Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nlU5Sy8u9ANc3TSUAmHSlNyzSdc.roa
File: nlU5Sy8u9ANc3TSUAmHSlNyzSdc.roa (raw, json)
Hash identifier: /mVIU2iyULYAHo6lfukffpFo+H49HFbDUBNTntuNe2A=
Subject key identifier: 9E:55:39:4B:2F:2E:F4:03:5C:DD:34:94:02:61:D2:94:DC:B3:49:D7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1471
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nlU5Sy8u9ANc3TSUAmHSlNyzSdc.roa
Signing time: Sun 07 Feb 2021 11:58:40 +0000
ROA not before: Sun 07 Feb 2021 11:58:40 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.152.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5233 (0x1471)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:58:40 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=9E55394B2F2EF4035CDD34940261D294DCB349D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:30:fd:db:09:0a:ba:2b:d8:f9:11:15:f0:a3:
d8:4e:5d:35:58:09:f7:12:52:da:5b:c9:cd:43:42:
92:2d:64:5d:1f:3b:ac:16:c1:13:40:6f:f2:15:4a:
a6:ee:24:df:81:03:50:c5:49:3c:d5:38:2e:1a:16:
66:cc:3e:a4:75:51:17:8d:3a:16:8c:73:51:35:b1:
70:8c:e1:ad:4d:34:f0:95:6f:a3:69:4c:ab:41:62:
4c:88:56:d3:c9:bd:54:2f:8c:53:53:b8:2f:1b:23:
85:3f:fc:9a:60:89:7d:af:66:5c:42:5b:18:de:2c:
d7:f7:6b:80:5e:83:ee:1a:a5:84:ca:89:e1:24:73:
0c:be:63:ea:33:65:24:f1:1e:1d:51:0c:4c:95:dc:
a9:66:66:72:03:5d:de:f3:9d:f8:2a:f4:48:f5:3e:
90:27:37:d2:27:d3:62:51:17:26:a4:8e:cf:e0:f4:
a6:ec:b4:cb:bb:c9:ad:6f:21:e0:a2:e3:97:12:a8:
15:d7:22:31:09:96:c5:44:be:4e:89:f9:2d:a1:d9:
20:61:0f:b3:e4:f4:af:63:6a:ba:db:d8:52:d0:c5:
61:7d:f9:8a:b3:70:13:c8:73:2f:16:cd:57:54:c2:
d5:be:2b:62:59:fc:0f:0d:73:3f:12:03:31:f3:81:
de:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:55:39:4B:2F:2E:F4:03:5C:DD:34:94:02:61:D2:94:DC:B3:49:D7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nlU5Sy8u9ANc3TSUAmHSlNyzSdc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.152.0/21
Signature Algorithm: sha256WithRSAEncryption
50:61:0b:3c:f9:fb:f8:f0:b4:8c:28:02:56:13:45:49:d3:6a:
95:0a:4d:28:31:90:00:61:0a:7e:46:98:39:c6:43:c8:1b:95:
d6:c8:47:ae:83:ec:c5:27:c5:d4:4f:87:bc:ed:82:1d:ee:3d:
5a:93:be:2b:45:4d:c4:64:5f:51:00:0a:73:70:30:8e:a2:4a:
e5:81:8e:ec:bc:1d:52:42:78:c2:43:60:f3:0e:7a:e4:e9:7d:
54:53:c2:fb:03:ae:b7:cf:0d:da:bb:fb:3a:32:47:9c:39:b7:
5e:30:be:85:65:9e:5f:f6:03:fe:3d:a3:01:b9:f4:b9:bd:69:
7e:2c:ba:89:ac:77:b5:f0:86:80:89:95:86:bc:fb:21:3f:c0:
1f:57:3e:f0:2b:81:76:26:33:2b:29:58:30:f4:43:9e:d8:22:
54:55:a1:52:21:f5:c5:1f:0e:29:22:63:66:45:ec:66:4c:e2:
52:e9:18:cb:3d:69:05:22:49:be:2b:f6:a7:47:a1:b3:12:c1:
d1:e0:08:22:60:53:aa:f5:ee:20:90:de:a6:3c:8e:42:4d:09:
dc:e1:b8:b3:6f:59:27:92:17:df:38:60:82:2e:49:92:07:4d:
05:4a:b4:2b:22:cd:d2:af:30:5f:b3:51:88:52:0b:67:1f:07:
2f:d7:5a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:39 2024 by rpki-client on console-ams.rpki-client.org