Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1evYrh-Q0mc75oFp_kNYCm4ET1U.roa
File: 1evYrh-Q0mc75oFp_kNYCm4ET1U.roa (raw, json)
Hash identifier: yzu0/QqJ3G6tcOgEh/KlgLuj3nHzsFMzHRZOiYQWLvo=
Subject key identifier: D5:EB:D8:AE:1F:90:D2:67:3B:E6:81:69:FE:43:58:0A:6E:04:4F:55
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0F2F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1evYrh-Q0mc75oFp_kNYCm4ET1U.roa
Signing time: Tue 29 Sep 2020 09:56:37 +0000
ROA not before: Tue 29 Sep 2020 09:56:37 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.148.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3887 (0xf2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:37 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D5EBD8AE1F90D2673BE68169FE43580A6E044F55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1a:58:07:29:15:24:d3:a8:74:7c:6a:ef:d9:
c7:aa:15:0d:c1:92:8b:1f:6f:3b:e5:48:87:ac:42:
ff:1e:bb:89:62:4b:ad:d7:2c:2c:46:d9:60:e4:8d:
0c:1d:4b:75:cd:1a:f8:0b:bf:c5:94:65:3c:cf:be:
b4:19:07:91:45:8e:b7:d9:ac:ed:be:8d:d0:7b:7a:
23:b1:c6:85:77:86:7d:ad:a6:05:74:9b:6d:15:90:
00:08:1e:b7:c1:f8:9b:af:5a:f4:b3:c1:10:73:a4:
64:64:82:a6:d2:38:c2:40:27:32:5b:50:4b:07:29:
2e:0d:9a:f1:16:56:6a:4f:e5:20:8d:a2:be:86:12:
e8:b1:3a:b7:b4:4b:0d:cf:18:55:e0:a8:c1:67:4e:
06:03:75:44:6c:57:0d:a8:34:0d:04:d0:ba:b2:6d:
fc:ca:7d:4c:b0:3a:b5:d8:e6:ea:2d:6c:e0:db:6c:
1a:74:1f:0e:75:07:c2:30:0f:56:1c:6a:ff:bf:b5:
4e:04:9c:74:6c:bf:55:ce:00:b6:11:1b:4e:0e:4f:
b7:f5:5e:9e:93:11:6b:37:43:4b:cf:73:b1:38:fc:
d3:1f:64:f7:27:87:c8:99:b7:b1:f9:7b:1a:47:bd:
3d:a7:13:4c:c0:53:25:aa:01:15:38:f8:1b:0e:f1:
18:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:EB:D8:AE:1F:90:D2:67:3B:E6:81:69:FE:43:58:0A:6E:04:4F:55
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1evYrh-Q0mc75oFp_kNYCm4ET1U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.148.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:28:3e:86:1f:b3:ba:21:fa:66:55:d4:45:31:73:84:66:a0:
f7:f7:d5:7f:a1:e9:9f:76:8f:99:fa:7a:e0:07:23:ef:a2:ce:
90:73:92:c1:8c:26:27:47:e9:d0:ff:ba:6d:c4:41:c3:c8:e3:
af:3e:1c:8d:2c:90:5e:33:6b:40:44:a2:25:4e:9b:9a:43:be:
88:42:23:7e:c3:68:b3:f1:7b:08:76:72:e4:41:ad:c2:b1:45:
29:01:af:41:c0:05:5e:6a:55:12:de:47:8c:8c:ba:c2:34:fd:
9f:e0:6e:64:64:c7:36:52:92:69:08:75:30:81:5b:7d:e8:76:
9d:68:d3:0f:63:f4:fe:d9:f2:67:c6:b5:9d:78:92:8d:7a:1f:
0e:d5:8a:00:49:67:7f:10:bb:6e:d6:7e:2c:d5:81:e0:66:47:
b1:17:1b:58:be:b1:a1:47:82:99:43:40:b5:3c:a9:b5:4d:c3:
41:e7:99:e8:f9:a7:02:bc:e3:36:13:dd:df:5a:28:92:1f:93:
9d:f6:c9:7c:ec:bf:1f:43:56:92:54:c8:7d:27:98:ae:95:a0:
15:cb:94:90:02:d5:56:b4:80:e2:5d:23:68:8e:9b:07:27:31:
60:08:0c:61:65:ad:69:17:b4:60:b0:5b:fb:2f:d8:19:80:b6:
27:2d:5b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:46 2024 by rpki-client on console-fra.rpki-client.org