Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ne3h6Nr0UFPvAjR0gf8yjbDCWcE.roa
File: ne3h6Nr0UFPvAjR0gf8yjbDCWcE.roa (raw, json)
Hash identifier: BHrDC4VE3gqCRdDmmm8Wxh/cE1kPdoJBbV9fPLaafws=
Subject key identifier: 9D:ED:E1:E8:DA:F4:50:53:EF:02:34:74:81:FF:32:8D:B0:C2:59:C1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1CE1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ne3h6Nr0UFPvAjR0gf8yjbDCWcE.roa
Signing time: Wed 29 Sep 2021 02:48:20 +0000
ROA not before: Wed 29 Sep 2021 02:48:20 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.195.24.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7393 (0x1ce1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:20 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=9DEDE1E8DAF45053EF02347481FF328DB0C259C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4d:2a:52:c3:ce:1c:6c:18:43:83:06:14:94:
ef:5d:8b:65:c5:e2:4b:cb:35:0d:51:9b:22:4e:3d:
ca:1c:c9:02:12:69:6d:be:16:ed:f7:67:38:1a:d2:
f0:41:7e:40:9a:56:2c:a4:fb:f6:89:56:5b:57:16:
cd:a6:93:e1:d6:35:f8:b3:14:f1:61:dc:64:8b:d8:
24:fc:cf:fd:8b:41:06:ff:a8:0d:3d:01:28:e8:c0:
62:09:9b:c9:08:11:b5:f5:d3:cc:98:be:6d:8e:f2:
14:47:53:7a:23:ca:62:6f:72:0a:f1:c0:5b:75:6e:
e6:94:20:5e:a4:ca:ca:47:40:57:9c:bc:42:9b:96:
67:12:bd:40:29:5a:1a:b2:f2:f5:38:c8:c5:58:89:
ec:d0:e9:54:ca:d2:df:34:05:db:d1:65:3b:d1:62:
e2:e1:0a:7b:87:a6:4e:d7:6d:a3:42:1b:e9:b7:d4:
49:3b:2b:65:97:73:af:98:36:ee:9e:6f:d0:ee:18:
80:49:56:33:43:f7:e6:98:b0:66:90:05:83:b2:fb:
63:59:c0:09:45:d2:87:96:13:d8:76:50:a5:1a:1f:
aa:26:4b:15:42:3a:3a:a7:81:18:5c:cf:40:87:35:
48:4f:6c:f6:77:f2:5a:91:75:0f:b9:76:bf:c0:14:
a2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:ED:E1:E8:DA:F4:50:53:EF:02:34:74:81:FF:32:8D:B0:C2:59:C1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ne3h6Nr0UFPvAjR0gf8yjbDCWcE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.24.0/21
Signature Algorithm: sha256WithRSAEncryption
05:92:7f:c8:f3:ee:e7:11:11:11:88:0c:4e:f1:17:2f:42:2e:
cf:78:c4:e7:b0:23:43:b7:4b:54:cb:f7:8b:9f:5b:bb:05:2c:
34:13:93:bc:10:c4:7f:a7:19:7d:9c:03:4d:1e:00:35:df:f9:
3f:94:84:29:4c:0a:65:bb:0e:98:b9:6d:2d:9d:7a:85:a8:53:
57:06:b2:3e:2d:ba:54:17:e7:e4:58:07:71:3e:08:ed:76:9a:
7c:86:67:d3:d1:f3:5d:5a:2e:35:7a:4b:5b:c8:e4:00:c9:01:
03:f4:4b:94:71:2a:7d:7f:38:b8:80:48:74:88:ae:c9:a4:9b:
28:77:e4:cc:5d:01:be:e6:91:b0:11:ef:24:ed:11:a7:19:4b:
fd:a4:31:0b:bd:1a:14:c3:82:f9:af:a1:71:a8:cd:ec:9e:d1:
a9:59:e3:b0:c9:df:25:37:fb:b2:9e:6e:91:ad:ec:2e:7e:a9:
88:47:5e:7e:e5:64:6e:2c:93:d4:61:f7:d5:b3:fe:d5:35:d9:
c9:e0:29:48:89:1b:19:17:48:e2:ff:83:ed:4b:0f:08:ce:cc:
c1:50:a7:87:98:ed:ff:01:8d:5d:7b:3d:9a:8a:6b:65:f5:69:
bb:3b:33:fb:72:a9:2b:9d:53:b2:56:09:5c:d0:8c:13:48:db:
bd:54:c8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:39 2023 by rpki-client on console-fra.rpki-client.org