Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vxU4K-MJxZbaRnqqsDmA8kxBnIg.roa
File: vxU4K-MJxZbaRnqqsDmA8kxBnIg.roa (raw, json)
Hash identifier: uQluavr6qL3CUh+H/6UoB0YcPbSH3rKoBnTACMbV2bE=
Subject key identifier: BF:15:38:2B:E3:09:C5:96:DA:46:7A:AA:B0:39:80:F2:4C:41:9C:88
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1775
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vxU4K-MJxZbaRnqqsDmA8kxBnIg.roa
Signing time: Sun 07 Feb 2021 12:19:24 +0000
ROA not before: Sun 07 Feb 2021 12:19:24 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.104.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6005 (0x1775)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:19:24 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=BF15382BE309C596DA467AAAB03980F24C419C88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ed:c7:95:53:3b:00:64:f0:93:70:68:8b:45:
58:9c:57:cf:44:2f:1c:dc:10:59:34:60:a3:e1:c7:
2a:6d:bc:00:07:ee:1a:8b:a5:50:c5:1b:07:8b:03:
6a:99:da:ff:47:13:bd:cd:34:3b:66:46:fb:e4:c0:
ea:7f:50:95:ce:c1:00:d7:23:50:28:23:f0:d5:26:
9c:a9:ea:cf:b9:ab:ae:81:50:5a:3e:89:62:8a:82:
98:7d:e9:9e:f7:4d:71:ec:ba:1e:ef:fb:84:41:03:
f4:4e:6e:35:6e:7f:b6:8d:75:c6:07:f9:57:61:bc:
4f:33:c5:52:a0:5a:38:89:60:f8:bf:b9:fd:18:b5:
5b:e5:0c:47:da:f3:4a:cf:70:fa:5d:f4:36:5c:5a:
da:3e:a4:05:31:8c:6a:50:12:97:9f:89:55:ba:96:
e4:ee:34:32:8e:e0:71:5a:11:c4:b3:3d:f8:e5:4f:
f6:ee:86:78:54:3a:0a:22:8c:25:6b:a1:de:62:c3:
c0:d5:a8:a4:cd:a9:c4:99:55:99:a7:9d:e7:44:d8:
d4:8f:78:29:8d:93:a3:35:d8:2c:76:1a:b5:a2:be:
07:c7:ca:f8:a6:b7:a7:7b:87:d0:2e:ec:f0:b2:59:
a4:df:3d:f8:d4:bc:35:50:0f:37:47:7e:8b:6e:d5:
e5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:15:38:2B:E3:09:C5:96:DA:46:7A:AA:B0:39:80:F2:4C:41:9C:88
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vxU4K-MJxZbaRnqqsDmA8kxBnIg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.104.0/21
Signature Algorithm: sha256WithRSAEncryption
71:5e:f6:d5:17:93:0e:e3:c7:3e:dd:d9:b8:d0:dd:87:20:4c:
57:74:9f:6d:d3:c2:f1:9f:09:a9:5a:c6:0e:43:1c:3f:4f:94:
c3:58:ea:49:76:a6:31:4b:ad:21:48:8b:8f:12:a8:2f:90:a0:
04:11:e3:48:08:24:c8:1a:e7:6c:6e:d1:ff:df:39:18:d1:f1:
f7:6c:36:06:6d:9c:e8:23:0b:66:70:61:6f:e8:e4:2b:cb:b6:
ea:94:c0:b3:ad:3f:9d:29:40:37:a2:2f:ea:7d:a6:a0:d5:db:
e6:09:68:c5:75:db:38:75:50:92:39:bb:e8:ab:9c:2d:d2:2e:
11:1b:c9:c1:89:d6:00:6f:60:b3:87:68:f1:c2:5d:77:2d:8c:
20:7f:97:16:d6:30:84:fd:be:2e:cc:af:5b:d4:dd:d3:27:aa:
df:53:b8:71:21:a9:fc:de:59:35:b6:69:7c:55:9f:2d:29:0b:
77:63:61:96:16:67:d1:96:9c:4f:a7:7e:09:d9:ae:aa:c9:95:
e8:7f:cd:41:5d:9f:18:2b:7d:d5:9d:e7:ef:f6:f6:8d:3b:50:
32:73:82:5c:e6:5e:73:a0:4e:01:38:52:31:d9:41:f0:bc:cc:
13:ff:b9:e2:54:18:59:8d:00:bc:2f:01:38:11:0a:a1:c1:ee:
87:4a:be:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:42 2024 by rpki-client on console-ams.rpki-client.org