Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/G-bKkcVNX1Pw2aR5rY52Dl2xOwY.roa
File: G-bKkcVNX1Pw2aR5rY52Dl2xOwY.roa (raw, json)
Hash identifier: OJLqeKcEEJCCjMu3bUgGGIQvCOkczYAxPhYozboML80=
Subject key identifier: 1B:E6:CA:91:C5:4D:5F:53:F0:D9:A4:79:AD:8E:76:0E:5D:B1:3B:06
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0E89
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/G-bKkcVNX1Pw2aR5rY52Dl2xOwY.roa
Signing time: Tue 29 Sep 2020 09:55:50 +0000
ROA not before: Tue 29 Sep 2020 09:55:50 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.252.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3721 (0xe89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:50 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1BE6CA91C54D5F53F0D9A479AD8E760E5DB13B06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1f:b7:ae:90:77:bf:1a:ad:68:5d:9a:c5:aa:
7f:b4:5a:83:02:18:58:34:ea:ad:b5:cd:64:a6:97:
65:4a:82:b7:58:56:c1:57:6b:a8:3c:07:64:b6:20:
a1:3f:5b:f2:c6:05:59:c8:da:b7:66:d1:58:48:44:
65:d8:c5:9a:cc:f3:d3:78:b6:d8:5d:19:18:b4:ae:
bc:50:75:f3:12:78:6c:9c:0a:2f:72:81:75:38:1d:
69:9f:f8:8c:0d:72:3f:43:66:3c:af:f2:26:a4:90:
dc:1e:1c:c4:8c:e5:2b:a7:6d:d2:d8:11:02:45:c0:
8d:7e:09:99:96:33:4c:9a:4c:a5:62:4f:70:cb:aa:
16:90:c9:61:4a:1c:a9:47:f2:ff:19:99:0a:c8:8a:
d1:fe:9f:e5:84:57:27:61:ef:8a:99:3e:16:17:37:
11:26:7e:ad:60:98:2c:a0:a6:4e:92:35:5a:63:36:
fe:cb:1f:68:e2:71:c5:21:c2:1d:fb:e2:28:5f:bb:
2d:9a:12:52:e2:0f:88:6b:b6:61:18:4c:03:95:ac:
98:98:07:83:af:55:51:98:5b:12:a6:e4:cf:12:b4:
e8:e7:f9:c3:1b:c9:35:24:84:e5:05:2d:c1:87:e0:
9e:0e:19:8b:97:c4:b2:51:ca:ed:40:64:84:f8:4e:
7a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E6:CA:91:C5:4D:5F:53:F0:D9:A4:79:AD:8E:76:0E:5D:B1:3B:06
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/G-bKkcVNX1Pw2aR5rY52Dl2xOwY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.252.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:2f:2f:1e:e0:9b:eb:54:a9:f0:f4:78:2d:43:cb:78:98:69:
1b:12:f4:03:ad:3a:e6:da:02:5f:99:1c:38:2e:ee:07:3b:7c:
54:55:1f:12:9c:46:85:1c:40:85:f5:d9:d9:49:32:96:7f:59:
c7:6d:b7:9c:dd:f8:98:57:37:5c:8c:83:ab:b8:78:d4:c3:6c:
66:a6:00:a6:1a:e3:78:1c:f2:86:7e:ff:a4:f5:ee:2b:60:5e:
2c:04:7d:2e:4f:2c:98:80:81:64:31:8d:4b:d4:be:a1:c2:59:
d1:7b:b0:f6:b5:a5:a4:4f:d8:6e:d0:b9:cf:ab:59:e4:43:65:
94:2b:af:e7:15:2d:4b:1d:ed:6c:39:7f:68:8d:a3:45:01:1d:
24:3d:a9:8b:50:76:33:b9:1e:10:c0:f7:19:5c:1e:72:7c:f4:
e5:d1:fd:46:91:a4:59:ab:57:fa:11:68:a2:1d:3d:77:d4:6c:
da:dc:b8:2c:dc:5d:ca:3d:01:a8:dd:bb:1f:14:46:8a:f1:60:
92:31:e0:81:8e:52:c7:e1:86:77:7e:56:16:53:1b:0f:14:88:
c9:a9:86:0c:e8:38:4d:00:b4:71:6b:32:3a:01:cb:29:ab:9b:
2f:b6:ea:08:d9:2c:b9:78:c5:55:79:e1:e8:b7:16:e4:f6:33:
d2:a3:28:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:25 2023 by rpki-client on console-fra.rpki-client.org