Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DySZG_UdA9VoOg0uOU5P9plg80g.roa
File: DySZG_UdA9VoOg0uOU5P9plg80g.roa (raw, json)
Hash identifier: 7jc7MXJV31Anm9geD7mqIvtpgzTYFvIaoXCdtf7qK7g=
Subject key identifier: 0F:24:99:1B:F5:1D:03:D5:68:3A:0D:2E:39:4E:4F:F6:99:60:F3:48
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0D38
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DySZG_UdA9VoOg0uOU5P9plg80g.roa
Signing time: Tue 29 Sep 2020 09:54:20 +0000
ROA not before: Tue 29 Sep 2020 09:54:20 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.193.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3384 (0xd38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:20 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0F24991BF51D03D5683A0D2E394E4FF69960F348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ba:4f:32:39:90:bd:4e:5e:6c:43:8e:01:cd:
ce:09:cc:75:52:79:c0:72:a4:5b:53:c0:d3:05:f2:
1a:59:80:43:a0:ec:42:ad:3e:a8:46:8d:c3:33:63:
f6:99:77:17:c9:ab:2c:4f:5f:9d:eb:20:ca:8e:b3:
a1:5f:60:1a:2a:03:7b:a6:8d:d6:63:b6:d8:ab:06:
b9:9f:ce:c0:23:a5:ae:d9:2c:a2:70:87:29:44:54:
28:e5:de:1d:0b:b3:64:7c:f9:b2:43:37:6d:59:8b:
05:a6:49:45:35:de:47:9b:e8:97:a9:0b:6d:25:c3:
30:dc:bd:3c:ef:0b:b4:c6:fc:45:0e:58:52:b1:8f:
e7:c0:09:83:84:35:f4:46:3d:8e:22:b5:1d:9d:f9:
49:da:ed:1f:76:3c:1c:56:21:bb:d0:c2:c7:a2:d1:
82:16:1b:c6:b4:5f:fa:3a:06:de:05:0e:da:e6:ea:
20:54:2b:fb:bd:6d:84:ad:fd:62:43:d2:f4:f2:35:
73:4c:ec:ea:7c:15:40:26:82:53:2c:4f:69:30:b0:
b4:c5:d5:f0:a0:22:55:43:9f:1e:18:2d:b4:c8:66:
d1:42:a9:8f:b4:c7:b7:01:ca:33:06:1b:57:4f:1e:
fd:c2:0f:a4:a1:37:92:08:bf:ce:eb:46:10:16:3f:
30:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:24:99:1B:F5:1D:03:D5:68:3A:0D:2E:39:4E:4F:F6:99:60:F3:48
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DySZG_UdA9VoOg0uOU5P9plg80g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.95.0/24
Signature Algorithm: sha256WithRSAEncryption
01:2c:3f:a5:51:d3:8e:06:da:f2:5a:f5:28:01:f7:cc:1f:3a:
13:8e:f3:2f:a0:53:ec:d0:ee:22:6b:53:cf:45:cf:c2:d6:1f:
25:e9:0d:22:13:c0:05:91:86:f6:7b:7b:d8:14:3a:df:e0:9d:
5d:ca:37:d6:f2:bf:e7:ba:c0:25:f6:21:6f:4f:fb:0f:53:34:
d5:8f:53:3e:6c:be:a5:d6:23:78:1a:1c:c6:86:b9:39:e0:7b:
e4:c4:8e:a2:c6:f9:16:2c:18:0e:b5:a4:26:51:20:d3:76:55:
1f:77:6c:50:e2:c5:7b:25:a0:1f:cf:99:d6:88:3f:00:d3:23:
9b:b7:2f:74:90:4f:88:f9:96:77:cd:82:6a:f3:9e:66:a3:54:
66:3b:c7:73:1f:69:a9:64:1e:02:78:aa:17:6c:2f:31:f0:cb:
de:5e:e3:4c:e6:2e:ac:c8:8f:77:99:17:f1:0a:e3:14:44:74:
56:cd:1c:b6:81:7a:57:92:e2:ab:04:0e:de:9f:02:72:ef:01:
f9:8d:41:f4:8b:5e:c5:fd:23:c7:ac:40:e2:96:9f:2f:e7:01:
0b:50:da:ab:24:a7:65:63:33:c9:c1:68:55:0b:f1:72:0d:71:
6f:95:11:1d:dd:07:74:aa:aa:02:78:28:71:f8:4c:b4:87:61:
f7:ac:fb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:49 2024 by rpki-client on console-fra.rpki-client.org