Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sQ1KSOX5LoFERzMRacMO4shvg5I.roa
File: sQ1KSOX5LoFERzMRacMO4shvg5I.roa (raw, json)
Hash identifier: qjcjDaOoJ5dMQsayHTK0cVLuQuzxRN5tVPHui/uvRbM=
Subject key identifier: B1:0D:4A:48:E5:F9:2E:81:44:47:33:11:69:C3:0E:E2:C8:6F:83:92
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 18E7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sQ1KSOX5LoFERzMRacMO4shvg5I.roa
Signing time: Sun 07 Feb 2021 12:54:58 +0000
ROA not before: Sun 07 Feb 2021 12:54:58 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 123.194.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6375 (0x18e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:54:58 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B10D4A48E5F92E814447331169C30EE2C86F8392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1d:0e:f6:84:d7:89:44:a8:48:91:3b:81:1b:
54:0b:b5:2a:b0:c6:3a:a8:09:f5:fe:d4:ad:98:a2:
db:ab:12:21:68:52:dd:6f:19:e5:b0:d8:bc:dc:8c:
fc:71:9b:b7:2d:d8:f4:15:e3:30:30:ef:30:96:1e:
b3:9b:48:af:d4:1c:78:f3:1b:a2:e4:bb:96:aa:ed:
02:19:94:ae:08:07:ed:58:02:50:53:6b:69:8f:17:
33:71:52:91:52:c5:45:75:73:d5:b4:05:76:5b:21:
ba:35:0d:58:3f:95:d8:5f:b6:b6:8f:a5:e2:cc:c6:
49:74:24:4d:d4:ae:02:92:32:d8:34:e7:bd:cd:56:
bb:78:7f:61:ae:58:aa:08:a7:1c:e4:c6:22:6f:04:
4a:a1:ac:e1:06:53:fe:43:28:f9:f5:e4:9c:15:47:
fd:d3:52:8d:7a:c5:56:f0:33:05:69:50:87:af:33:
79:2e:1b:ba:0c:3d:b0:f3:bc:57:a3:da:9d:24:c9:
a2:cd:b9:80:2e:ef:20:d9:31:a1:b0:27:5c:14:d2:
03:72:a0:0d:b9:64:7b:18:20:f1:00:da:0b:55:f1:
59:a4:4b:2d:7b:32:87:c9:d0:5f:d4:29:4a:ee:80:
93:af:74:ea:62:d5:1d:0f:f9:c3:ca:13:7f:bc:97:
b1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0D:4A:48:E5:F9:2E:81:44:47:33:11:69:C3:0E:E2:C8:6F:83:92
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sQ1KSOX5LoFERzMRacMO4shvg5I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.253.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:d8:0c:57:2d:eb:df:db:53:83:3d:98:93:08:ff:d0:51:2b:
39:b8:b0:68:a1:22:1a:36:60:f6:eb:4e:0f:99:f6:f2:96:18:
ed:5c:ce:f2:94:c9:12:03:23:70:f0:3b:5c:ec:e3:3e:44:ba:
9d:96:9e:ed:09:7e:22:d9:13:ab:b0:ad:8e:d2:b4:7d:bb:ad:
02:45:e8:e4:1e:4f:0b:8e:92:14:23:82:00:fa:4e:1a:83:f3:
2c:92:a1:09:e9:b9:35:95:34:e5:ba:ab:e8:d5:5d:b8:e7:b7:
53:b3:bd:c1:9d:da:81:4f:39:a0:39:8d:8e:d0:4c:2c:e0:05:
02:7a:03:e8:a5:f6:b9:dc:af:31:4e:6b:81:8d:26:30:55:f0:
63:eb:a7:a9:0f:b9:c4:20:95:c7:b2:21:6b:e7:ca:bf:d3:ec:
6e:dd:2d:0e:91:6e:80:98:47:ec:f2:83:0b:fc:37:39:17:79:
36:aa:a4:66:33:3b:f0:76:8b:b3:75:44:09:e5:8b:54:47:30:
86:51:cf:a2:e4:f0:f8:6e:7c:c2:5d:a6:5b:e4:b7:e1:ce:71:
82:93:49:ce:86:d8:74:37:79:0e:32:3e:73:90:79:6a:5a:56:
80:53:99:7c:8e:73:7f:f5:f4:a8:a0:ee:08:50:72:2c:8a:32:
6e:5c:9b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:59 2024 by rpki-client on console-fra.rpki-client.org