Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1_LwfsQg7nTYB1ynyxOQc2OlTxc.roa
File: 1_LwfsQg7nTYB1ynyxOQc2OlTxc.roa (raw, json)
Hash identifier: f69nMLM5bS5gMrK6+M3JlGRBpo72GrHZ8/GD+pwewv8=
Subject key identifier: D7:F2:F0:7E:C4:20:EE:74:D8:07:5C:A7:CB:13:90:73:63:A5:4F:17
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0E6B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1_LwfsQg7nTYB1ynyxOQc2OlTxc.roa
Signing time: Tue 29 Sep 2020 09:55:42 +0000
ROA not before: Tue 29 Sep 2020 09:55:42 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.12.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3691 (0xe6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:42 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D7F2F07EC420EE74D8075CA7CB13907363A54F17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bd:49:e5:d0:34:78:5a:fc:f9:75:b1:ea:8d:
3e:c6:51:ba:23:fc:64:25:d3:d1:af:01:f6:30:c2:
ff:e7:d5:0e:a3:8f:77:52:82:8e:79:2f:95:93:fa:
14:6c:a1:4f:98:62:7d:62:f9:8b:bf:c9:95:5e:16:
b5:04:00:21:d9:d5:dc:27:cd:ab:c7:c6:8d:1f:bf:
6b:7d:6c:3b:54:35:53:b3:6b:95:f0:8f:0b:ed:15:
d0:4a:8c:67:64:f5:d9:f1:e4:b7:24:65:f8:1d:66:
da:0b:a4:4f:72:47:ee:5f:c9:0d:8a:d1:bf:b2:5e:
f2:8e:b7:a0:81:f1:a4:e1:51:37:88:91:8b:90:85:
a9:2a:ec:44:20:79:8b:49:85:79:0c:33:c9:de:23:
2f:ec:a3:df:84:15:5d:08:b0:8d:0d:70:a1:bc:08:
2b:2a:00:78:97:c2:71:1c:fa:69:92:bf:89:f5:3d:
3e:26:08:8e:c5:d1:cb:72:8d:bc:a9:35:93:43:d9:
44:be:b1:ce:93:83:15:6f:04:4c:4a:6a:05:ed:a1:
d3:22:6b:b9:9a:79:11:1d:cd:fe:5c:64:c1:22:a7:
90:c7:7d:0d:78:1f:1b:04:9f:78:d3:65:79:04:93:
49:cd:ef:40:73:18:dc:a7:95:c3:ac:ce:ba:4c:ee:
83:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F2:F0:7E:C4:20:EE:74:D8:07:5C:A7:CB:13:90:73:63:A5:4F:17
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1_LwfsQg7nTYB1ynyxOQc2OlTxc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.12.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:00:7c:44:c0:ea:3c:cd:1c:1e:0b:85:86:82:6a:29:19:de:
1d:e4:bd:0e:99:24:24:93:71:81:21:8a:a8:ef:22:ad:95:b7:
c6:42:b2:ac:6f:49:b6:7a:20:4e:6b:81:66:5b:15:73:7c:3a:
6d:04:0d:42:d9:ad:6d:1a:0e:d2:5b:2c:4a:dd:cd:61:ef:12:
4d:84:7f:08:c4:9a:de:c8:bb:61:20:59:a1:7e:60:3d:fa:b8:
b3:32:da:6a:df:f0:1b:f0:cb:93:88:3b:9f:8c:5d:73:c7:1f:
f8:e6:d6:db:4a:25:ab:2d:8a:a2:47:6c:55:88:85:6b:87:91:
39:c7:d5:90:ad:d7:5c:47:a3:9a:df:a7:46:8f:78:5f:db:24:
13:cf:a3:8e:49:ac:75:e9:8f:84:1a:04:73:5b:cf:66:1f:29:
57:8b:7a:ab:29:02:94:0e:ee:ce:f4:fa:8b:57:6e:88:88:04:
63:56:c0:30:bb:e3:55:df:8e:29:22:bb:73:2a:2e:c4:f7:0d:
7d:f4:29:38:54:db:13:a0:d3:5a:7b:91:46:b6:27:72:9b:e3:
22:0f:ad:49:59:c8:7b:6a:31:95:59:f4:5b:1b:31:65:69:23:
da:35:11:02:5a:e1:c2:3c:35:70:19:08:3c:28:8e:23:ac:e3:
f3:88:ae:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:46 2024 by rpki-client on console-fra.rpki-client.org