Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/x2jc4zh_csmGqV9d9nEEbR0V_yA.roa
File: x2jc4zh_csmGqV9d9nEEbR0V_yA.roa (raw, json)
Hash identifier: lloxuEaE5t9l1JOGzyCpwhZQLE3TAAj3lkixRveNaZE=
Subject key identifier: C7:68:DC:E3:38:7F:72:C9:86:A9:5F:5D:F6:71:04:6D:1D:15:FF:20
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 152B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/x2jc4zh_csmGqV9d9nEEbR0V_yA.roa
Signing time: Sun 07 Feb 2021 12:03:13 +0000
ROA not before: Sun 07 Feb 2021 12:03:13 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.192.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5419 (0x152b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:03:13 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C768DCE3387F72C986A95F5DF671046D1D15FF20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7d:03:4f:b1:b8:48:81:8b:ce:08:c6:ea:ec:
c5:51:70:37:75:2b:6b:28:dd:51:c9:37:b0:b8:88:
83:f1:94:77:c6:bb:2b:24:3b:e3:37:5e:67:11:fb:
e3:be:ef:b4:fc:e5:22:9a:4e:50:74:8a:4c:83:2a:
e7:d6:ba:75:ff:93:f9:4b:50:c9:84:98:02:96:1d:
5a:53:02:50:4e:8d:a7:f0:59:fb:90:34:0d:8e:5f:
5a:69:49:66:7a:93:f0:a5:b3:a7:3a:d7:68:6a:58:
99:69:a4:ce:3a:52:82:b8:57:20:ea:38:1f:c8:b5:
21:b9:e0:bb:0b:98:59:00:3d:7a:1e:6a:b0:a3:df:
89:fd:d8:bd:43:23:b1:ea:a3:bc:ef:57:5c:4e:6f:
b3:27:a7:59:0d:16:b4:2b:d0:39:d4:a4:8d:d8:ba:
ef:33:94:de:d5:21:43:32:67:68:f6:98:e4:a0:8f:
1d:63:f6:dd:6e:3a:2b:75:fa:4a:89:b2:38:ff:45:
bb:ee:4e:e4:0c:a3:33:43:37:a9:f7:15:dc:47:0b:
36:71:0e:44:f0:29:fd:72:ee:6d:a3:d3:86:19:44:
f0:da:4a:80:7b:27:bd:c8:9f:6d:52:2d:5a:a3:2d:
f5:a5:6e:cd:fe:b0:c7:9c:00:e1:d4:60:95:55:b8:
5e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:68:DC:E3:38:7F:72:C9:86:A9:5F:5D:F6:71:04:6D:1D:15:FF:20
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/x2jc4zh_csmGqV9d9nEEbR0V_yA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.192.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:c9:bd:72:45:c0:46:48:2f:bd:f0:be:b3:06:c6:9f:f4:ba:
97:37:39:29:cc:78:ff:0c:88:a7:57:fd:ed:0c:be:c2:51:a6:
bb:c5:bc:7b:f0:82:e3:9b:88:f2:4b:ad:c7:fb:b8:37:99:47:
e5:03:92:c7:99:2e:53:cd:68:e4:0c:5f:89:36:aa:ef:bb:59:
61:cc:c6:94:17:92:3f:bd:65:ff:47:5f:03:f9:bf:bc:bb:97:
0f:bf:d5:16:cc:f1:a4:c0:d0:73:1f:ab:8a:16:9f:6a:3a:5b:
a6:80:97:28:73:4d:c4:15:d2:0d:78:b0:db:2c:dd:be:57:92:
af:e7:09:ed:81:62:3b:66:0a:a4:9e:50:6d:5b:17:11:2a:b1:
b3:72:b5:15:c2:89:74:64:55:f6:12:66:5d:c4:cd:6b:34:0a:
63:1d:ea:55:3a:90:fa:1c:88:a1:55:76:de:0d:f1:a2:48:8a:
10:49:e7:82:74:f0:d7:c3:1b:cd:77:e0:9f:c6:23:f8:25:0b:
1f:be:fd:9f:c3:e1:ed:be:58:6f:35:5d:da:45:a2:f1:8a:ae:
21:03:14:2e:da:1c:ea:49:3c:4e:4d:76:2f:d5:1b:fb:9b:7c:
ed:2d:8a:8d:2f:31:d1:25:7c:ba:df:2e:1f:6e:5c:e3:19:56:
e6:00:1e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:31 2023 by rpki-client on console-ams.rpki-client.org