Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yAaSgE8ID8sHnXkvyNZQiAevRS0.roa
File: yAaSgE8ID8sHnXkvyNZQiAevRS0.roa (raw, json)
Hash identifier: icWFGVyBRA5Z4GZG7yKgm7sfyEcPxLNBrs9bRanLR/c=
Subject key identifier: C8:06:92:80:4F:08:0F:CB:07:9D:79:2F:C8:D6:50:88:07:AF:45:2D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 18CB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yAaSgE8ID8sHnXkvyNZQiAevRS0.roa
Signing time: Sun 07 Feb 2021 12:53:48 +0000
ROA not before: Sun 07 Feb 2021 12:53:48 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 123.193.126.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6347 (0x18cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:53:48 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C80692804F080FCB079D792FC8D6508807AF452D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:06:1c:fd:23:e0:c6:77:82:76:8e:ba:60:5e:
f3:c1:33:92:ad:0c:1f:7b:00:ec:f7:90:76:a0:be:
00:5b:a6:5b:8a:67:09:93:57:e4:c6:a1:2c:3f:c6:
b7:88:86:c9:65:c2:e4:c6:57:bd:00:8f:03:5b:ec:
12:a0:f7:8d:ff:74:e0:c2:8a:0a:86:96:c1:df:84:
bd:03:68:05:84:bc:7c:7b:4c:1d:de:33:7b:d8:78:
ee:8a:b2:e1:78:01:65:60:e3:7d:f0:ba:e2:79:7e:
26:c0:19:4a:f8:51:c4:4b:2b:e3:b2:48:50:08:68:
a2:65:ab:e2:2f:e8:43:1c:70:71:f9:d7:f7:34:51:
4c:70:05:61:d3:57:2c:2c:2a:3d:88:79:d4:d2:02:
a8:c2:60:02:e7:45:a0:60:4a:af:12:b0:30:58:7e:
e2:85:cb:7e:bc:86:07:04:7c:41:be:f5:48:37:c5:
40:23:56:d2:71:8a:c5:16:41:82:d1:e0:b3:91:d3:
55:e9:84:29:f3:f5:b6:95:37:86:b7:96:9b:75:48:
b5:4b:27:fa:3e:7a:e1:e9:31:40:92:7c:78:a7:42:
8b:0e:a7:8b:5a:30:73:ce:c8:e2:0c:d6:e0:52:58:
97:cc:15:02:f9:9e:d2:30:0d:d9:9b:3d:c8:60:34:
0c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:06:92:80:4F:08:0F:CB:07:9D:79:2F:C8:D6:50:88:07:AF:45:2D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yAaSgE8ID8sHnXkvyNZQiAevRS0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.126.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:96:e3:72:8a:2d:9c:8d:b3:9a:f9:cb:b0:f7:d1:c9:ca:f0:
f4:d0:d0:17:d2:12:57:24:9d:ce:65:74:8d:33:cb:79:60:4c:
64:3d:5a:ec:7c:e7:69:79:df:55:35:97:1c:fa:f1:56:d3:75:
ff:10:32:a3:88:08:bf:46:4f:71:53:c1:4e:78:eb:8e:39:7d:
02:4b:f7:fe:87:9d:c6:84:00:24:87:16:4f:2e:f4:d9:dd:11:
e8:e2:eb:60:10:a0:0c:79:68:f1:58:18:1a:6c:a8:a6:ea:e0:
eb:79:27:ad:03:09:34:56:ed:79:03:c7:b0:6e:11:da:08:01:
73:d5:37:db:f0:51:8e:76:91:5f:23:2f:f1:27:56:8a:d3:3d:
a9:1f:b5:97:3a:03:f0:33:85:2f:eb:44:a5:b5:b4:7a:49:52:
cd:df:04:47:2b:de:78:21:c4:73:32:10:97:d2:ae:4f:90:3e:
14:b1:7f:07:91:c9:66:ba:b0:3f:c9:b5:f3:0c:40:0a:a3:d7:
54:51:98:c6:b9:49:b4:98:20:e9:43:ee:b4:32:0d:d4:91:63:
85:ed:d6:2c:c3:bb:42:b9:bd:d2:45:5a:94:06:07:3f:ae:35:
c3:89:da:e6:57:94:42:d2:fe:7e:2d:3e:f7:79:9e:98:d1:35:
f0:82:7e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:00 2024 by rpki-client on console-fra.rpki-client.org