Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/s-mBK5E9w8wQ3THbvQGSnAUxb2M.roa
File: s-mBK5E9w8wQ3THbvQGSnAUxb2M.roa (raw, json)
Hash identifier: 8aNcuyY2g32jtCPS+6heIaIMjdMCkjVKnmoaHebVnx0=
Subject key identifier: B3:E9:81:2B:91:3D:C3:CC:10:DD:31:DB:BD:01:92:9C:05:31:6F:63
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1D51
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/s-mBK5E9w8wQ3THbvQGSnAUxb2M.roa
Signing time: Wed 29 Sep 2021 02:48:52 +0000
ROA not before: Wed 29 Sep 2021 02:48:52 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9924
IP address blocks: 123.195.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7505 (0x1d51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:48:52 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=B3E9812B913DC3CC10DD31DBBD01929C05316F63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3c:e2:9a:36:23:48:7f:96:e4:33:5c:b7:35:
13:13:55:9f:cb:bb:ac:73:13:ed:7f:de:de:fd:e2:
7c:4c:7a:df:8b:87:58:a7:55:1a:bb:08:44:7e:83:
a7:74:91:e6:b1:ec:0b:2d:04:32:92:7f:e2:04:90:
81:d8:59:ba:64:2f:28:d6:b7:81:41:54:75:86:a3:
5f:94:cf:99:29:a0:b2:5c:2c:29:de:4e:33:7a:72:
42:32:69:e1:47:cb:1e:be:51:78:50:c1:ef:a3:59:
c0:3a:83:af:8a:66:cd:5d:5c:0f:eb:d5:80:82:53:
18:45:73:41:b3:57:01:4c:9c:4f:e9:33:7b:28:23:
b9:27:64:38:e3:97:da:b3:ae:c2:e1:2d:df:13:b8:
cc:eb:9f:05:48:19:f8:ac:34:d5:db:be:75:40:71:
d7:e9:80:e2:53:2e:77:84:fb:f1:8a:46:50:f9:e1:
d7:44:99:e2:f9:63:94:da:1f:b4:4f:d5:54:fc:ef:
19:3e:28:2f:7a:3f:59:5d:bf:1f:a3:cb:b8:85:f5:
f1:4b:40:5b:38:97:84:46:ba:24:10:ae:33:4e:e4:
4b:53:60:b3:78:84:b3:58:c6:c8:79:17:c4:43:01:
c8:4c:a5:e3:e6:00:cb:22:94:38:7d:4f:d5:d0:79:
a9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E9:81:2B:91:3D:C3:CC:10:DD:31:DB:BD:01:92:9C:05:31:6F:63
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/s-mBK5E9w8wQ3THbvQGSnAUxb2M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.246.0/24
Signature Algorithm: sha256WithRSAEncryption
12:02:1c:0e:e5:f7:15:7b:12:24:24:9a:a4:eb:48:c9:dd:92:
11:c0:60:76:46:e8:10:e0:57:cc:e4:bc:b2:17:08:5c:26:4a:
fe:1d:74:40:38:8f:96:da:14:e0:85:9a:8d:34:a9:8c:6e:94:
b5:a1:8c:1d:aa:eb:98:a9:73:39:e3:f2:1a:d3:01:67:bf:af:
f9:fc:6c:37:9b:e2:3c:b9:c5:66:09:a6:e3:bb:ea:99:26:ad:
86:17:46:42:f7:89:b8:71:f7:5d:6f:28:66:94:c2:7f:10:05:
c8:ef:5e:cc:0c:d7:5e:b2:ac:27:38:a3:82:3a:31:bf:f4:c0:
18:6e:19:62:ea:2c:da:50:ce:0f:d4:f4:4b:a7:da:9c:62:8f:
98:b1:11:e8:0f:53:ee:df:b1:9e:4f:31:f2:ea:09:eb:76:46:
41:0b:b5:f0:77:3e:38:86:cd:92:ab:5b:b4:c5:89:5b:e2:5d:
01:23:00:7d:aa:8d:ae:41:64:3b:b1:12:01:be:ad:09:30:44:
3a:60:c9:3f:3b:ed:09:9d:ec:83:09:61:7b:b0:92:09:21:70:
fd:37:c5:d7:87:c7:f4:82:d4:ba:11:fa:cc:7a:26:b8:f1:5d:
78:8c:bb:31:24:45:25:e8:13:6d:a1:31:1a:ea:52:38:9d:e3:
80:2a:96:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:41 2024 by rpki-client on console-ams.rpki-client.org