Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AjQ18qxFRj2L9zVfMuHxVnFKqzs.roa
File: AjQ18qxFRj2L9zVfMuHxVnFKqzs.roa (raw, json)
Hash identifier: Lrqenn10gzHpB5cLJyZvosNBimqrElNgycPdJnwN75g=
Subject key identifier: 02:34:35:F2:AC:45:46:3D:8B:F7:35:5F:32:E1:F1:56:71:4A:AB:3B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0D65
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AjQ18qxFRj2L9zVfMuHxVnFKqzs.roa
Signing time: Tue 29 Sep 2020 09:54:30 +0000
ROA not before: Tue 29 Sep 2020 09:54:30 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 123.195.0.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3429 (0xd65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:30 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=023435F2AC45463D8BF7355F32E1F156714AAB3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0c:8c:31:7a:62:40:fe:98:90:aa:9d:bf:a9:
a1:56:0d:f9:db:d4:57:b8:4b:ab:91:f5:98:ff:59:
2d:bf:9a:43:15:42:3a:95:82:32:25:2e:fb:b1:be:
17:68:ba:bc:ce:45:63:3a:35:e5:bf:2a:1d:2f:59:
6f:04:a7:ed:17:41:72:a3:a5:d7:56:c8:be:f0:8d:
ff:ed:79:aa:2b:e4:a0:a5:06:e1:ba:ab:d6:ba:2b:
32:8e:bf:20:4f:d5:23:37:9c:a4:8a:fd:2f:cb:8b:
3f:6e:22:69:97:e0:d2:c3:4a:6f:e1:6c:03:49:ee:
a2:48:0d:c3:ab:64:b1:bf:80:bb:23:50:de:76:b7:
77:ec:40:b1:66:7c:27:e5:b5:7c:e8:14:fa:87:46:
1d:3f:2c:2e:dc:6f:2f:f9:c4:d8:9a:a8:44:50:a4:
02:6b:91:26:02:a9:84:6e:b0:d8:81:50:c5:4b:9e:
b0:dd:9c:79:71:43:92:07:5a:3c:6c:ab:13:a7:e0:
6c:6e:0b:87:36:16:64:6d:8a:fb:d0:1f:6d:5f:15:
0c:4c:4b:12:4b:cb:8a:92:da:2f:df:48:7a:2c:e8:
61:05:c4:18:44:f8:51:51:da:16:07:bd:26:8c:c6:
15:20:ae:51:9d:53:e9:60:25:c5:1c:be:d1:d0:31:
2a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:34:35:F2:AC:45:46:3D:8B:F7:35:5F:32:E1:F1:56:71:4A:AB:3B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AjQ18qxFRj2L9zVfMuHxVnFKqzs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.0.0/19
Signature Algorithm: sha256WithRSAEncryption
52:5d:88:24:ec:e0:02:14:c9:97:51:11:3d:27:94:ee:a6:c7:
18:01:70:86:e4:9a:34:cf:4d:6d:9b:0f:73:64:92:3b:db:84:
b8:78:7c:6c:7d:b7:8a:1d:44:16:06:af:c5:41:b9:ad:99:56:
ff:58:cf:9f:aa:1f:27:82:41:1b:9a:e0:85:07:56:ed:da:48:
3c:ea:87:c9:17:1d:bb:bf:c7:fe:42:48:87:ec:c7:a0:cc:e3:
56:d3:bc:f7:c2:1d:09:2d:9e:f2:a9:b4:38:13:9a:24:54:cf:
5f:96:dc:ce:67:a6:c5:60:15:14:24:53:66:98:de:c6:f3:c7:
4a:65:66:7e:02:d6:06:bd:4e:c1:26:2d:fd:3f:d7:5e:16:22:
4d:44:d3:11:05:8d:42:4f:53:68:6e:eb:c3:a3:41:fd:92:76:
ba:5a:15:6c:ec:7c:4b:d8:de:19:76:1d:94:09:71:57:52:58:
da:44:53:67:ef:c0:f0:dd:ba:89:b3:0b:8f:f0:ad:82:e6:55:
6b:ec:32:10:9e:1a:45:0d:00:88:96:de:e3:57:c2:fa:88:34:
c0:6b:e0:05:c1:36:7d:11:8d:4c:24:c4:54:20:dd:fd:85:af:
97:6f:20:f8:07:1e:a1:77:28:8d:a0:94:49:fc:14:92:db:f0:
44:ef:1c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:11 2023 by rpki-client on console-ams.rpki-client.org