Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ykUigZAdi_KeN1c-LancD8tv-rY.roa
File: ykUigZAdi_KeN1c-LancD8tv-rY.roa (raw, json)
Hash identifier: CWbMTYNZQmpTgCZHe2YbXzqnwODyLijVvTtNiqjjuvY=
Subject key identifier: CA:45:22:81:90:1D:8B:F2:9E:37:57:3E:2D:A9:DC:0F:CB:6F:FA:B6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 14C9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ykUigZAdi_KeN1c-LancD8tv-rY.roa
Signing time: Sun 07 Feb 2021 12:00:03 +0000
ROA not before: Sun 07 Feb 2021 12:00:03 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.193.252.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5321 (0x14c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:00:03 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=CA452281901D8BF29E37573E2DA9DC0FCB6FFAB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a5:0c:6e:49:3c:26:df:d7:68:8a:11:6d:12:
73:46:0b:28:2e:91:38:52:36:bb:c8:e8:4e:64:0a:
f3:1c:6d:4d:ae:c8:26:cd:e4:fd:7f:a2:bc:98:b5:
8a:66:fb:9b:79:ca:8d:29:a9:7e:6f:12:af:b0:50:
8f:00:78:71:1b:d8:12:fd:20:f9:fd:9a:8d:2d:85:
44:ff:83:99:ae:c2:86:45:bb:e0:e4:d2:3b:e5:e4:
8f:06:85:f9:01:eb:e8:21:4d:98:5d:ee:ea:0f:29:
ce:2c:a0:70:d3:cf:24:94:c7:21:ed:09:e0:f1:bc:
c0:59:9f:52:f9:a1:5f:45:17:5e:50:e9:de:8c:35:
c8:9e:81:23:2f:bc:b7:a3:a1:32:df:ea:d1:da:73:
ea:e2:8c:50:e8:b8:ad:8a:d3:de:a1:33:ca:05:af:
47:07:66:39:f4:5f:d7:5f:b5:88:06:2b:5c:6d:96:
e3:57:a3:80:c9:cf:95:b5:c9:2e:4d:bd:7c:a7:99:
a9:aa:a4:b8:ce:de:4a:71:9f:a0:f8:87:1a:93:a2:
7e:82:46:19:de:ec:bd:44:17:49:3d:9f:3e:39:2d:
ff:a6:34:66:52:1d:03:3a:9a:cf:5f:7f:67:40:60:
95:53:2b:7c:bf:d9:75:18:5e:07:1c:a5:ff:43:39:
74:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:45:22:81:90:1D:8B:F2:9E:37:57:3E:2D:A9:DC:0F:CB:6F:FA:B6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ykUigZAdi_KeN1c-LancD8tv-rY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.252.0/22
Signature Algorithm: sha256WithRSAEncryption
52:74:0a:a4:fa:56:06:c1:e1:64:03:8c:3a:66:d7:fb:93:92:
4c:7b:ce:98:f0:ae:7d:0c:f1:3a:c6:ef:fb:81:b2:33:fb:9d:
a5:b8:39:b0:1e:9a:d1:5d:b2:76:aa:cd:3a:ba:29:23:b3:00:
36:ee:f7:07:ec:61:9a:4e:08:67:4f:ba:ae:19:f1:a0:ca:b4:
f3:13:e7:79:a8:a7:9a:24:b1:7e:83:a1:3e:91:0b:95:e2:cb:
f4:50:f9:87:a6:0c:9d:ae:0b:eb:5f:55:cf:96:7d:29:cd:84:
e5:81:e0:f8:b3:42:7d:b9:ee:39:a3:33:e5:27:a1:17:1a:ca:
d8:f3:a2:d3:27:fb:fa:4d:0d:81:27:3b:c9:c2:42:87:66:a9:
cc:6d:ef:91:8c:89:be:a1:0e:fc:3b:8e:71:9f:cb:a7:f6:95:
f1:53:f6:35:72:18:b0:8d:9e:48:11:28:a5:59:f2:ee:66:f9:
cc:de:b9:7a:4c:a7:d6:b5:d6:01:e3:66:55:5d:ad:ca:34:de:
45:76:df:52:10:0b:97:9c:38:43:4c:66:b9:61:91:d7:e2:3d:
e0:f1:2d:cc:c1:0d:4a:c6:db:2d:b5:34:ab:eb:33:c3:90:33:
be:75:8a:92:25:24:b9:ae:1f:43:87:6a:09:4f:d5:97:19:0a:
93:69:e9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:43 2024 by rpki-client on console-ams.rpki-client.org