Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mpQ6Gz-LDDvf3LzqkItjxuTcegs.roa
File: mpQ6Gz-LDDvf3LzqkItjxuTcegs.roa (raw, json)
Hash identifier: +kN6/o3KCnx/vab1X5ikOKaRZ0HfWtoslYeJXLNnc7c=
Subject key identifier: 9A:94:3A:1B:3F:8B:0C:3B:DF:DC:BC:EA:90:8B:63:C6:E4:DC:7A:0B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1783
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mpQ6Gz-LDDvf3LzqkItjxuTcegs.roa
Signing time: Sun 07 Feb 2021 12:19:51 +0000
ROA not before: Sun 07 Feb 2021 12:19:51 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.80.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6019 (0x1783)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:19:51 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9A943A1B3F8B0C3BDFDCBCEA908B63C6E4DC7A0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e7:16:5d:94:11:31:46:93:09:c4:93:33:1e:
dc:e8:7f:77:ef:db:07:dc:bc:60:52:c7:4d:0b:d9:
e1:4e:87:8c:31:74:17:eb:bb:8c:15:eb:a5:d4:8b:
11:1e:07:f5:2d:83:82:3f:cc:9c:9e:3c:ca:93:82:
30:79:de:80:cb:7d:5e:92:1a:db:69:fc:d6:db:41:
c6:87:ff:7e:a6:a2:c5:c1:ee:9b:8a:8d:a4:79:75:
fd:85:48:a9:9a:f9:1d:91:af:9a:f8:f9:17:de:25:
14:1b:04:65:3d:56:d0:fd:b1:ce:18:f2:8c:75:ab:
33:62:fa:dc:8d:83:65:26:ac:1f:35:d7:03:2c:9e:
82:80:6c:50:3a:49:b7:6d:f2:74:43:11:59:cf:34:
71:5a:2e:4b:e6:96:ad:70:6f:7a:6d:17:2e:92:6c:
8d:fd:63:46:e3:ad:68:16:30:1d:93:73:c4:e1:2a:
90:93:5d:4f:a7:fd:1d:4f:67:89:65:3c:d1:77:79:
6e:dd:02:10:99:ac:19:29:17:51:ea:ba:20:6d:c7:
7b:d5:40:d9:eb:03:3c:8d:36:ef:bf:1b:53:3a:05:
da:74:c1:3f:12:6c:76:36:2c:ba:69:59:71:b8:21:
16:79:73:6b:f9:77:79:50:46:49:30:10:77:6a:df:
df:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:94:3A:1B:3F:8B:0C:3B:DF:DC:BC:EA:90:8B:63:C6:E4:DC:7A:0B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mpQ6Gz-LDDvf3LzqkItjxuTcegs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.80.0/21
Signature Algorithm: sha256WithRSAEncryption
10:50:d1:e8:02:7f:d1:a8:63:7c:6b:0b:66:3e:58:2e:f3:10:
ea:cf:9b:ed:cf:19:2a:fc:bf:97:9c:a0:42:8e:90:9d:c7:d3:
2a:75:18:dd:83:7e:26:09:6f:a9:3b:c5:6c:6d:47:b5:31:ee:
3f:55:5c:db:73:24:57:b6:c8:eb:91:81:05:74:8b:c1:79:8d:
69:e1:f8:2e:25:c1:1b:e6:9c:37:5f:0b:05:f5:47:bb:02:a6:
92:95:a4:93:35:3a:e4:51:7b:e7:71:c0:c9:d2:55:a7:fb:fc:
0b:3f:df:f7:42:0a:6e:2c:e0:fd:21:4c:18:b0:ca:72:c7:ec:
9f:09:dc:9b:16:48:0c:25:db:c3:00:54:d8:0a:7c:28:99:f5:
52:fe:40:13:3f:7a:7b:74:29:ed:54:4f:2f:ec:40:76:83:0f:
8b:9f:d4:0c:0b:4b:4c:42:01:9a:63:68:b8:85:78:5c:8b:aa:
0a:30:5e:cc:8b:4b:44:f6:4d:0d:ac:2d:b9:55:f6:80:ce:86:
83:cd:93:b6:9b:e7:38:73:69:69:26:d3:80:61:17:e5:cb:0d:
fd:f3:1d:8f:7a:14:f7:b0:d5:7d:ec:97:3d:af:d4:79:35:52:
96:4b:e3:84:31:c2:38:40:b0:51:4e:e0:3b:52:43:e3:e2:d8:
9e:6c:77:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:39 2024 by rpki-client on console-ams.rpki-client.org