Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oDkGxPIZ36o01aVWsnX7d3isnLY.roa
File: oDkGxPIZ36o01aVWsnX7d3isnLY.roa (raw, json)
Hash identifier: qnJhFHBOIgsfvwCHWD3PuEAJ4W50UqK+CELfa1oV3t8=
Subject key identifier: A0:39:06:C4:F2:19:DF:AA:34:D5:A5:56:B2:75:FB:77:78:AC:9C:B6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 13DB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oDkGxPIZ36o01aVWsnX7d3isnLY.roa
Signing time: Sun 07 Feb 2021 11:56:27 +0000
ROA not before: Sun 07 Feb 2021 11:56:27 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.192.0.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5083 (0x13db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:56:27 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A03906C4F219DFAA34D5A556B275FB7778AC9CB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cf:fb:67:c4:d4:bc:5e:33:88:7e:99:f2:2a:
20:1c:ed:b9:74:6a:1d:4b:a0:db:38:6b:f0:e8:16:
60:26:0a:83:5c:ef:ba:75:2d:c4:c2:c0:0f:77:df:
34:2a:ff:a8:52:cd:f9:b8:40:5b:1d:e1:ba:d3:69:
83:33:28:00:de:f4:26:80:d4:49:db:9a:62:0f:6d:
e1:b4:32:f1:c9:13:a5:1d:86:b3:9b:15:bb:97:31:
74:de:58:8e:4d:aa:32:5c:53:15:03:21:73:88:70:
7c:59:5d:82:89:0d:a7:ba:fb:e0:73:eb:fd:38:d6:
17:63:a9:4a:ac:7c:49:62:96:d2:de:63:b3:e4:8a:
07:94:44:bd:a6:db:45:02:31:e6:0f:0b:33:3d:0e:
d6:db:3b:89:cd:a0:26:9b:5e:cb:70:62:dc:36:49:
82:b6:f3:5b:bf:ad:e3:59:50:e9:eb:71:3a:90:07:
50:56:76:89:b3:c5:97:90:99:15:52:58:6b:b8:59:
f4:5c:09:5e:e9:5d:1a:cc:de:9e:83:48:d0:47:85:
56:4d:69:d5:70:9e:96:77:4f:9d:33:34:a9:54:52:
b6:66:96:14:37:3c:50:6d:ad:e1:13:b1:a1:a4:d4:
89:cd:9f:eb:6a:c0:02:6a:8f:d8:37:99:49:d0:d1:
02:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:39:06:C4:F2:19:DF:AA:34:D5:A5:56:B2:75:FB:77:78:AC:9C:B6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oDkGxPIZ36o01aVWsnX7d3isnLY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.0.0/20
Signature Algorithm: sha256WithRSAEncryption
1a:39:8d:da:b6:66:65:4f:23:fc:d4:91:5c:90:0a:b9:c0:f2:
55:6c:0d:21:4f:a9:77:23:65:40:48:57:8c:27:16:31:07:b7:
15:83:09:f8:ec:80:b1:48:ac:a9:a6:92:3e:0c:7f:b3:a2:10:
46:60:f0:3a:4d:65:de:99:af:03:65:d7:25:4b:88:85:6b:07:
f6:ed:8b:c5:e3:81:a0:b2:b8:31:bd:ab:52:61:f1:20:6f:e2:
11:bd:95:b7:38:c1:b2:7c:99:fe:f2:c3:42:81:e4:e4:97:f8:
fe:e9:a9:05:49:80:77:6e:a1:26:ed:26:e5:92:e4:8d:3f:16:
d5:5a:2d:05:be:fd:86:3d:9d:90:47:26:ca:46:bc:12:10:9e:
3d:22:f2:73:6f:84:3c:26:82:8a:1c:bd:86:92:90:c3:54:ed:
6f:c2:d1:a4:e9:ca:d3:0e:d8:77:25:c5:2f:16:35:17:e8:8b:
2b:cb:31:81:6f:59:5a:6c:0d:1e:7c:b3:c6:dc:98:05:b8:a1:
9a:6a:6c:bc:fe:61:ab:c5:81:ab:3f:1d:c2:8b:10:24:e3:f0:
f2:b6:06:d9:f0:13:2e:75:b8:6d:fa:b0:5e:e0:d1:90:57:e6:
26:26:e4:9a:55:21:c2:37:8b:a0:d9:e7:21:84:18:fb:88:fc:
a4:e4:26:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:58 2024 by rpki-client on console-fra.rpki-client.org