Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mBe5BUM-pVcCUQz0RWjh19JGq4Y.roa
File: mBe5BUM-pVcCUQz0RWjh19JGq4Y.roa (raw, json)
Hash identifier: azW1gYgG7EbDnq3EmwnoxHXlN7FIauuQv3N0S7IUGS8=
Subject key identifier: 98:17:B9:05:43:3E:A5:57:02:51:0C:F4:45:68:E1:D7:D2:46:AB:86
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1C69
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mBe5BUM-pVcCUQz0RWjh19JGq4Y.roa
Signing time: Wed 29 Sep 2021 02:47:44 +0000
ROA not before: Wed 29 Sep 2021 02:47:44 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.195.88.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7273 (0x1c69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:44 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=9817B905433EA55702510CF44568E1D7D246AB86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fc:7c:6f:88:6e:54:1f:66:c9:6a:1f:fc:9c:
18:fc:bd:c2:e1:a7:4a:e7:2a:15:b0:ee:77:3b:61:
c7:4d:ce:54:42:fe:b9:ed:c1:6e:db:bc:29:12:7c:
97:46:c3:c7:7a:29:0b:f5:4d:2f:94:22:96:e8:3b:
13:23:4a:ca:9a:d0:57:ba:fd:c4:b6:55:1e:e5:58:
34:11:17:90:8d:72:f2:70:59:b7:33:a4:0c:38:46:
4d:94:e1:4f:8d:70:b2:3d:e1:d7:0d:20:c9:cf:3c:
2b:9b:b9:37:5f:e8:43:fe:ce:c5:ab:99:9f:fc:27:
bd:f7:83:97:af:87:5d:e0:82:94:63:44:a2:a0:57:
4f:9e:08:4c:95:28:ba:24:b5:96:8e:79:b2:92:b0:
15:15:92:09:c5:d8:30:d2:4b:e2:90:ed:12:0d:11:
94:71:e6:58:d5:9f:4b:6e:ac:9c:c0:29:04:c8:38:
15:e6:86:29:1e:6a:e0:14:0f:f6:86:12:60:d6:b7:
e8:83:70:98:c0:ce:51:b4:25:97:1f:e9:f3:86:b3:
94:c1:38:c1:db:7a:50:a2:a3:2a:d1:48:de:cb:26:
62:e7:27:8b:c2:de:f5:58:61:b4:91:de:d4:f8:de:
8f:37:77:d5:fc:ff:c3:00:bd:39:25:24:50:45:f4:
2b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:17:B9:05:43:3E:A5:57:02:51:0C:F4:45:68:E1:D7:D2:46:AB:86
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mBe5BUM-pVcCUQz0RWjh19JGq4Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.88.0/21
Signature Algorithm: sha256WithRSAEncryption
9c:44:d5:3a:78:5e:91:ec:2f:af:9d:80:ab:a2:d3:e1:ec:f4:
79:57:dc:03:44:3e:fc:38:01:d1:28:a8:fc:9f:50:29:cb:d9:
bd:aa:b3:28:91:e6:16:03:0a:2b:ab:19:b6:d1:df:70:2e:11:
6e:f9:52:31:80:09:00:85:a8:bb:e7:07:1e:e4:f0:c8:76:9d:
44:f6:03:f6:d8:c0:10:3e:70:4e:2c:1b:d3:49:3f:7e:9a:4e:
ba:36:7e:19:55:bf:da:20:c8:11:68:78:9a:1f:6b:38:77:c3:
5d:05:d5:36:7d:4a:ad:59:df:be:7c:e1:03:53:33:06:b6:df:
85:bc:95:c4:77:d5:d1:03:fb:5e:6b:23:a2:5e:e2:c3:8c:2b:
63:fc:3c:44:c9:1d:2d:21:b7:7b:75:ec:44:e8:6d:ab:de:91:
55:ba:81:7f:1f:0f:46:a0:de:be:ce:ae:f7:60:ef:32:b1:2f:
72:8c:f7:1b:7b:be:77:6a:06:f2:c3:41:48:3f:ae:a8:72:83:
76:f7:bb:3c:6b:39:79:6c:10:bd:77:2b:ad:fd:eb:cd:bc:6c:
44:f5:de:61:bb:cf:94:e3:1e:fa:a8:6e:88:08:84:2c:d1:1f:
81:0f:a3:ff:3a:55:dd:89:d5:41:d8:8e:f4:de:1a:db:6b:3f:
06:38:82:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:39 2024 by rpki-client on console-ams.rpki-client.org