Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Fe2wpei4vtg7Oo0dfunIR8ds1Jw.roa
File: Fe2wpei4vtg7Oo0dfunIR8ds1Jw.roa (raw, json)
Hash identifier: oynDQIuPSoEQTU+DRvD59FM0XmASxyMWLU2SBYX8mH4=
Subject key identifier: 15:ED:B0:A5:E8:B8:BE:D8:3B:3A:8D:1D:7E:E9:C8:47:C7:6C:D4:9C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0E20
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Fe2wpei4vtg7Oo0dfunIR8ds1Jw.roa
Signing time: Tue 29 Sep 2020 09:55:22 +0000
ROA not before: Tue 29 Sep 2020 09:55:22 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.40.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3616 (0xe20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:22 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=15EDB0A5E8B8BED83B3A8D1D7EE9C847C76CD49C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ef:3c:b4:48:05:90:82:89:10:bb:b5:23:29:
39:9f:b1:33:16:50:c1:ed:ed:fa:89:0e:98:ec:51:
e5:ca:cf:ef:d4:4e:de:b3:58:6a:e0:08:06:4f:6a:
22:63:73:c5:13:bc:ef:e9:2e:14:9f:d2:b7:81:b9:
f0:99:0e:a3:87:f5:c1:48:9d:99:99:77:1a:c0:cb:
69:9e:1b:e6:d2:c7:90:6f:26:0c:ea:22:d4:e4:6c:
a9:fd:23:c1:e2:42:19:0f:39:16:57:cd:77:dc:a5:
ae:8e:20:01:c9:33:1a:f7:ac:08:e1:fa:6a:b2:1b:
bb:99:6b:22:36:d6:57:e7:34:95:3a:cc:12:db:f5:
10:02:37:63:74:2a:63:b7:c6:0a:22:c3:24:f5:0c:
be:a7:97:13:1f:35:89:4c:ce:e0:15:49:a1:13:1d:
f1:86:66:93:2a:05:20:65:fa:8b:f0:0a:e4:7d:04:
3c:4c:8f:94:ba:9b:b0:e0:e9:2e:e0:a2:0a:88:81:
83:37:e1:4b:51:1b:60:05:23:6f:f8:23:0a:83:3b:
b6:8c:ba:30:6b:c8:e4:4a:2d:2d:b7:fc:73:27:45:
fb:c1:35:4d:3e:3f:0f:9d:b2:0d:98:2d:2e:1b:05:
1e:c2:f8:d4:90:17:73:24:5a:c0:2f:74:91:ea:e1:
6d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:ED:B0:A5:E8:B8:BE:D8:3B:3A:8D:1D:7E:E9:C8:47:C7:6C:D4:9C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Fe2wpei4vtg7Oo0dfunIR8ds1Jw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.40.0/22
Signature Algorithm: sha256WithRSAEncryption
63:cf:f0:e5:18:37:76:cb:4d:f7:7b:9b:59:e6:0d:d9:e6:c2:
bf:27:ff:13:36:ef:6a:5b:87:8d:ea:c5:5b:4f:10:e6:ca:35:
72:78:ad:e2:1a:96:82:9e:74:44:14:e8:b1:18:1b:84:59:9c:
5f:7a:04:ac:46:f8:75:01:0b:4a:f2:e4:30:9b:a9:e4:03:88:
49:a5:48:d1:6e:1f:ec:5a:76:96:48:52:7b:61:48:d5:a7:b6:
44:c9:e7:2d:2a:16:fd:e4:5a:54:78:2f:d3:c2:25:ae:67:41:
c8:e1:c1:cc:f9:35:8e:02:cc:4c:5d:d6:ee:0f:8b:c1:50:cd:
83:0c:35:91:94:f4:32:53:5d:2a:3e:5e:b4:a2:24:4f:6d:9e:
e8:02:e5:cc:25:c2:fd:00:48:1f:0f:af:48:c2:dd:55:25:4b:
4f:d8:0c:24:d3:1a:2c:ca:6f:73:92:ea:92:ae:7a:ac:76:d8:
4f:16:4d:8d:17:b7:11:47:9e:c4:da:1f:22:e9:60:ea:24:a8:
32:34:1a:a8:94:54:69:71:74:ad:c9:ad:09:6c:dc:ec:85:60:
7a:71:84:53:b4:df:f3:5c:4c:d1:48:18:df:40:2b:de:b2:98:
45:68:1b:b8:6f:61:22:dc:a6:f3:b6:e9:e6:82:ee:03:a8:1f:
95:a4:a4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:25 2023 by rpki-client on console-fra.rpki-client.org