Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xuIAVZ3k9CtJKPI_-pJ5DjwqhOk.roa
File: xuIAVZ3k9CtJKPI_-pJ5DjwqhOk.roa (raw, json)
Hash identifier: jchke4q3xdO29F7B5ybLWgRR46OxZmzGtVHUf0XXREQ=
Subject key identifier: C6:E2:00:55:9D:E4:F4:2B:49:28:F2:3F:FA:92:79:0E:3C:2A:84:E9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 13E3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xuIAVZ3k9CtJKPI_-pJ5DjwqhOk.roa
Signing time: Sun 07 Feb 2021 11:56:33 +0000
ROA not before: Sun 07 Feb 2021 11:56:33 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.192.108.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5091 (0x13e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 11:56:33 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C6E200559DE4F42B4928F23FFA92790E3C2A84E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:5d:13:c5:f7:ff:3d:20:2c:ed:95:0a:0a:1e:
eb:81:2f:3d:c6:90:7d:79:bd:17:ca:3b:2c:86:4f:
8f:29:8e:d8:6d:bc:b4:ae:ae:09:d6:fb:3f:7c:d2:
e1:5e:f6:fd:7c:8b:92:19:d7:57:c4:0f:60:ef:e3:
3b:2f:88:27:80:ab:67:e5:79:9d:c2:bb:55:97:74:
c9:d1:91:4d:01:78:03:b0:04:f8:74:06:84:12:45:
be:bd:f9:d3:83:b1:68:43:fa:a9:0b:38:14:b7:1f:
f2:48:dc:68:b3:42:4e:21:b4:af:f3:2a:e4:98:c0:
65:3a:97:b2:b7:f8:2b:41:98:09:4f:c2:f6:10:5b:
9d:a9:0b:f6:85:e3:ae:a1:eb:bf:f1:c6:63:4b:fa:
6f:66:ba:7c:d2:44:5c:93:c9:b0:86:72:c5:b6:98:
1b:f4:24:79:6c:5f:04:51:99:e6:77:1a:86:6d:cc:
bb:aa:93:0c:e9:0b:03:97:be:87:b9:5e:5a:b2:0e:
da:14:97:1d:27:44:0c:86:86:0e:1f:7d:69:4e:c3:
33:c6:b2:d3:a7:de:cc:fe:66:49:aa:0d:71:11:c7:
d2:58:ea:09:a8:cc:fc:53:4e:68:7d:c4:da:d6:f4:
dd:cb:66:90:15:6f:5b:72:72:07:be:de:3f:ce:0d:
a1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E2:00:55:9D:E4:F4:2B:49:28:F2:3F:FA:92:79:0E:3C:2A:84:E9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xuIAVZ3k9CtJKPI_-pJ5DjwqhOk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.108.0/22
Signature Algorithm: sha256WithRSAEncryption
40:5b:b6:75:c2:15:9d:77:d9:5f:86:e3:60:85:31:f9:3c:2a:
ab:cc:ee:ea:10:40:1b:07:c3:2c:f0:74:b9:f7:81:de:46:d9:
3b:e3:8a:36:45:da:8b:16:6f:61:93:71:18:30:4d:93:a8:68:
99:20:fd:63:ce:37:d1:a5:d1:97:3f:6d:4e:10:91:48:b5:c7:
6b:57:9a:b9:b8:1a:38:4d:d2:86:83:9a:f9:7e:70:25:a0:6e:
19:e8:e5:68:a2:35:82:31:2f:6f:67:4b:e7:5b:dc:c5:cc:2b:
58:9a:89:0a:a8:18:41:3e:f2:ac:e4:ae:16:b3:42:bd:21:c0:
7c:53:26:45:b8:cd:85:fb:04:cf:83:32:8c:b2:8e:0c:6a:ae:
e3:74:bf:61:c9:ef:58:25:76:7f:e2:83:e5:af:d0:0c:d1:a5:
57:43:bb:cf:39:3b:7a:9c:07:e4:4f:b4:0a:fe:22:46:ab:25:
b5:96:22:f2:89:fc:4f:82:cc:87:7e:4e:3d:19:0a:af:04:cd:
29:d8:60:b7:9c:1c:55:97:bd:62:a7:ac:b7:57:c9:55:18:67:
82:c4:2e:6c:bd:3e:09:3a:17:7b:e1:5b:3f:e2:39:f6:70:52:
41:3c:3a:3b:ff:37:84:6e:f1:09:20:8e:0e:95:aa:f3:21:58:
2e:38:4c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:00 2024 by rpki-client on console-fra.rpki-client.org