Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sUBtIctmwq14DovT7p81hwXZts8.roa
File: sUBtIctmwq14DovT7p81hwXZts8.roa (raw, json)
Hash identifier: bmLOcFULNAO63bxnzymIgSz/lSFSG2UwRbq0qtZGbnM=
Subject key identifier: B1:40:6D:21:CB:66:C2:AD:78:0E:8B:D3:EE:9F:35:87:05:D9:B6:CF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1719
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sUBtIctmwq14DovT7p81hwXZts8.roa
Signing time: Sun 07 Feb 2021 12:16:38 +0000
ROA not before: Sun 07 Feb 2021 12:16:38 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.192.232.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5913 (0x1719)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:16:38 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B1406D21CB66C2AD780E8BD3EE9F358705D9B6CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:13:d3:75:5a:fd:f4:c3:62:de:e9:97:f4:e0:
62:a3:57:fc:4e:a5:73:04:ce:49:0b:85:a1:73:a2:
5b:55:70:e9:f9:ae:d5:f8:cd:03:d7:db:6f:af:ad:
ce:2e:38:1d:14:bd:44:cb:e1:f5:0d:9c:bf:96:e3:
6b:fd:c1:7b:7d:dc:0a:6e:12:86:fd:11:21:5e:ab:
09:a4:c7:c5:f3:6c:9a:19:45:10:44:71:8f:95:83:
3b:9c:1b:0c:4a:ff:7f:4e:29:4c:ba:b6:fc:e2:d2:
7f:70:03:9b:37:df:4a:4c:54:11:b8:35:e9:96:5e:
cd:61:eb:f7:77:0f:b7:94:13:1e:38:85:b9:05:67:
3a:fd:51:6f:9c:68:e7:74:4d:4f:5e:98:3b:54:e8:
6e:25:be:9e:48:7f:3f:56:4a:3d:58:95:93:e4:64:
3d:49:ba:f6:25:ce:78:cd:f8:1b:a3:8f:4d:9f:79:
a5:85:8f:c1:3b:16:a2:82:a5:df:46:c2:44:76:ad:
dd:27:9a:77:b6:17:80:0c:a3:af:9e:c2:50:f2:2b:
79:fc:1b:a0:2b:83:2b:fc:8d:f5:53:52:a9:ea:97:
70:80:51:05:02:0d:7f:4e:34:3e:94:cd:00:ed:fc:
6a:f5:3d:87:06:45:d7:a6:e9:83:59:d3:0a:82:12:
29:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:40:6D:21:CB:66:C2:AD:78:0E:8B:D3:EE:9F:35:87:05:D9:B6:CF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sUBtIctmwq14DovT7p81hwXZts8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.232.0/21
Signature Algorithm: sha256WithRSAEncryption
85:f5:aa:0d:77:46:31:ed:2a:79:a5:67:4d:bc:42:21:41:e5:
6e:ab:a9:fa:42:dc:0b:aa:d2:80:51:7e:4c:c3:b0:ea:55:ff:
78:4e:c8:95:fd:d0:1e:7f:99:5a:e4:29:87:32:57:bb:3d:8c:
6c:3c:2e:44:b4:f1:ca:10:72:91:42:74:d2:d9:35:4a:3d:69:
19:e2:fa:db:50:74:b7:cd:49:f5:60:85:a9:e2:30:8c:fd:3a:
29:ba:ff:e9:bd:8a:64:0f:24:3a:6d:cf:18:a2:1b:1f:0e:c1:
a5:dc:88:5a:44:b7:04:49:86:6d:a5:92:51:32:b5:a3:8a:e7:
e3:5a:8b:3b:59:cb:14:e9:22:fa:21:35:f6:1c:a9:e1:91:d9:
8e:0d:de:3b:c4:9e:32:98:85:59:63:25:8d:69:c6:c5:be:71:
e7:f5:62:1f:ca:c3:69:5f:0d:18:5e:43:c9:28:07:12:fd:ed:
59:de:fa:fe:5e:e6:68:de:00:ea:ed:50:ee:9a:52:41:63:a9:
b0:18:a2:4e:b1:b0:83:47:34:11:48:36:25:0f:c5:26:6a:32:
56:fa:71:ec:97:7e:b6:2e:2e:46:ac:34:96:42:b8:63:b6:8d:
8b:e1:46:e1:1b:8e:b2:27:18:aa:43:d3:97:53:5a:cd:5b:00:
31:3c:ae:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:41 2023 by rpki-client on console-fra.rpki-client.org