Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0fVKPh6_Y5vHhax4NA5frBeAlYg.roa
File: 0fVKPh6_Y5vHhax4NA5frBeAlYg.roa (raw, json)
Hash identifier: cNtHr/UVxf5aJ+Jti9/hIYM5vEhxMcSmTrigPDPNLsA=
Subject key identifier: D1:F5:4A:3E:1E:BF:63:9B:C7:85:AC:78:34:0E:5F:AC:17:80:95:88
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0CF2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0fVKPh6_Y5vHhax4NA5frBeAlYg.roa
Signing time: Tue 29 Sep 2020 09:53:59 +0000
ROA not before: Tue 29 Sep 2020 09:53:59 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.192.136.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3314 (0xcf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:53:59 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D1F54A3E1EBF639BC785AC78340E5FAC17809588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:03:8a:09:52:7a:d2:7c:86:ac:91:20:83:8d:
a0:05:70:b5:72:96:48:01:ed:c4:f8:18:cd:75:26:
ed:27:21:73:4d:c3:b4:44:11:6b:45:54:2f:a5:9d:
9c:ee:ad:32:9a:7f:51:2b:f4:85:55:17:61:33:fc:
ce:3d:d8:e4:9a:b6:4f:bb:bb:54:03:b3:10:f4:42:
d7:80:bc:e7:3a:3c:39:ea:a5:45:31:1f:49:ea:1f:
08:68:f6:eb:7b:ec:9a:af:ad:52:3b:76:56:93:c3:
28:b2:c0:14:91:21:49:6a:35:83:f6:53:39:37:ec:
6b:f1:ad:5f:2c:e6:76:0b:30:f6:24:de:77:61:f7:
bf:2d:04:ad:ab:3d:0d:1e:6d:c7:60:4d:94:7f:ca:
7f:f8:18:3c:84:65:12:64:9a:44:39:03:43:81:23:
28:72:dc:b7:67:dd:92:84:35:9c:1e:21:f1:62:19:
0b:ea:ce:f9:d0:5c:b5:35:6b:10:48:b7:f5:7b:28:
55:0d:12:e8:1a:b4:9c:6e:14:55:dc:fd:f6:02:dd:
05:b5:07:ae:43:fe:82:8c:e6:29:2a:25:81:f7:7f:
02:1f:f3:09:a3:a3:5a:68:c6:dd:eb:fe:dc:9a:ca:
5e:70:b6:58:69:83:1e:6c:f2:53:34:65:99:12:4b:
11:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F5:4A:3E:1E:BF:63:9B:C7:85:AC:78:34:0E:5F:AC:17:80:95:88
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0fVKPh6_Y5vHhax4NA5frBeAlYg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.136.0/21
Signature Algorithm: sha256WithRSAEncryption
28:1f:2e:c9:b4:2e:36:9e:af:88:16:ea:f3:d5:fa:96:82:74:
3a:39:cf:49:ed:22:41:65:89:2c:b2:06:71:3b:e2:84:1c:9e:
6e:8d:57:e8:44:f2:be:21:0f:72:65:27:73:8e:10:7f:50:53:
a9:ad:2e:f0:bb:bd:d0:78:74:2d:28:97:f5:49:20:eb:4f:6e:
81:d5:b6:a1:a3:ab:25:71:a0:fe:fc:25:d8:f1:de:f1:f9:d1:
8c:a8:d5:e0:b6:7b:52:15:7a:f2:9a:17:6a:42:cb:b1:17:fc:
a9:c4:f5:be:df:59:89:40:10:a4:67:f2:87:15:9f:01:38:01:
0b:04:69:45:e2:72:47:46:15:a0:bb:f5:05:59:3c:69:1f:7b:
ee:9a:b9:2f:a2:53:35:f6:1f:14:98:45:6f:63:fa:d6:86:0d:
6a:36:06:c9:f1:fe:1a:0d:bb:1d:83:4c:9d:9b:2c:02:8c:78:
22:48:67:57:26:d7:d3:95:04:b1:bc:f9:c9:b2:09:be:93:fc:
8b:4d:c4:e9:fb:2a:f5:23:ff:46:db:6e:7c:fd:c6:7c:60:ec:
46:49:30:73:f6:75:f2:87:e7:24:41:36:3b:b3:b9:10:64:b2:
3a:62:41:58:b1:ee:c4:5f:50:50:a6:8b:16:26:99:87:53:c2:
17:54:71:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:46 2024 by rpki-client on console-fra.rpki-client.org