Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wUf7RnAgYvjFWG3eTgqicjKW5pU.roa
File: wUf7RnAgYvjFWG3eTgqicjKW5pU.roa (raw, json)
Hash identifier: F5e4+8Zw55jDnuQ+ukSc3zTWlW33ZdsFFXQ+8BsIVII=
Subject key identifier: C1:47:FB:46:70:20:62:F8:C5:58:6D:DE:4E:0A:A2:72:32:96:E6:95
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1877
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wUf7RnAgYvjFWG3eTgqicjKW5pU.roa
Signing time: Sun 07 Feb 2021 12:29:37 +0000
ROA not before: Sun 07 Feb 2021 12:29:37 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.48.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6263 (0x1877)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:29:37 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C147FB46702062F8C5586DDE4E0AA2723296E695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:70:30:12:e1:f6:d6:73:84:4b:88:68:97:06:
23:5a:55:1a:9f:2c:aa:ae:d3:67:4f:d7:3d:b7:ba:
80:e1:1e:b8:fc:d3:c0:65:6d:89:03:4d:bb:36:7b:
9e:8b:af:18:ea:98:80:97:b2:bd:2e:42:0d:9c:cb:
e7:dc:74:e0:a5:34:ca:57:ad:5e:0d:b4:a6:02:ca:
8b:23:b3:6d:37:d9:94:93:5a:b0:e0:47:10:76:e1:
b4:69:fa:bb:6d:7e:94:85:69:9e:ff:35:cf:66:78:
36:db:d2:b2:8d:26:fb:0a:20:7f:c5:eb:9a:5d:33:
50:64:04:6f:e2:59:f7:85:40:11:79:4c:e1:d2:c8:
32:4a:aa:7f:cc:bd:7a:21:7d:78:83:69:9e:f2:59:
e0:7d:66:d3:ba:13:73:85:e4:99:e2:10:5d:41:74:
05:9e:13:38:a8:62:2b:4f:d3:e8:72:31:99:b2:7e:
01:5f:77:89:ec:59:c3:91:22:59:fa:65:e4:f8:4b:
a2:69:58:e1:b0:24:10:5d:cd:a4:6d:cc:b9:76:f2:
45:79:90:a1:47:eb:06:0d:8d:a0:56:3b:cb:a5:bf:
1a:43:9c:a3:3a:ed:91:85:2c:27:bf:bf:fd:f3:0e:
d8:78:ce:42:98:e2:0a:37:79:ab:5a:3f:c3:88:4e:
3d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:47:FB:46:70:20:62:F8:C5:58:6D:DE:4E:0A:A2:72:32:96:E6:95
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wUf7RnAgYvjFWG3eTgqicjKW5pU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.48.0/21
Signature Algorithm: sha256WithRSAEncryption
3c:f4:e0:46:cd:18:5d:f2:15:a7:66:7f:89:ab:ed:db:b7:bb:
27:80:95:d3:1d:0c:94:28:77:8b:2b:04:09:1a:11:14:b6:5b:
90:b4:c0:31:31:c6:16:c9:cb:f0:b9:45:80:d5:82:4b:44:30:
e2:fd:ee:77:6f:56:03:5e:6a:34:45:e0:77:83:e6:08:ec:ef:
5a:37:c3:67:da:68:05:82:28:97:05:0c:5b:ef:1b:21:52:ee:
e5:74:6e:90:92:6a:4b:e6:44:62:58:ec:cf:76:9c:ba:d4:a3:
7f:ca:00:e4:77:b4:7d:0c:ae:b3:22:9e:de:c6:e5:15:e8:2c:
22:f6:38:78:f5:76:80:ff:10:27:b9:ab:b9:74:85:3a:9e:bf:
90:33:d0:f6:d5:59:50:a6:22:6a:f2:99:36:fb:61:ce:c9:24:
d7:45:d3:1b:6b:3f:32:c0:3c:44:74:e9:d2:d9:85:42:3f:56:
44:56:f5:4a:7a:6f:90:31:48:8e:ed:2a:48:4d:52:2f:01:3a:
17:79:1e:62:75:f9:24:6a:e0:dd:2c:b9:fc:77:ff:83:49:17:
d6:43:bf:83:21:f2:32:1b:ec:ce:a8:62:fe:7b:a5:e8:e8:41:
1d:27:65:ce:6c:d3:7b:79:23:16:40:b7:79:09:91:59:be:23:
cd:e7:9e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:42 2023 by rpki-client on console-fra.rpki-client.org