Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/G-rhPD6z7Dmd_ZOJsC4ENbi8MSo.roa
File: G-rhPD6z7Dmd_ZOJsC4ENbi8MSo.roa (raw, json)
Hash identifier: WpPbEbjg4i8u2Xw2pKPKBNcRyskpG1+quPGAdTuWQfM=
Subject key identifier: 1B:EA:E1:3C:3E:B3:EC:39:9D:FD:93:89:B0:2E:04:35:B8:BC:31:2A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0ECE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/G-rhPD6z7Dmd_ZOJsC4ENbi8MSo.roa
Signing time: Tue 29 Sep 2020 09:56:10 +0000
ROA not before: Tue 29 Sep 2020 09:56:10 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.192.64.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3790 (0xece)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:10 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1BEAE13C3EB3EC399DFD9389B02E0435B8BC312A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d1:f3:b5:99:23:5a:bb:6d:31:df:fb:42:2a:
d4:66:b3:e4:b2:c4:cf:09:fc:f8:86:45:9f:f0:30:
23:2c:21:82:0c:6d:a6:97:a2:8e:a3:b9:01:8e:22:
0f:f4:52:12:66:ce:2b:fe:0f:c1:9a:39:61:ba:87:
73:5b:8b:ff:40:9d:0f:39:69:71:ea:8e:70:f2:e3:
e5:e3:bd:e5:6f:22:0a:33:df:48:b0:c8:9c:f1:22:
6e:8a:2a:0e:f1:65:d1:03:59:eb:70:0e:75:7e:22:
c4:87:42:b8:8d:7e:30:54:67:3f:61:1a:f8:24:d1:
6c:02:52:08:a0:65:59:16:75:05:5d:0c:37:97:58:
8b:1c:52:bc:76:ab:05:36:37:3b:3c:7d:94:0e:db:
dd:98:7e:82:a1:a0:67:f1:c8:4c:9a:14:2a:c7:dd:
c8:10:b2:28:f3:ee:36:84:71:92:94:ae:18:a8:9f:
52:fc:36:ea:46:12:cd:c7:8f:30:cd:b4:26:59:fb:
af:9c:a9:dd:32:1e:cf:26:d0:2b:34:85:05:35:7f:
5a:34:e1:35:06:9d:dd:c9:97:62:19:9c:28:88:15:
da:1d:f9:9b:38:8c:42:91:0a:7d:3e:00:28:45:ec:
e6:19:7a:00:59:3c:c6:32:76:4c:7a:f2:b6:ce:a1:
36:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:EA:E1:3C:3E:B3:EC:39:9D:FD:93:89:B0:2E:04:35:B8:BC:31:2A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/G-rhPD6z7Dmd_ZOJsC4ENbi8MSo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.64.0/20
Signature Algorithm: sha256WithRSAEncryption
67:87:b6:fb:37:63:41:9e:d6:0a:54:46:b8:0f:bc:ac:1b:44:
d9:df:6b:58:a4:6e:5b:d1:8a:ff:6c:4b:c9:27:de:dd:ab:8a:
10:9c:74:47:7d:59:f8:8d:f4:8f:7c:bf:52:89:61:25:4b:e7:
61:83:e3:5a:2e:0d:11:76:3a:d9:88:57:e6:fa:39:3a:ee:ca:
65:7d:19:13:89:7f:db:8c:7f:07:e5:a7:2b:99:7c:f1:35:aa:
2e:06:84:a4:48:95:d7:28:ac:10:90:5b:05:6c:94:bd:b4:ab:
49:b9:05:e7:86:d8:81:ff:dc:3d:15:d0:23:57:b1:b0:dc:c0:
1f:9a:cc:29:c1:17:45:a1:aa:bf:6c:83:1b:67:f0:06:e8:58:
fd:7f:3d:0e:54:c2:90:24:03:f7:1d:de:9f:27:6a:8c:d3:3d:
ff:a9:33:e0:34:78:51:01:68:2e:81:84:6e:58:cd:f4:31:2f:
d1:5d:11:25:f4:ab:ce:69:aa:de:8b:61:2a:ac:d0:b7:6d:80:
ec:2a:13:78:37:a3:e1:b9:72:83:b7:75:c2:75:c0:11:0f:81:
96:2a:ca:97:ee:e7:81:a7:f5:7b:b4:71:a4:4e:84:9c:3a:cb:
56:bb:74:fe:50:26:1a:af:4b:67:4a:1e:c8:62:b3:c6:01:3a:
f1:20:ac:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:50 2024 by rpki-client on console-fra.rpki-client.org