Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zMp1nxFL1oJ6uOOBpMEbwboNNnc.roa
File: zMp1nxFL1oJ6uOOBpMEbwboNNnc.roa (raw, json)
Hash identifier: W04Yoxik4v+MB4DQ/BYHKNbTD3/85NvxaPMgrjB732o=
Subject key identifier: CC:CA:75:9F:11:4B:D6:82:7A:B8:E3:81:A4:C1:1B:C1:BA:0D:36:77
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 151D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zMp1nxFL1oJ6uOOBpMEbwboNNnc.roa
Signing time: Sun 07 Feb 2021 12:02:58 +0000
ROA not before: Sun 07 Feb 2021 12:02:58 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.193.88.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5405 (0x151d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:02:58 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=CCCA759F114BD6827AB8E381A4C11BC1BA0D3677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:80:f6:95:b5:87:b2:d5:c6:19:70:ee:74:13:
72:bf:c2:2f:6b:22:5f:99:f7:d7:f2:a2:bb:29:eb:
a2:03:02:3c:1b:9e:6e:0b:57:b9:27:ef:f9:24:7a:
d3:ad:8c:2c:93:1d:b8:61:d1:c5:9c:39:dc:f3:c4:
9a:87:14:77:bd:82:76:31:17:f1:7d:e8:11:b8:bd:
38:bd:1a:62:dd:ce:ef:df:1a:e2:68:01:1a:9c:43:
86:75:d5:26:f8:4b:fa:42:21:9b:bb:7f:e4:1f:66:
27:43:d3:ad:3b:c5:87:95:af:16:8d:74:a4:b1:dc:
c9:55:ec:d0:4e:c2:9b:90:6a:8c:22:01:0d:78:ea:
67:a0:5b:28:5c:69:e0:7e:c4:01:79:25:3d:28:77:
61:8e:8f:99:1b:ea:75:c6:64:0c:b3:a0:30:ea:b9:
4c:7b:13:a5:c7:4c:3f:31:ca:c3:50:db:1c:4f:5e:
c3:09:55:3e:dc:d5:f2:35:1c:54:ea:67:53:c3:3a:
48:36:b7:83:70:1e:d0:73:2c:ed:db:be:46:57:10:
74:83:5d:d0:d4:30:99:6d:ec:ea:b9:e9:3e:fe:4b:
34:bc:7f:ce:d4:88:09:e0:f2:f5:68:4b:69:3a:10:
29:a3:78:81:b9:02:2f:c3:db:f0:9b:be:23:5b:44:
49:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CA:75:9F:11:4B:D6:82:7A:B8:E3:81:A4:C1:1B:C1:BA:0D:36:77
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zMp1nxFL1oJ6uOOBpMEbwboNNnc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.88.0/21
Signature Algorithm: sha256WithRSAEncryption
49:a9:e7:a4:ed:c6:49:63:a7:0f:4a:58:50:d6:e6:68:d8:42:
29:4d:b1:45:f2:74:d8:80:27:a6:0c:c7:11:41:41:69:ea:e4:
da:ab:0a:78:54:8b:25:d1:0b:c9:a0:f1:7a:da:67:22:e1:78:
0f:71:56:3c:04:1e:83:c7:76:98:bd:df:b6:18:6d:e7:71:53:
28:75:36:a6:dd:ed:0f:f2:6e:04:92:4b:f6:42:a9:01:af:b2:
eb:f5:49:4e:c1:06:70:16:e8:9a:33:30:e9:03:4c:f5:56:6c:
c8:8a:24:11:ac:a3:05:61:8d:26:6e:1b:07:fa:95:d9:0b:3b:
21:97:da:67:44:89:4e:64:45:d8:71:f1:45:c3:b2:9e:06:93:
29:a0:b7:20:4d:8f:f4:8f:79:f4:11:19:ff:fe:c7:a4:64:7a:
9e:59:44:a1:ca:f4:34:d0:31:a9:7a:ec:67:ec:47:c1:1c:8a:
b4:24:2b:5d:3f:50:4c:8f:89:a7:ac:df:9d:8f:ba:a2:9d:ba:
1c:70:1f:a6:97:68:c0:ec:ec:c2:44:9a:b5:23:bd:f9:8c:6c:
12:20:4b:e9:7d:0f:05:c0:2f:f8:35:c2:57:ee:d2:f6:c1:c7:
94:9f:8e:cd:93:5a:9f:21:ae:50:23:23:8e:07:b3:1f:e2:6c:
70:88:e9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:43 2024 by rpki-client on console-ams.rpki-client.org