499 (0x1d4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:50 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=98163B093BAD2846CEFEE738871962EFBCE03FA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:73:07:93:98:dc:92:a3:bd:88:b5:2e:47:a3:
51:ed:70:29:6e:c0:71:92:2e:15:3a:2d:e9:46:d3:
be:9a:e3:47:bd:2e:29:7a:ba:cd:a7:1c:14:7f:50:
91:8d:fd:67:ff:d9:75:46:ea:22:d6:3c:74:df:d0:
36:0f:d2:6d:11:1c:27:36:99:22:1f:e4:7b:09:2e:
70:24:0c:f5:fe:e9:6b:0c:98:bb:3e:a3:5f:37:f3:
2b:48:df:e5:7a:bc:dd:a9:bf:82:22:e7:0e:68:13:
1c:19:01:ea:6c:c0:f7:4d:ee:73:05:81:4e:4a:d3:
99:d0:57:87:93:a1:22:4d:bb:60:37:74:63:27:35:
b6:36:94:11:40:20:34:0f:55:9e:b4:42:5d:4c:06:
7d:99:2a:b9:40:3a:26:df:9f:70:99:bd:60:bb:7e:
a2:fb:57:e3:c1:9f:b7:61:2f:b1:59:ad:14:86:d9:
87:0e:65:1e:30:c2:92:eb:3d:4d:bb:0d:df:f5:36:
40:5b:de:1d:3d:a1:04:a6:93:4f:6a:e9:82:5a:d4:
5c:51:e7:59:34:ec:dd:8d:bf:27:d4:f4:16:43:b4:
bd:15:1e:b7:7e:be:a7:9d:96:c6:c1:6f:1e:d6:50:
41:e6:1b:37:0b:b6:d7:07:50:5c:fd:58:d0:8b:17:
e7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:16:3B:09:3B:AD:28:46:CE:FE:E7:38:87:19:62:EF:BC:E0:3F:A0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mBY7CTutKEbO_uc4hxli77zgP6A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.208.0/20
Signature Algorithm: sha256WithRSAEncryption
8d:33:39:d2:6d:7b:68:7e:1a:cc:67:24:2f:88:73:0c:fa:56:
d1:9b:42:91:89:8f:40:95:0f:f7:8f:d1:11:fe:c2:a9:dc:78:
4c:6d:85:f6:f7:da:ab:5e:17:70:6a:ec:80:e9:21:4a:52:31:
06:a6:d1:9e:8e:2c:b1:6b:74:26:59:16:23:b9:01:b3:c3:36:
d7:76:42:78:c8:42:cf:48:ce:de:b3:e6:01:8c:b5:9d:b8:8e:
47:f3:45:16:db:1b:ea:f3:1f:ac:44:d8:8d:06:13:64:81:12:
c0:c6:a3:2c:1a:d7:d4:1d:d8:18:c2:76:20:f2:65:f5:77:ea:
d7:d9:ae:c8:c5:6e:d2:d2:b7:66:d1:95:42:c0:4c:1c:26:10:
a1:de:56:f5:66:23:45:aa:0a:8d:6b:7b:6d:df:8d:3d:d2:38:
05:40:20:52:8c:79:75:c5:3a:0f:4b:47:e8:6a:31:b9:7e:3a:
5d:55:38:97:40:6b:26:50:5d:7a:b0:09:be:f9:8c:d8:9a:05:
6c:56:c5:77:d4:ad:29:23:f6:31:f2:15:37:20:dc:ed:e2:89:
99:d0:0c:0b:84:27:57:53:a9:5e:c4:2c:7c:6a:5c:02:74:0e:
30:20:f1:18:b9:ea:b7:98:f0:42:4c:d5:1f:27:14:20:8b:88:
b4:a5:50:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:57 2024 by rpki-client on console-fra.rpki-client.org