Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wl4A26dzKUmasmeeV7ykWt5AkxQ.roa
File: wl4A26dzKUmasmeeV7ykWt5AkxQ.roa (raw, json)
Hash identifier: A8reIVqDxBVfpAIdsBKbVhrcyHs+yHY5inC+mCsZnSs=
Subject key identifier: C2:5E:00:DB:A7:73:29:49:9A:B2:67:9E:57:BC:A4:5A:DE:40:93:14
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1BDC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wl4A26dzKUmasmeeV7ykWt5AkxQ.roa
Signing time: Wed 29 Sep 2021 02:47:05 +0000
ROA not before: Wed 29 Sep 2021 02:47:05 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 123.195.152.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7132 (0x1bdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:47:05 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=C25E00DBA77329499AB2679E57BCA45ADE409314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9e:b5:4f:12:3a:75:03:60:d9:43:c2:0b:bf:
ff:65:8d:17:4c:3b:1f:f3:47:84:72:22:ee:3b:2a:
2f:06:30:66:15:12:46:96:f3:7e:38:1a:79:9a:e7:
cd:53:96:c4:5b:9b:5b:d6:36:01:a8:74:dd:55:b9:
de:15:12:59:3c:4e:5b:0f:fa:51:64:8e:02:2c:00:
07:a0:f0:11:be:99:b7:6a:56:9d:eb:2c:77:b5:b6:
e0:14:df:e4:0c:9d:83:71:27:02:aa:6c:3f:d5:9b:
3b:56:cc:0d:88:f1:e7:ec:d3:69:66:db:f5:7f:ae:
ff:bc:64:a9:74:3f:0a:99:f7:b0:d7:9e:41:02:c4:
80:7c:8b:b9:3b:cd:a5:ba:05:61:dc:49:1b:e4:c4:
ab:61:6f:5d:f4:90:6b:02:3f:dc:d4:d7:51:68:3e:
00:a5:fe:6f:9a:81:e9:67:51:8a:23:07:c0:4f:2e:
e2:be:0d:19:3c:ff:37:9b:92:c6:66:77:85:b9:f5:
b1:f0:5a:e2:6d:48:e1:11:77:cf:ad:ee:03:c3:9b:
be:69:b3:b7:64:ec:0d:80:68:5e:03:42:9d:8a:10:
46:bf:ca:46:ee:e0:77:47:49:a5:fb:dc:7a:51:58:
36:0c:aa:0f:22:48:ac:ac:79:16:38:a9:44:a5:2d:
97:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:5E:00:DB:A7:73:29:49:9A:B2:67:9E:57:BC:A4:5A:DE:40:93:14
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wl4A26dzKUmasmeeV7ykWt5AkxQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.152.0/21
Signature Algorithm: sha256WithRSAEncryption
54:51:a5:02:48:b7:3a:ac:c0:ad:7e:3e:9d:9e:6e:62:ba:fd:
68:5d:22:31:a7:80:7d:5f:a2:27:61:9d:38:ec:da:43:19:72:
69:4c:7f:3e:7a:78:09:17:41:c8:9b:fc:27:d5:4d:26:93:63:
c5:5c:82:ed:45:9d:a2:75:b8:c6:e2:d3:4d:ad:2d:e9:15:2e:
2f:31:b1:42:20:bf:5b:0c:d2:df:8a:1a:0a:eb:ed:61:9c:41:
3e:23:7a:39:7b:ae:a6:ac:44:dc:14:0a:df:77:f2:d0:24:b3:
ae:70:12:a8:38:eb:ba:4d:0a:ee:48:f8:9b:3a:d3:c8:6a:46:
d1:81:72:86:36:42:35:51:f5:06:da:ce:89:f0:e5:31:07:55:
87:ca:bb:c7:0c:d3:0f:8a:c9:06:95:1f:bf:f5:43:b4:9b:9d:
44:b3:54:8e:ce:b9:a1:7a:37:15:b5:60:98:4c:72:f0:43:69:
ea:39:bb:34:3c:6f:72:aa:93:70:b6:1a:f0:ba:c1:d7:34:99:
16:d5:75:7f:bb:be:c1:8f:a7:f4:49:58:c8:b1:89:b0:15:d3:
a7:6a:80:b2:6c:c5:4a:d8:89:a5:17:7f:4b:93:cd:a1:21:df:
38:2c:55:e3:4e:f6:f5:2f:c3:4a:97:5d:4c:a2:81:89:24:37:
19:e2:69:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:42 2024 by rpki-client on console-ams.rpki-client.org