Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0x9YZfHW3mSGQSjaamq_xBKwFTU.roa
File: 0x9YZfHW3mSGQSjaamq_xBKwFTU.roa (raw, json)
Hash identifier: 5/RoHEVdFhW3jkGQd8OrlJ3vAuZieKdgrhexmNCiPfw=
Subject key identifier: D3:1F:58:65:F1:D6:DE:64:86:41:28:DA:6A:6A:BF:C4:12:B0:15:35
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0F63
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0x9YZfHW3mSGQSjaamq_xBKwFTU.roa
Signing time: Tue 29 Sep 2020 09:56:53 +0000
ROA not before: Tue 29 Sep 2020 09:56:53 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.192.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:53 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D31F5865F1D6DE64864128DA6A6ABFC412B01535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a5:37:bb:35:f2:79:15:f3:94:e2:00:4c:4b:
9b:99:b4:a3:b9:d4:89:73:f8:da:c3:9e:46:56:2b:
0e:e4:15:48:67:09:42:fb:d7:3e:7d:76:b9:3b:63:
70:3d:66:33:74:66:11:dc:b4:2a:86:42:64:18:b9:
75:39:eb:6d:73:12:92:02:03:87:85:e0:cc:a0:6c:
ec:b4:52:8d:f4:a2:32:6e:28:c2:71:8f:61:53:b3:
31:fc:3c:c1:ba:0c:b7:cf:b2:69:b6:f5:16:bc:bc:
38:6a:df:80:f8:3c:90:c7:f8:f8:d9:8b:5c:b4:3e:
fe:73:d0:e8:8f:c5:27:79:83:8f:0d:c5:e8:6d:fd:
fd:c3:82:5c:5b:16:9a:b9:7c:ef:92:02:f3:32:2b:
c4:79:c8:91:e9:f2:bc:ea:47:26:23:37:84:94:45:
d2:ab:de:e8:8e:cb:50:80:65:e2:35:d5:7c:d1:96:
48:b1:7c:c1:ee:32:81:d5:09:98:f4:ca:f3:55:47:
76:53:ca:8c:5a:c8:e3:50:c8:4c:bc:8a:f6:3f:dd:
91:73:41:c5:97:ee:b9:00:a0:69:12:d9:31:1e:34:
0c:82:d2:4f:bd:70:f3:32:96:8f:81:dd:6e:28:34:
de:58:86:8f:2e:e9:8b:72:11:e0:5e:ba:2b:b1:c9:
a9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:1F:58:65:F1:D6:DE:64:86:41:28:DA:6A:6A:BF:C4:12:B0:15:35
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0x9YZfHW3mSGQSjaamq_xBKwFTU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.192.0/21
Signature Algorithm: sha256WithRSAEncryption
4a:01:05:fc:8f:f7:72:5b:b3:57:93:62:5b:f5:15:0f:fc:e8:
05:88:00:4d:b4:d6:8a:20:30:92:57:67:a9:c7:a5:be:c3:75:
d1:44:27:68:be:2f:59:c3:c7:b8:5c:97:b2:7c:2c:58:a2:2e:
a9:02:ae:f9:c9:19:f8:ac:dd:c4:f4:d7:f7:24:60:0f:4b:e3:
b6:16:bc:74:d5:4d:ca:29:52:a2:06:a0:b3:8c:56:dd:8a:b4:
e9:f0:99:1d:9a:a6:28:67:e7:2e:38:9d:0d:af:8f:01:08:25:
57:d6:30:24:ed:c9:84:7a:88:df:d5:3c:cb:11:67:be:df:5c:
34:f9:11:dc:89:77:fe:dd:c9:ab:43:0d:ef:5e:6f:e5:aa:ce:
b9:c8:c5:c3:b9:10:4c:53:d3:fd:30:0f:d8:a9:2f:d8:09:4a:
f1:52:12:af:87:82:6b:ac:15:71:c3:b3:32:83:90:33:6c:d9:
0b:0b:87:42:14:83:ef:26:55:6b:f2:97:1b:47:ef:09:88:a3:
a2:cd:f7:bf:ee:9d:3c:98:89:85:d1:2a:29:1b:67:0a:eb:03:
90:44:68:68:62:99:2d:00:1c:45:d1:4e:f0:b7:8c:2e:22:16:
8b:fd:7d:bf:05:f3:18:17:70:1d:ed:a9:74:a8:d3:b5:81:b4:
2b:5b:14:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:46 2024 by rpki-client on console-fra.rpki-client.org