Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2aKDa2dcXobQWoUjG50OQNxOkU0.roa
File: 2aKDa2dcXobQWoUjG50OQNxOkU0.roa (raw, json)
Hash identifier: wZeeUT8PYYjruYSr+SFl0ayHEXVayayn1Pm5N7kVOMI=
Subject key identifier: D9:A2:83:6B:67:5C:5E:86:D0:5A:85:23:1B:9D:0E:40:DC:4E:91:4D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0EC2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2aKDa2dcXobQWoUjG50OQNxOkU0.roa
Signing time: Tue 29 Sep 2020 09:56:06 +0000
ROA not before: Tue 29 Sep 2020 09:56:06 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.8.64/26 maxlen: 26
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3778 (0xec2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:06 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=D9A2836B675C5E86D05A85231B9D0E40DC4E914D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5b:c4:76:8e:15:a9:8d:ed:73:ff:fb:e3:3e:
7b:7c:ab:bc:36:f8:8a:05:77:b6:f6:ba:d0:b1:a2:
4b:43:d6:0d:45:16:89:fb:bb:40:fd:ae:3a:85:ee:
ee:48:d5:5c:b5:d3:2c:dc:cf:a8:c3:5f:8d:4c:cf:
3c:07:86:54:27:5f:00:38:85:32:05:a3:20:50:39:
e3:98:59:f8:58:48:e2:83:d1:96:08:64:8a:47:bb:
75:a5:2a:20:f9:b5:15:00:f0:f4:13:31:25:a8:df:
f5:15:a7:ac:12:c1:d1:a9:3a:9e:37:80:a4:d2:5c:
bf:ee:b4:13:b9:df:7c:fb:e6:e3:81:cc:68:0c:6c:
c2:04:24:c2:6e:6d:01:ff:e4:91:4f:f3:8f:d6:9f:
2f:9a:5a:16:97:ee:80:30:78:84:4f:97:4a:e9:2f:
98:fd:7f:ad:24:e2:15:14:d3:32:d1:09:74:0e:b7:
f7:ce:04:e8:56:78:e2:0a:6c:d0:cd:fa:5a:61:14:
60:64:69:3c:68:54:ca:95:2a:bc:43:b8:41:4b:37:
4a:17:15:03:68:43:2a:8f:44:29:d9:14:6e:7b:88:
58:27:e4:b5:8c:f6:d2:05:7a:69:e8:18:b4:da:30:
61:45:5b:77:f8:18:a4:85:8f:10:12:92:4c:99:53:
fa:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A2:83:6B:67:5C:5E:86:D0:5A:85:23:1B:9D:0E:40:DC:4E:91:4D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2aKDa2dcXobQWoUjG50OQNxOkU0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.8.64/26
Signature Algorithm: sha256WithRSAEncryption
31:4b:ed:3c:98:ed:76:4e:0f:d5:5b:54:b8:07:d3:3b:10:9d:
5a:3f:52:96:21:74:97:cd:0e:e9:65:28:4b:63:76:f1:11:85:
8f:89:cf:5f:66:6d:e5:1b:fe:70:f9:bc:14:21:f6:f5:e6:1a:
6d:b1:c8:c3:70:42:2f:d5:3e:63:7d:c8:e3:07:ec:5a:71:59:
34:4f:60:42:2f:fb:7a:ab:92:72:23:23:2a:8f:c3:de:48:2b:
91:30:25:ce:d3:a0:b1:90:09:c0:c1:a2:26:c1:07:aa:e8:b2:
02:4d:23:9d:46:aa:b9:4d:16:11:ff:07:9f:6a:c6:f3:ce:95:
c0:29:e6:ea:d4:91:2b:18:2d:5b:f9:d6:27:27:94:93:91:68:
ed:2e:b0:76:bb:3c:b6:dc:b3:99:39:52:9e:a0:91:86:43:3b:
7e:7c:fd:76:e2:f4:77:37:71:fa:69:f7:1b:11:b1:34:b5:da:
45:9e:83:1d:35:d8:31:89:14:e6:9c:74:71:50:a9:fc:d7:79:
ec:f1:0b:03:f8:7a:e6:27:a9:1f:67:7b:c1:79:03:32:08:f7:
f6:a0:cf:81:78:61:c4:46:cf:0d:8b:a9:7b:d1:a1:c7:f2:43:
48:f7:d3:de:40:99:b0:b9:64:94:8c:27:29:d0:38:89:4a:37:
91:61:ce:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:46 2024 by rpki-client on console-fra.rpki-client.org