Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DhQhnSPzYTS2TGwU5GIvuPoepgE.roa
File: DhQhnSPzYTS2TGwU5GIvuPoepgE.roa (raw, json)
Hash identifier: 53WdmvzBhoV2PwomR1slSr5J3idoo6zow4yGNwd2V9M=
Subject key identifier: 0E:14:21:9D:23:F3:61:34:B6:4C:6C:14:E4:62:2F:B8:FA:1E:A6:01
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0EEF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DhQhnSPzYTS2TGwU5GIvuPoepgE.roa
Signing time: Tue 29 Sep 2020 09:56:18 +0000
ROA not before: Tue 29 Sep 2020 09:56:18 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.193.48.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3823 (0xeef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:18 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0E14219D23F36134B64C6C14E4622FB8FA1EA601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:af:6e:73:28:9c:2a:92:c3:15:c0:22:b2:fd:
b0:25:c0:b9:79:4b:b3:5e:ec:ca:b2:83:62:62:8c:
98:c5:74:9b:31:11:ac:44:e4:01:8f:1f:75:90:86:
df:c6:fa:8f:a6:3b:b9:cc:c3:2c:21:af:55:03:37:
4f:9d:5b:fb:70:4d:4b:ce:e8:8d:ae:d2:ca:72:71:
6b:45:74:e8:19:fd:72:ba:9b:4d:c4:83:62:d4:3c:
e3:70:30:1f:ec:f5:16:0b:ce:6e:8e:43:8c:d9:1d:
fd:5e:30:f6:84:8c:43:a8:5e:35:4b:96:d1:94:3c:
30:2c:d1:5a:c9:be:c0:b7:5f:28:e7:d0:69:56:6b:
21:9c:c3:12:69:e5:5d:2a:89:55:b5:89:c4:ee:69:
a4:a5:b5:cc:74:43:b8:58:2c:05:f9:b5:a2:db:47:
d2:40:1e:d0:f4:d2:a3:a1:6c:d6:3d:13:b3:74:54:
dc:fc:58:c5:c0:fe:47:02:43:5c:6c:1a:e3:3c:75:
ab:aa:1c:3e:b5:02:d5:4a:8b:52:15:dc:61:90:00:
5b:a2:1d:29:ac:a7:03:42:48:24:52:f4:2c:5f:3a:
dc:75:82:64:45:9e:11:9e:60:03:f0:fe:3b:63:9e:
80:5a:7d:77:20:84:49:f2:6a:5f:a6:07:37:ec:24:
dd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:14:21:9D:23:F3:61:34:B6:4C:6C:14:E4:62:2F:B8:FA:1E:A6:01
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DhQhnSPzYTS2TGwU5GIvuPoepgE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.48.0/20
Signature Algorithm: sha256WithRSAEncryption
ad:06:52:05:ec:bb:dc:86:9a:bb:4a:55:10:29:38:df:e6:aa:
82:2a:c4:75:ea:7c:4e:4d:51:39:0d:da:2c:d5:e9:4e:75:eb:
1c:ec:e0:79:46:4f:49:5c:1b:22:26:8e:e7:92:85:04:3f:06:
af:53:59:9b:e1:27:e3:7e:45:ca:8e:09:41:d3:0b:fc:42:ad:
8d:bc:d9:04:cb:cf:0d:6f:90:0d:01:ef:58:ca:15:b9:15:14:
92:52:4b:f3:a8:f6:7d:b4:c3:86:8e:41:af:f6:7d:17:05:11:
0c:48:dd:68:88:a5:d5:dc:bc:54:48:2c:1d:4e:be:0b:7c:f1:
03:8e:31:c3:a8:19:9a:29:e6:88:89:97:ab:7e:c1:c4:f5:af:
f6:7b:ac:51:d2:b6:f0:8f:7d:d5:12:62:13:ab:d4:96:98:2e:
a1:ac:24:7f:98:6e:33:84:5a:9f:27:f0:20:a1:72:eb:35:7c:
87:83:63:96:c9:aa:a1:aa:d0:58:af:99:09:99:2a:33:75:5b:
5e:0a:e1:e9:70:76:c6:90:10:8c:25:64:83:f3:df:4d:dd:5c:
69:e1:0c:94:12:a9:24:b1:15:f2:f0:6a:23:17:09:61:60:0c:
b2:63:13:d9:6d:7c:8f:82:15:a7:89:97:72:cd:51:cb:df:49:
29:b9:18:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:26 2024 by rpki-client on console-ams.rpki-client.org