Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8-VThrTKnE8CfXshfp1FPTBq1jw.roa
File: 8-VThrTKnE8CfXshfp1FPTBq1jw.roa (raw, json)
Hash identifier: /uKPO1YYmlcrQaqTWp2Cxr002Rd3HmlE9Xsy8cT/4HI=
Subject key identifier: F3:E5:53:86:B4:CA:9C:4F:02:7D:7B:21:7E:9D:45:3D:30:6A:D6:3C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0E7D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8-VThrTKnE8CfXshfp1FPTBq1jw.roa
Signing time: Tue 29 Sep 2020 09:55:47 +0000
ROA not before: Tue 29 Sep 2020 09:55:47 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.204.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3709 (0xe7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:47 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=F3E55386B4CA9C4F027D7B217E9D453D306AD63C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:86:87:1f:93:44:f9:a0:f2:db:19:89:ad:47:
fe:4d:9e:c7:01:c6:bc:06:ad:ec:51:53:45:3c:02:
2f:f8:d3:ea:99:af:84:14:87:8d:f8:5d:98:8d:3f:
8d:db:f7:55:e1:5d:1d:32:0d:f8:f7:6f:f2:36:6e:
79:8f:96:18:11:e8:6b:0a:42:bb:7d:96:d4:1d:ee:
57:4b:75:db:7b:cd:3e:bd:bb:31:41:69:2d:36:6d:
c8:ff:29:06:4e:96:0d:8b:20:23:1c:ae:5c:8b:a0:
39:10:10:30:bc:ad:3b:a5:1a:68:e5:9b:c7:08:72:
99:50:71:07:d9:ae:99:b9:ae:7d:97:a5:a8:ad:b6:
67:43:cb:6b:6b:82:0b:38:87:a0:be:c9:31:1c:00:
23:eb:1c:43:1f:98:57:7b:3a:ef:04:fc:3b:dd:41:
99:f5:9d:2c:9b:52:61:2b:1c:c5:b1:33:cf:8b:fe:
a8:a7:a0:ba:9d:9b:1f:47:a6:09:fa:7d:2c:42:d1:
0b:69:f4:15:7c:bb:50:63:d7:da:60:46:d2:4a:84:
00:15:af:49:80:60:4a:1f:77:4f:af:c6:69:cc:6a:
73:2f:89:cf:16:a5:a2:8e:07:39:0c:a7:9f:27:a0:
47:2c:29:8d:20:43:40:2a:ac:8a:e3:dd:67:39:38:
47:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E5:53:86:B4:CA:9C:4F:02:7D:7B:21:7E:9D:45:3D:30:6A:D6:3C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8-VThrTKnE8CfXshfp1FPTBq1jw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.204.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:6a:2e:d5:2b:1c:ec:07:16:68:65:50:ff:be:fe:f3:bb:3a:
00:41:1e:e9:2c:de:2b:54:1d:54:4b:20:a2:ed:ad:d7:54:22:
0b:24:2a:bd:34:5b:3c:82:ce:e4:d8:a7:6f:10:6c:2b:49:d8:
04:91:70:a1:e1:f4:7a:f0:21:c0:bf:75:24:ce:4a:8d:f6:df:
47:de:55:a5:71:81:39:ae:0e:d4:60:06:73:24:10:29:b8:5b:
b8:5e:c7:38:48:2c:26:84:6c:84:20:33:a6:4d:34:ec:9a:e6:
12:ff:18:20:c1:2d:1a:17:3f:72:44:78:63:ce:78:9a:63:0b:
3a:ed:aa:06:86:72:e1:f7:c4:9f:67:2e:c3:e7:3b:5e:96:ca:
f7:ae:3f:20:d2:83:13:ba:6e:ac:be:93:62:f0:2c:37:29:49:
51:40:b4:75:77:40:85:19:62:9a:1c:ad:bc:57:d5:84:75:93:
c9:9e:ee:54:16:f3:fc:18:a0:c3:dd:32:04:0e:36:3a:88:4b:
94:30:18:52:af:b3:c3:2a:ce:ac:79:d9:40:80:3d:3d:e3:71:
d4:ca:44:4a:b2:9d:f9:75:3c:9f:dd:6c:cd:a1:6b:65:e7:9b:
19:c7:da:e3:3e:f4:f3:30:01:94:3d:2a:ee:61:9b:ab:23:ff:
07:8e:6a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:48 2024 by rpki-client on console-fra.rpki-client.org