Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pOMf0YET_OgAAjwIgs8IzxLv23A.roa
File: pOMf0YET_OgAAjwIgs8IzxLv23A.roa (raw, json)
Hash identifier: LKKFXVgQ6Z7xnda/ZqYGiztaCq0NZ2Hf9xTqCF5RQGM=
Subject key identifier: A4:E3:1F:D1:81:13:FC:E8:00:02:3C:08:82:CF:08:CF:12:EF:DB:70
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1721
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pOMf0YET_OgAAjwIgs8IzxLv23A.roa
Signing time: Sun 07 Feb 2021 12:16:52 +0000
ROA not before: Sun 07 Feb 2021 12:16:52 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.193.224.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5921 (0x1721)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:16:52 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A4E31FD18113FCE800023C0882CF08CF12EFDB70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d4:59:b8:16:9d:e9:84:39:32:74:57:c6:0b:
08:6c:90:3d:17:8e:0b:d8:3b:7c:d9:9e:2a:bb:54:
c1:2a:0b:c2:b8:a8:17:63:81:07:05:73:69:d5:96:
60:98:29:75:be:db:b1:50:e8:bd:83:fa:6f:58:57:
2d:e0:ff:2e:b3:48:54:fa:36:a2:2d:8d:6e:66:8b:
95:99:e1:6b:ba:12:c9:de:25:12:4e:6b:c6:66:68:
86:3c:d3:92:b7:9d:30:8d:0b:63:0e:ea:5e:37:72:
b4:ed:43:dc:de:f8:2a:26:ea:9a:17:bf:d1:90:82:
cb:fd:ca:83:f8:2d:82:39:5d:a2:9c:19:23:cf:cf:
7e:ec:a9:e3:a1:e9:eb:93:0f:25:db:f9:75:53:1d:
c6:f5:64:d0:d2:f0:2b:7f:d5:c5:e9:cb:82:c6:3e:
7f:67:d8:e6:b2:10:6b:8d:48:f4:ec:7a:0d:61:fc:
73:bd:14:45:de:30:82:1a:7c:51:24:a1:63:90:29:
95:42:89:dc:44:b2:14:45:9e:fb:d6:26:06:de:c9:
ea:e6:8b:41:0e:19:a2:8f:a2:5a:fe:6c:99:8b:80:
60:59:b9:a9:3b:be:56:17:6b:04:60:a6:63:65:e8:
5b:c1:ab:fc:f5:cd:27:7a:05:a5:1d:6b:18:ca:ea:
af:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E3:1F:D1:81:13:FC:E8:00:02:3C:08:82:CF:08:CF:12:EF:DB:70
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pOMf0YET_OgAAjwIgs8IzxLv23A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.224.0/21
Signature Algorithm: sha256WithRSAEncryption
0e:39:23:a5:63:a6:f7:01:8d:e8:18:91:11:3e:08:c6:11:f5:
c9:a6:3e:8e:9e:55:05:cb:a8:6a:d6:bf:10:50:dc:a9:2f:27:
d3:02:c8:61:47:87:3f:2d:b1:d2:7e:dd:6e:9c:df:b1:00:1a:
cb:9d:60:de:52:77:1e:72:a7:fd:ca:a5:3c:80:4d:bc:f7:67:
ce:15:ac:c1:69:71:9e:9e:e1:2c:e3:f2:b8:ab:af:f4:34:28:
24:6c:80:df:04:fa:76:81:33:7c:3d:80:f4:e6:72:38:f5:72:
47:71:ce:e8:78:f2:d3:ff:aa:1d:16:77:6c:7f:2e:27:2f:bd:
18:b5:bc:d4:1d:72:92:10:66:fe:7e:0d:84:04:e3:09:06:9c:
f7:9b:86:a0:ef:3d:25:00:0f:80:1b:8c:c7:6b:02:a0:d9:ac:
b9:cd:1b:10:3a:a4:21:fa:8c:c2:d7:c6:f8:da:2e:4c:6d:48:
76:99:b5:7e:9b:43:e6:32:cb:22:ce:43:83:45:15:cf:cc:0e:
a8:1a:99:38:be:9f:24:bf:e8:b9:30:7c:8f:ad:e5:a9:76:1a:
54:ac:84:43:37:5f:f2:12:7a:80:66:45:67:ad:26:65:e0:08:
0f:66:58:b1:a9:56:51:1e:9b:dd:ab:b0:65:20:ec:f5:67:84:
60:91:69:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:40 2023 by rpki-client on console-fra.rpki-client.org