Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-Esic9v2exR7OyxJtbwiAVTEOa4.roa
File: -Esic9v2exR7OyxJtbwiAVTEOa4.roa (raw, json)
Hash identifier: ik/yW0EmgUg9y6gR9fADg7DH28KA6dWtHWbrqefAbZ8=
Subject key identifier: F8:4B:22:73:DB:F6:7B:14:7B:3B:2C:49:B5:BC:22:01:54:C4:39:AE
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0EC9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-Esic9v2exR7OyxJtbwiAVTEOa4.roa
Signing time: Tue 29 Sep 2020 09:56:08 +0000
ROA not before: Tue 29 Sep 2020 09:56:08 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.192.240.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3785 (0xec9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:08 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F84B2273DBF67B147B3B2C49B5BC220154C439AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:40:59:28:c7:eb:76:37:7c:77:3f:c7:f6:41:
46:46:cb:05:9c:02:6a:ab:ce:8c:bd:36:20:7c:6a:
8c:74:90:5e:6b:40:df:f5:e6:21:5f:4c:37:a8:d6:
64:15:76:8e:64:d4:28:52:0b:66:c4:63:20:b2:c4:
61:95:fe:94:75:b3:4d:af:40:79:35:5d:cc:1a:c3:
1f:19:0c:24:25:13:48:76:df:3e:a6:f3:8d:3b:74:
84:f4:b8:66:07:09:62:e5:dc:0d:0d:f3:d3:c0:64:
f6:34:9a:0e:be:45:bf:ad:2b:4c:82:92:91:6f:b0:
1d:d3:89:78:14:73:d4:88:a2:f4:1a:ce:03:d9:8f:
bf:52:5b:20:c3:2b:cb:de:c4:6e:4f:08:48:9b:8f:
50:93:4d:b5:af:c6:9e:8a:33:eb:a4:dc:24:14:3a:
7c:93:8b:3f:23:56:25:53:fd:b1:eb:4a:64:e8:ba:
6f:3c:7f:22:71:3a:46:cf:1f:54:59:0e:48:5b:a4:
6e:74:8c:c5:da:05:0b:8b:a9:25:0f:15:68:c2:c5:
91:32:55:9c:fb:7e:0a:10:fc:9e:09:65:3d:e0:d3:
a7:0d:07:31:a0:62:69:67:5e:b3:6a:0f:72:89:c3:
83:9c:a6:06:2d:4c:69:ba:41:35:ed:80:cb:ed:4d:
90:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:4B:22:73:DB:F6:7B:14:7B:3B:2C:49:B5:BC:22:01:54:C4:39:AE
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-Esic9v2exR7OyxJtbwiAVTEOa4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.240.0/21
Signature Algorithm: sha256WithRSAEncryption
4c:24:86:03:1c:d2:45:cc:9f:91:7c:93:98:9b:49:82:19:f1:
28:e7:4e:f7:7c:8c:8e:e4:e8:f1:97:b6:b2:2e:ca:7e:99:3a:
5d:58:3a:e7:04:2e:91:b8:dc:f8:d2:31:bb:86:7d:7d:64:b1:
3f:ab:81:b7:12:4a:cf:78:b1:85:4e:cf:95:5a:ef:12:fe:ac:
1c:4e:31:75:2e:1f:3d:f7:2f:f0:02:f9:e8:d9:e4:1a:d4:53:
97:1a:df:6a:d9:a0:4e:a5:75:31:54:35:13:45:be:7c:7b:01:
10:03:9b:5c:2a:a5:0d:6f:ef:aa:74:d3:10:18:97:0b:3e:5a:
51:c8:de:6d:ec:b5:c5:52:f3:8c:42:91:72:d4:d1:52:13:26:
2b:7b:6f:f9:65:de:08:1f:eb:74:1b:70:12:dc:dd:f1:de:69:
c7:64:e9:06:55:5b:25:41:19:8a:d8:98:6d:f3:53:31:ee:ca:
34:26:3a:0e:86:f4:df:42:cc:18:b2:c9:55:0b:a4:3c:a2:10:
db:b1:e7:da:20:42:e3:91:98:4e:6f:08:92:bf:4b:65:d4:dd:
70:49:eb:8b:14:f9:b7:58:fc:59:ab:35:c8:9e:ff:6a:d2:88:
2f:04:f8:b7:c8:bd:a9:56:b7:af:79:77:ba:3a:d0:16:05:12:
6f:55:2a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:22 2024 by rpki-client on console-ams.rpki-client.org