Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DthBXZSFUfDlvF2CbpbH5VnOwXQ.roa
File: DthBXZSFUfDlvF2CbpbH5VnOwXQ.roa (raw, json)
Hash identifier: TLLmxVX+6DEqZDs5QEbL1rq53hHtN5QNo/oudJaP4As=
Subject key identifier: 0E:D8:41:5D:94:85:51:F0:E5:BC:5D:82:6E:96:C7:E5:59:CE:C1:74
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0F69
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DthBXZSFUfDlvF2CbpbH5VnOwXQ.roa
Signing time: Tue 29 Sep 2020 09:56:55 +0000
ROA not before: Tue 29 Sep 2020 09:56:55 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.20.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3945 (0xf69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:55 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0ED8415D948551F0E5BC5D826E96C7E559CEC174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e2:42:69:a9:35:b2:eb:ca:9e:07:a2:07:5a:
4c:30:40:f4:8f:25:4f:6a:3a:c2:1f:e2:c0:c2:89:
1d:6d:ae:43:70:8d:e7:23:a9:f6:67:68:e3:16:e7:
5f:87:ab:0d:6f:83:04:60:2d:07:e0:3b:d8:cc:b2:
d1:20:4e:d2:54:52:20:42:4e:80:43:f8:8c:23:0f:
49:0a:8c:0f:8a:af:13:13:94:ad:af:63:35:15:a4:
92:d9:5f:c5:1a:d5:68:5c:f0:40:88:9b:69:7b:82:
f1:48:64:df:0f:85:76:31:64:ea:b6:ad:9d:dc:56:
6e:3a:4c:64:1f:7c:a4:b8:c3:da:bc:d5:ba:13:8e:
5c:e5:1a:cd:34:3c:d0:5a:77:1b:d7:16:18:a9:fd:
db:db:69:37:2b:8c:db:c1:0e:12:30:79:98:e3:e5:
35:55:6b:0e:fe:0a:c0:3e:62:8b:34:c2:1e:d6:7a:
98:52:01:cd:e7:bc:3b:b5:3e:41:e5:73:98:1e:1e:
2f:be:0c:f7:54:69:e0:d5:9d:3b:13:7a:49:d4:e8:
08:ed:ab:39:a7:84:b3:b9:1e:18:0f:37:94:35:30:
0c:97:22:32:08:3b:ef:b9:b1:e7:2f:7b:65:91:45:
5f:27:da:19:29:29:b5:1d:87:f4:55:06:fa:08:cb:
34:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D8:41:5D:94:85:51:F0:E5:BC:5D:82:6E:96:C7:E5:59:CE:C1:74
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DthBXZSFUfDlvF2CbpbH5VnOwXQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.20.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:ae:ca:29:9f:d8:04:76:78:7e:61:e4:5a:87:31:db:9a:fb:
9e:4c:f1:7a:af:95:d6:f6:c2:43:45:cc:0a:d1:56:7f:ee:09:
88:f9:03:3c:73:41:5a:8c:2e:75:2e:7b:3e:c5:e1:27:66:f2:
ca:9e:4c:c7:a8:01:f9:9d:b2:6e:67:b7:f4:ec:a1:e0:18:e6:
e6:5c:75:29:64:78:47:09:ee:8b:1f:bf:2b:b9:ea:7d:dd:ae:
8d:96:7b:32:79:28:40:b0:dc:50:52:ec:1c:b8:9a:e6:57:1a:
73:31:b7:0b:f3:30:01:29:8a:99:65:0e:f5:a9:8e:d1:5b:e3:
ce:cb:8b:5b:d9:30:42:1b:6e:4a:a0:ab:b7:5d:49:5b:9e:29:
79:9f:3e:ea:89:8c:62:97:d8:8e:b8:48:7c:00:1f:bf:04:91:
9b:79:be:13:bb:c3:f4:a5:cf:fb:48:65:b4:4b:12:be:60:70:
a7:b7:0f:63:71:f1:2f:66:43:73:54:7e:ff:fd:fd:c4:fc:ff:
e9:e7:f6:9d:e3:a6:48:a0:e7:a0:d8:dd:10:41:9e:d9:59:d0:
48:ce:50:8a:b0:1c:41:ef:b3:e8:60:9e:fc:b7:bd:58:e1:a8:
30:50:7e:63:5a:97:75:9e:fe:fe:9d:cc:62:5a:cc:5c:1a:12:
e3:b2:6c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-fra.rpki-client.org