Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yB8pcKtJAklTEQ0yKdRfw_vwsuA.roa
File: yB8pcKtJAklTEQ0yKdRfw_vwsuA.roa (raw, json)
Hash identifier: hR/iIgeIW/WYfMkkjFnBnQ+qEnFyhoClPAdI11XIQk4=
Subject key identifier: C8:1F:29:70:AB:49:02:49:53:11:0D:32:29:D4:5F:C3:FB:F0:B2:E0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1947
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yB8pcKtJAklTEQ0yKdRfw_vwsuA.roa
Signing time: Sun 07 Feb 2021 13:07:26 +0000
ROA not before: Sun 07 Feb 2021 13:07:26 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 123.194.232.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6471 (0x1947)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 13:07:26 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C81F2970AB49024953110D3229D45FC3FBF0B2E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:27:8e:33:e5:3d:a4:c8:2e:d2:98:83:39:15:
5e:93:03:f6:aa:5d:40:8d:d9:9f:a8:2c:32:01:c7:
00:86:f6:9d:50:40:3b:71:70:b1:ff:35:c8:3b:2a:
fc:d3:37:1e:3f:91:eb:aa:47:10:7f:aa:a8:11:ac:
3b:82:c3:2c:aa:2d:11:9c:62:e6:af:51:6e:3b:0a:
dd:04:da:e7:e1:93:03:c0:3b:72:ae:13:10:81:cd:
ad:a3:83:16:a6:75:99:50:8c:23:12:d5:b8:1e:a8:
15:d0:dd:3c:9e:4a:d4:c1:04:56:23:3f:fe:a0:36:
30:8d:41:b5:c1:43:19:18:99:71:98:70:d9:81:67:
40:dc:58:8d:90:21:88:d4:eb:9e:7f:c3:f6:ec:9a:
0d:8b:06:7e:c2:7b:0b:f1:d2:4e:22:4a:0c:60:41:
bb:6e:85:03:28:b4:d3:72:fb:27:86:9d:c9:1c:86:
8d:c8:72:2e:50:a7:0f:6a:18:ed:93:2e:d3:a1:5f:
4c:e5:bc:8e:c5:35:14:13:b7:eb:81:51:17:26:92:
fa:6b:29:8a:53:f3:5b:a3:d7:f0:d1:0d:c3:b4:85:
13:b5:97:e9:04:35:25:d4:ce:ee:70:a0:f9:24:cd:
0b:01:93:0e:9c:3a:0e:b0:a3:ed:b2:f8:22:20:59:
6a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1F:29:70:AB:49:02:49:53:11:0D:32:29:D4:5F:C3:FB:F0:B2:E0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yB8pcKtJAklTEQ0yKdRfw_vwsuA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.232.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:fb:2f:d8:ad:cc:21:8d:dc:82:60:dc:3e:1d:f6:1c:2f:cf:
64:de:da:7f:47:96:24:6e:b4:71:b8:78:9f:55:64:82:5a:0d:
74:73:74:14:9e:ac:64:28:d4:38:89:0e:ee:68:25:46:ac:b0:
1c:b1:d7:85:80:ff:ce:32:5b:75:4f:3c:7e:c1:c0:68:fa:8d:
67:4a:69:60:59:90:a6:e9:73:87:78:0a:df:2a:5d:84:fc:ce:
93:3e:08:94:80:cd:92:f0:57:05:9a:5c:c4:e1:71:3c:0a:db:
da:6f:31:fd:f1:95:e2:8e:7f:af:27:96:51:b2:b2:d6:48:ae:
b1:9d:fd:20:d0:59:bc:16:56:d2:d4:65:5b:ee:3d:81:a6:a7:
f0:f2:4d:e0:28:f5:72:d2:f7:b7:04:2d:f0:96:ca:1d:88:ba:
64:cc:01:59:d4:f0:d1:e1:33:a4:e7:04:b1:e1:d3:78:d2:78:
25:2f:cd:64:9f:27:d6:a5:9e:69:35:87:f4:8f:a8:f0:39:64:
4b:84:90:76:75:68:0f:b2:2d:3e:ce:b8:4b:36:ba:a1:8b:18:
ba:cc:40:47:28:7b:f9:b0:8a:eb:2b:73:f0:f8:d2:c5:00:58:
b5:16:bf:6e:dc:e4:89:52:21:bd:63:fa:19:ea:91:83:04:f8:
c7:30:77:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:00 2024 by rpki-client on console-fra.rpki-client.org