Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tOab6l68SYBWxC-dzSKxabMBJ9M.roa
File: tOab6l68SYBWxC-dzSKxabMBJ9M.roa (raw, json)
Hash identifier: kSpM3b7akVd85OtL0RFN/FGPIL32b6T1UD+3iglGXEE=
Subject key identifier: B4:E6:9B:EA:5E:BC:49:80:56:C4:2F:9D:CD:22:B1:69:B3:01:27:D3
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 171F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tOab6l68SYBWxC-dzSKxabMBJ9M.roa
Signing time: Sun 07 Feb 2021 12:16:48 +0000
ROA not before: Sun 07 Feb 2021 12:16:48 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.193.156.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5919 (0x171f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:16:48 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B4E69BEA5EBC498056C42F9DCD22B169B30127D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1a:67:bd:aa:0d:75:86:bb:01:29:e9:b1:a3:
25:53:64:61:29:ad:39:ae:13:1f:2e:e8:7a:c0:85:
eb:4f:0a:4a:b0:88:e8:ce:4f:04:8b:4d:96:42:0c:
3c:e5:33:52:d8:36:7b:95:c5:8e:e0:d1:2e:3c:84:
50:83:b7:3c:51:15:ab:5f:00:77:0e:1b:1c:c9:41:
e0:f0:de:a7:89:62:32:09:4d:20:05:ff:64:96:7d:
d1:de:0d:ee:af:e4:d8:b5:7a:69:96:69:79:7f:23:
e8:ee:74:88:c7:5f:0d:4c:cc:6e:0d:1c:08:b0:8f:
6d:71:31:ef:fb:e4:c9:84:b4:b2:41:2e:5e:28:0c:
05:ce:dc:25:59:6f:40:4e:53:1a:48:72:2f:1b:f2:
82:07:13:0b:3a:e5:c4:02:03:e7:4f:66:f2:7e:51:
0e:2c:74:8b:27:01:fc:e0:c8:71:8c:94:10:c6:d3:
9b:c4:44:b1:1a:dc:df:82:bd:75:e7:45:fc:04:fe:
68:88:bf:e1:f5:93:7b:c3:13:91:6a:58:57:b0:2d:
ed:62:21:75:5e:c2:9f:b1:fc:c7:2d:0e:2e:4c:f5:
75:97:68:38:61:51:54:50:12:9c:1e:b3:7a:5b:2e:
ed:ff:f1:d7:42:e6:2b:4f:8a:16:5d:b6:e2:f6:da:
43:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E6:9B:EA:5E:BC:49:80:56:C4:2F:9D:CD:22:B1:69:B3:01:27:D3
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tOab6l68SYBWxC-dzSKxabMBJ9M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.156.0/22
Signature Algorithm: sha256WithRSAEncryption
02:3f:fb:4f:28:5c:82:7c:82:55:20:6d:49:90:90:1e:38:bb:
f6:49:c8:f2:c1:8a:65:a2:b9:27:c1:75:1b:0f:ef:0a:86:d5:
80:b3:75:a1:33:8e:c6:12:24:56:4d:16:c4:e8:6d:87:cb:00:
36:3c:6a:1c:29:cd:5b:85:f2:f4:bf:0b:81:b1:73:d0:ee:13:
4b:6f:c2:08:3f:05:8d:e2:32:75:b5:ca:7c:47:3d:ec:ea:ba:
c9:7d:86:8f:d5:31:85:ec:40:77:bd:46:02:59:54:6e:e9:d2:
80:12:ec:58:ed:46:a0:58:1c:da:7f:75:7e:f5:d2:34:8e:38:
11:09:7b:93:12:65:d0:0c:0c:96:c4:ad:88:f8:01:0d:60:70:
52:de:ae:18:43:f2:40:b2:a0:df:fe:87:fc:12:72:73:d2:04:
28:d8:ca:40:91:c3:1f:ee:1a:87:bb:51:44:41:26:c4:c6:06:
f8:8d:6e:70:a3:dd:25:31:6b:6b:b6:b5:f3:71:43:4e:bc:0e:
cb:95:27:86:4a:ae:45:ae:68:03:59:8e:6f:74:6d:b3:7e:4d:
2b:bf:c8:15:1e:a8:38:84:e8:77:00:c0:97:c1:38:c1:cb:a3:
cc:f7:a9:b7:22:e7:16:7b:6c:d2:b8:59:1e:3a:01:c2:11:fb:
bf:c1:ab:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:41 2024 by rpki-client on console-ams.rpki-client.org