Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-uY7uPsayNrQp4w43IFBr0vRnT0.roa
File: -uY7uPsayNrQp4w43IFBr0vRnT0.roa (raw, json)
Hash identifier: aly3bhgbiZKmBCa/93U3/pwKPCXYO+zN8Ovi9Gp97ZY=
Subject key identifier: FA:E6:3B:B8:FB:1A:C8:DA:D0:A7:8C:38:DC:81:41:AF:4B:D1:9D:3D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0DBD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-uY7uPsayNrQp4w43IFBr0vRnT0.roa
Signing time: Tue 29 Sep 2020 09:54:55 +0000
ROA not before: Tue 29 Sep 2020 09:54:55 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.193.64.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3517 (0xdbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:55 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=FAE63BB8FB1AC8DAD0A78C38DC8141AF4BD19D3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:29:3f:23:08:87:ee:f0:a5:c8:cf:25:e5:f9:
85:75:d7:7b:31:64:ea:e6:aa:6a:fe:07:f8:f0:5d:
ce:1c:54:0e:d6:3e:bc:aa:89:2c:3e:bb:88:2c:81:
96:40:d0:7d:14:cb:be:8b:3a:d7:dd:49:a2:e5:0d:
a4:a4:56:b3:d5:ef:bb:d8:e1:d7:dd:3b:8f:3f:8a:
9a:33:57:da:d3:7c:34:c8:d7:d6:38:a6:b9:30:02:
62:dc:b4:83:4c:d2:87:af:dc:6b:5a:cd:8e:34:0e:
56:dd:c8:a5:ca:97:50:b2:08:60:0d:a6:dc:ca:08:
ce:83:5f:21:35:9e:2b:e3:28:5f:64:a3:04:f1:0f:
00:4c:6f:1e:67:5c:96:19:18:5f:93:a6:94:15:91:
b4:7d:3e:f1:91:af:09:dd:cf:8d:9f:2e:a2:00:4c:
be:68:fa:da:8b:e7:e8:45:96:eb:29:03:b1:7f:6f:
b4:2c:06:fd:13:17:81:b5:d6:76:22:55:eb:04:c5:
4f:e6:64:85:20:43:38:c9:c8:79:de:4a:12:8d:fa:
3e:2e:22:e5:82:9e:b6:9f:7e:f8:80:38:33:7d:db:
bb:72:3e:dd:c4:07:a0:d7:5a:dc:21:3b:a0:0f:f6:
1f:78:66:03:98:f5:98:02:06:e4:4f:d3:ae:48:e7:
2c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E6:3B:B8:FB:1A:C8:DA:D0:A7:8C:38:DC:81:41:AF:4B:D1:9D:3D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-uY7uPsayNrQp4w43IFBr0vRnT0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.64.0/22
Signature Algorithm: sha256WithRSAEncryption
10:34:4a:c8:a4:8a:1d:28:c6:19:cf:fb:38:72:47:a2:58:db:
a3:bd:1b:5f:b2:84:fd:7c:1b:b2:dd:35:21:e7:d4:63:96:79:
19:2c:ff:b9:6f:30:2a:43:bd:8f:5d:b9:fd:95:55:9f:26:41:
8d:f6:56:29:d7:1d:8e:90:b0:86:85:d5:11:96:2b:1f:1d:c0:
da:49:01:49:d3:8d:6e:20:09:07:73:a6:97:ba:4a:23:29:4b:
32:95:05:12:bc:8d:56:f1:6a:cb:f9:54:6f:e4:35:66:8f:5d:
b7:90:42:1c:fb:0a:1d:c1:06:55:e2:77:a4:ab:e3:05:16:29:
5c:80:50:74:90:e1:0f:38:26:1e:d4:a3:f7:b8:62:d3:29:5a:
39:30:b9:5a:73:f8:5f:4c:e3:df:3b:4c:a9:20:d5:e4:5d:a1:
01:db:3b:39:c4:3c:a6:00:cb:d9:68:bc:52:d9:69:12:2d:21:
3a:6c:85:20:79:43:2b:bd:74:b7:fd:f6:7b:7a:83:5e:41:86:
40:42:16:41:ea:4e:ac:87:bc:46:60:db:09:8b:3c:7a:c8:f6:
de:85:a0:54:ba:42:06:4e:f4:33:46:db:13:e5:3b:1b:c9:9e:
bb:57:2c:fd:11:34:c5:7d:87:bb:63:72:df:c1:d7:0c:60:32:
2f:7d:0b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:07 2023 by rpki-client on console-ams.rpki-client.org