Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yXICYhw08u1Nm0Jv6rcdDwggiko.roa
File: yXICYhw08u1Nm0Jv6rcdDwggiko.roa (raw, json)
Hash identifier: jAvt8+uJKYP4qOYP1ZEuVgiYb7s6BgVNe2pn3YWSvow=
Subject key identifier: C9:72:02:62:1C:34:F2:ED:4D:9B:42:6F:EA:B7:1D:0F:08:20:8A:4A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1901
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yXICYhw08u1Nm0Jv6rcdDwggiko.roa
Signing time: Sun 07 Feb 2021 12:56:04 +0000
ROA not before: Sun 07 Feb 2021 12:56:04 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 123.195.192.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6401 (0x1901)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:56:04 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=C97202621C34F2ED4D9B426FEAB71D0F08208A4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b2:ce:94:30:ee:87:0a:b4:11:b9:62:cc:32:
f9:65:c4:31:3c:cf:35:cb:0a:e6:1d:8e:ef:5f:4a:
86:74:06:3c:13:91:9c:3e:d4:85:90:c3:fa:0d:1c:
13:b7:0c:65:fe:8c:8a:66:bb:34:f6:fc:e3:7a:d3:
26:e6:5e:d4:7f:d6:24:b5:10:81:ca:e8:99:86:48:
6d:f2:8f:3b:95:29:be:ac:d3:7e:fb:f7:5c:f6:36:
59:e2:c4:01:df:af:19:1f:9c:52:22:0e:03:2d:63:
34:0d:ac:0c:f0:70:43:54:f7:18:31:9a:32:b5:87:
03:1e:25:35:6f:af:ee:3f:88:bf:34:5f:38:76:29:
5c:3c:f3:17:a6:9c:4f:87:4d:e8:b2:0a:f4:5e:0a:
e6:3d:ce:d4:a3:c7:3a:00:34:2c:16:01:a9:6b:0f:
83:f8:40:49:de:db:d5:78:f6:d5:41:55:7c:a7:db:
1c:9d:5c:19:ca:72:b4:84:62:a3:ac:0e:9e:3b:27:
48:3c:4c:f9:23:8e:1f:49:5d:de:ba:21:a4:2f:79:
77:8c:b3:10:02:9e:a5:05:dc:65:60:56:1e:de:2c:
38:a8:18:da:39:f5:4f:60:69:14:a3:6d:7f:42:a4:
03:18:f9:43:22:63:06:75:f5:37:3c:49:43:94:89:
a4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:72:02:62:1C:34:F2:ED:4D:9B:42:6F:EA:B7:1D:0F:08:20:8A:4A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yXICYhw08u1Nm0Jv6rcdDwggiko.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.192.0/20
Signature Algorithm: sha256WithRSAEncryption
15:99:2a:41:ce:07:5a:b2:06:19:38:8d:f7:c8:54:9c:67:ad:
7f:83:ea:44:1c:07:a3:09:02:7c:62:0f:5c:32:f7:7a:c7:0e:
00:b4:ca:b7:60:ca:11:2b:19:e4:95:b8:c6:ef:20:fa:93:6b:
10:61:55:d0:d3:4c:ac:3a:7e:7b:73:fa:d2:1b:63:df:a2:dc:
16:1b:f2:e4:8d:2c:00:85:52:e0:1a:b3:22:7b:90:7d:c1:e1:
b4:13:6d:b1:58:a2:4e:ea:1f:8a:ec:b9:ce:59:8b:94:b7:40:
e8:31:f6:e1:40:4f:7d:56:a4:c8:46:a3:d9:43:f7:ad:89:a7:
30:bf:50:ae:82:9b:f4:16:db:d9:22:8a:08:e3:e2:e4:80:fb:
93:b3:9c:4a:af:bc:a5:b1:d6:65:45:27:4e:09:9c:e5:a4:88:
51:95:97:2c:e9:40:33:a8:0c:c1:5f:75:0a:a3:49:af:f5:92:
6c:72:09:ea:4c:c7:d1:77:39:ec:07:96:b3:02:ef:bc:24:bc:
97:47:01:2a:0b:49:d8:89:c5:f4:39:23:45:34:c2:1b:e7:0d:
78:fc:ef:78:f9:4d:90:bb:db:94:cd:be:d1:9e:c8:fa:dc:a9:
38:0e:8e:7c:1a:af:50:2b:f6:4f:33:22:48:7c:67:b0:c8:b7:
6f:ee:72:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:43 2024 by rpki-client on console-ams.rpki-client.org