Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7T3ixkc5-j748kRwfKpFkTd9EWs.roa
File: 7T3ixkc5-j748kRwfKpFkTd9EWs.roa (raw, json)
Hash identifier: shm5x4JUEwtvoyOD5Hx8/MynBIf8qaDU2LfcMwcC1c0=
Subject key identifier: ED:3D:E2:C6:47:39:FA:3E:F8:F2:44:70:7C:AA:45:91:37:7D:11:6B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0F65
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7T3ixkc5-j748kRwfKpFkTd9EWs.roa
Signing time: Tue 29 Sep 2020 09:56:54 +0000
ROA not before: Tue 29 Sep 2020 09:56:54 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 123.193.218.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3941 (0xf65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:54 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=ED3DE2C64739FA3EF8F244707CAA4591377D116B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a0:b2:12:90:2e:38:ff:b1:43:cf:87:3a:8d:
b5:0d:7e:01:76:db:3d:74:6e:51:93:46:78:ee:ee:
62:a2:08:32:b8:e7:e1:b6:ae:30:5d:6f:54:d6:5c:
67:1b:89:e1:7e:7c:cf:ef:ad:9b:a3:d4:b9:c4:49:
94:83:1f:8f:ed:f4:4b:20:70:24:f7:82:a0:56:0e:
88:da:d0:30:ae:9b:ea:b8:1f:e7:e8:66:52:b6:29:
45:2d:15:31:ae:64:53:21:d1:50:70:d8:07:43:11:
7d:fd:ba:e8:ba:6b:25:77:9c:87:34:58:00:c9:39:
47:ba:eb:67:f0:fa:c5:81:d4:02:00:cf:ff:25:aa:
30:59:0f:7f:c5:50:7b:b2:24:a8:26:bf:2e:5f:93:
3a:4b:4d:24:ef:1f:cd:1a:ce:96:a5:f0:1f:e4:4a:
3e:5c:f4:c6:21:15:4c:3f:dc:76:eb:ad:46:ad:e7:
56:23:f9:b1:1a:4c:c1:2e:27:48:9d:ab:29:ea:2c:
08:c8:e0:8b:ca:ac:0b:0b:91:7c:b3:b4:b3:8b:9c:
aa:04:e6:65:fd:cb:d5:b8:a7:2e:c6:96:59:9f:39:
28:f3:42:5c:98:f8:cf:0b:75:3e:4f:49:b0:e2:67:
80:7e:a7:90:f4:57:6c:2c:ae:79:80:b7:eb:dc:8b:
10:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3D:E2:C6:47:39:FA:3E:F8:F2:44:70:7C:AA:45:91:37:7D:11:6B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7T3ixkc5-j748kRwfKpFkTd9EWs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.218.0/23
Signature Algorithm: sha256WithRSAEncryption
31:20:85:eb:20:64:ea:1c:1d:2e:79:7d:73:83:00:66:50:4d:
29:66:84:c2:76:e4:76:6e:21:ab:f1:b6:5c:29:ed:a1:61:57:
3c:89:5d:a0:6e:1e:f6:bc:0b:4e:6e:66:8e:ca:5f:4a:4c:23:
2c:24:50:d6:16:0a:4e:cb:96:00:05:e1:87:84:89:b5:ab:4a:
33:93:ea:29:75:69:1a:4f:95:e7:33:b1:6f:50:2e:06:ba:a9:
26:b0:cc:23:be:f2:bf:bb:44:6a:99:2d:9d:ea:30:aa:ca:6e:
6c:55:52:e6:70:c5:e5:53:4a:96:66:6f:b9:1e:ca:05:7e:d0:
24:15:f5:b6:41:3e:63:4d:04:ad:9b:76:0a:08:bc:98:5f:85:
f5:e7:cd:fc:e1:ec:0f:6e:b7:45:85:b0:22:0e:6a:95:0b:0e:
a8:54:63:d3:93:41:a9:9a:ff:0e:29:04:93:bd:44:d6:d8:3c:
77:34:75:c0:7d:eb:c8:3a:1c:d7:bf:5c:dd:f2:68:9a:54:af:
cc:82:d5:6b:19:99:cc:f8:f9:d5:41:3a:41:de:0f:99:79:08:
f0:6b:78:a0:26:b0:09:75:fa:18:82:0b:dd:e0:18:57:dd:24:
75:a8:24:25:41:69:e1:f8:01:b8:92:8a:3f:69:eb:83:99:c7:
50:96:24:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:48 2024 by rpki-client on console-fra.rpki-client.org