Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C1VOyXT6lYimYaFu94CkfLh7HyM.roa
File: C1VOyXT6lYimYaFu94CkfLh7HyM.roa (raw, json)
Hash identifier: LmxwiZ6dAAWRCZGmC23muotlwGKeMnL0rhoAOL+N3+A=
Subject key identifier: 0B:55:4E:C9:74:FA:95:88:A6:61:A1:6E:F7:80:A4:7C:B8:7B:1F:23
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0F40
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C1VOyXT6lYimYaFu94CkfLh7HyM.roa
Signing time: Tue 29 Sep 2020 09:56:42 +0000
ROA not before: Tue 29 Sep 2020 09:56:42 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.192.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3904 (0xf40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:42 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0B554EC974FA9588A661A16EF780A47CB87B1F23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:18:30:a6:b2:4f:18:aa:07:48:21:49:39:01:
c9:f5:91:b0:c7:30:92:a8:1a:fa:33:6e:fd:d4:7b:
a4:d8:63:fe:40:ed:87:e0:8a:80:a9:5e:e5:5c:1a:
3e:de:b1:6f:a4:52:15:49:3c:b5:e3:a5:d9:30:51:
64:51:bb:f5:5c:73:80:b5:6b:e6:ee:3f:17:be:c1:
61:e1:b7:3e:c5:5e:43:ff:ff:59:9b:7a:6a:9c:b1:
87:f7:cf:38:41:38:aa:01:12:12:ad:db:5b:4f:01:
6b:4b:ef:6b:62:fb:fe:1d:7d:d4:5a:fd:1d:d9:2a:
30:b1:aa:6d:f6:da:da:0c:66:57:44:6b:e5:a6:07:
8a:85:94:d1:61:c2:cf:04:bb:5c:16:20:98:2f:20:
22:1f:1b:aa:54:f5:85:39:49:e6:3b:0d:ad:f1:ef:
d0:ea:11:ae:eb:9a:34:28:ea:19:6d:77:d5:da:0a:
fa:76:4a:df:68:1c:92:02:a9:ca:a6:e6:5f:8a:fb:
3a:8a:a0:aa:c4:ea:d4:68:26:f8:5b:b0:48:5b:db:
8c:c6:33:bf:56:ac:b5:5a:b2:59:ab:db:25:8c:46:
f6:6c:3f:4e:0d:f8:4c:de:68:02:f6:aa:68:18:a7:
95:c1:86:98:bd:c8:d1:3c:35:fa:fe:41:c9:aa:6d:
4d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:55:4E:C9:74:FA:95:88:A6:61:A1:6E:F7:80:A4:7C:B8:7B:1F:23
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C1VOyXT6lYimYaFu94CkfLh7HyM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.48.0/20
Signature Algorithm: sha256WithRSAEncryption
6f:25:9f:d5:8b:53:32:49:0c:e4:32:0b:ff:84:db:70:c6:be:
9d:9a:b1:6e:9f:4d:97:45:c5:8b:6b:6b:8a:14:a1:9b:dd:99:
a1:c8:75:e6:3e:d9:22:46:19:0b:6c:a1:cd:05:19:45:7a:02:
ad:ad:4d:0f:5b:ff:0a:cb:a5:6e:13:a4:6d:5f:4d:03:59:9f:
cb:33:6f:c6:18:dd:5e:2c:41:f1:c2:90:da:6d:ee:78:cb:1e:
15:57:71:89:0b:eb:c1:30:7e:2b:4b:ec:74:07:c0:e3:33:f8:
3c:b8:86:b1:2d:b5:da:f4:af:62:31:02:a6:fd:78:43:21:21:
b5:85:91:7b:46:2e:10:f8:67:2f:72:ae:6b:19:a5:72:63:4d:
b1:8d:3a:3e:4b:10:e4:ba:f4:48:68:30:e1:ff:8b:4f:6d:49:
c6:f9:f1:92:7e:ac:1f:0c:a7:d2:53:b7:ce:15:54:bc:d4:24:
88:b6:06:36:72:e0:ca:0c:d2:50:37:f6:b1:99:56:64:1d:35:
da:bc:36:d4:11:d9:96:ec:a9:42:c7:81:ad:51:d7:8b:41:d1:
58:cf:3d:c0:b6:d9:b5:58:c1:7d:8c:3f:65:2b:66:62:bf:4a:
1e:96:7c:a5:d1:ef:b7:6d:c8:38:bd:e5:b1:b3:25:25:45:55:
3e:ee:67:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-fra.rpki-client.org