Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mvAFFFm5Tu0QSuVQerHs74IcUtQ.roa
File: mvAFFFm5Tu0QSuVQerHs74IcUtQ.roa (raw, json)
Hash identifier: qindZp9yqOT9zY44urn95giYsHeX12hea4klhP1wxxg=
Subject key identifier: 9A:F0:05:14:59:B9:4E:ED:10:4A:E5:50:7A:B1:EC:EF:82:1C:52:D4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 18FD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mvAFFFm5Tu0QSuVQerHs74IcUtQ.roa
Signing time: Sun 07 Feb 2021 12:55:54 +0000
ROA not before: Sun 07 Feb 2021 12:55:54 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 123.195.160.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6397 (0x18fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:55:54 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9AF0051459B94EED104AE5507AB1ECEF821C52D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6d:78:12:49:46:aa:10:d4:a4:e1:93:bf:e3:
2f:ae:0c:8e:ef:50:52:81:5d:79:75:04:ce:fc:c9:
c1:78:fe:44:b4:4a:b8:f7:36:74:95:98:8a:9d:2b:
59:dc:c9:65:e5:ef:b1:f9:f8:6a:60:8c:8b:24:6d:
8d:4a:29:82:74:38:ca:4e:94:a4:39:ff:17:cb:72:
80:14:b8:88:87:d8:3d:95:56:20:dd:79:ce:0a:b2:
68:14:f1:61:d3:e5:29:1f:39:e1:bd:fc:8d:32:7a:
aa:13:96:8a:d8:43:89:55:e6:4a:33:35:4d:b1:39:
f8:3f:40:da:cb:f5:a0:e7:ca:14:63:23:0b:64:86:
cf:20:1a:bf:a3:06:52:f9:39:a6:db:b5:7d:17:64:
e2:4a:81:4b:11:12:b9:50:db:94:7f:b0:9a:10:eb:
19:9e:bd:d7:e1:df:b7:e2:38:bd:cc:1b:af:8d:b9:
cc:5e:9b:ea:1d:0d:a7:3c:41:b7:f0:9b:3f:8e:c3:
88:29:f5:10:70:b9:05:09:97:d5:7f:dc:df:ec:a4:
83:9e:bc:b9:36:f1:50:b9:05:ce:81:95:14:ac:60:
3a:e7:f6:3a:b3:f9:1c:48:9d:2f:ca:d6:bd:d0:d0:
28:50:99:69:ff:eb:f5:ba:45:c3:f8:70:ef:bb:14:
61:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F0:05:14:59:B9:4E:ED:10:4A:E5:50:7A:B1:EC:EF:82:1C:52:D4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mvAFFFm5Tu0QSuVQerHs74IcUtQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.160.0/19
Signature Algorithm: sha256WithRSAEncryption
0a:25:9c:60:8c:ec:4b:c2:47:79:0a:ab:7e:e7:9a:f7:22:1c:
20:aa:22:28:cb:24:04:0d:92:20:e2:32:6f:ec:16:63:0d:9a:
db:85:51:8d:88:97:80:d3:c4:4f:2e:bf:60:7c:ef:72:3f:cd:
e9:33:34:ce:e1:e8:41:95:51:f9:80:e7:15:e9:19:3b:fe:47:
f3:e6:5d:c7:f2:ea:76:31:2c:65:e4:5f:1a:aa:35:c4:de:2b:
a9:4c:0b:e0:d6:fd:2c:b1:4d:c2:28:8b:31:1f:90:d8:e5:35:
b1:c5:a5:b6:3c:9d:5d:80:ec:4e:c1:01:72:70:0a:91:82:59:
fd:83:7e:e7:b6:9c:ae:86:df:a2:17:70:b0:34:45:ae:fc:47:
bf:1d:29:02:00:5a:7d:6e:b6:ae:f1:4c:34:da:a7:42:bd:76:
22:cd:ba:57:a4:9c:04:52:9c:3a:3e:78:f7:d4:ad:bb:81:c7:
ec:e4:3b:b0:0c:0c:1d:32:e9:37:29:bb:59:18:e9:9e:14:fa:
fe:9c:56:d3:c9:e8:8a:b1:a1:9c:39:59:0e:dd:bd:7c:a1:7e:
a7:5a:d5:9c:ed:e3:70:36:d8:f9:45:8c:81:18:98:a2:74:e7:
8c:3b:63:70:c6:a0:f4:2a:38:08:17:62:0d:0c:3b:dd:b4:66:
75:89:9b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-fra.rpki-client.org