Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GWJ4j4QN74B7Xom4ReQr84oaLpw.roa
File: GWJ4j4QN74B7Xom4ReQr84oaLpw.roa (raw, json)
Hash identifier: Wh6Ck5p+vTObFylxH8gCq5K9FbhvwcSxBF6xWPrIyQ4=
Subject key identifier: 19:62:78:8F:84:0D:EF:80:7B:5E:89:B8:45:E4:2B:F3:8A:1A:2E:9C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0E3E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GWJ4j4QN74B7Xom4ReQr84oaLpw.roa
Signing time: Tue 29 Sep 2020 09:55:30 +0000
ROA not before: Tue 29 Sep 2020 09:55:30 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.232.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3646 (0xe3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:30 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1962788F840DEF807B5E89B845E42BF38A1A2E9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:94:a7:fd:b4:ad:28:24:5b:01:5f:bf:cc:0a:
f7:85:95:f5:1a:42:ba:80:0a:b8:14:d4:fb:4a:85:
3c:72:df:67:e6:44:81:c6:2f:2b:a3:b1:14:b8:87:
b0:8f:48:74:48:74:2c:7a:1a:8b:8b:f0:a8:ad:fa:
9e:22:43:24:c5:f1:89:3b:6d:2c:0f:85:ec:69:c4:
c0:ea:ab:cc:bb:94:27:e4:75:f1:f1:d2:12:1d:ef:
b5:6b:4c:d0:62:28:b3:ab:dc:b1:4a:19:fc:b2:79:
99:5b:d9:c8:3a:1f:ef:5e:d9:ed:3b:93:0d:95:d2:
4a:b3:c1:cf:e7:b9:df:99:88:00:df:2d:22:49:53:
15:8e:f0:a5:8b:08:74:a0:06:a4:b1:af:7d:97:89:
c1:2e:b5:a7:02:6f:18:3a:92:88:ea:11:40:f9:58:
c2:40:fd:b8:52:7c:31:8c:98:ad:a6:dc:c6:2a:9d:
e5:19:58:37:b6:fe:99:8d:03:51:1e:d4:1b:81:fa:
c1:0e:93:a5:cf:e8:1d:9e:e6:91:dd:c9:77:52:fd:
dd:65:75:22:d2:e9:2b:92:5c:d8:5e:89:b2:8f:e0:
ef:de:ec:9f:5b:18:19:ae:b7:66:91:a0:b8:35:63:
da:e5:42:29:67:db:50:82:a8:41:f0:41:36:f7:b1:
d9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:62:78:8F:84:0D:EF:80:7B:5E:89:B8:45:E4:2B:F3:8A:1A:2E:9C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GWJ4j4QN74B7Xom4ReQr84oaLpw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.232.0/21
Signature Algorithm: sha256WithRSAEncryption
97:1c:55:5b:ee:08:9c:4a:f5:0d:54:06:9e:f3:12:bf:f0:5c:
4d:e5:75:6d:c5:37:cd:05:b4:22:15:b6:64:cd:5a:89:04:54:
48:f4:88:e0:12:a0:5c:eb:ce:6d:a4:83:21:f4:9e:44:e5:ca:
cf:35:21:06:f8:fe:8f:a6:1c:0e:df:d1:17:10:d5:d0:1a:bd:
7b:ae:98:26:ef:2a:09:23:1c:5d:77:70:30:68:a1:9b:ee:9b:
9a:2b:f2:92:67:96:be:5a:92:da:76:67:5d:48:40:13:79:f0:
4a:c0:94:b1:1f:97:60:87:e2:a3:43:ff:42:c0:c7:58:8a:85:
75:da:fa:42:c0:ac:f1:4f:8e:05:81:6d:15:fb:12:ff:fc:6e:
db:64:1b:57:d4:b1:2a:ba:5e:75:5e:cf:81:db:00:78:8c:67:
19:cf:ae:c7:6d:2a:c9:46:c0:ab:57:fe:7f:6d:da:f7:da:64:
85:97:c4:cd:79:35:20:20:50:23:bb:df:4f:ff:43:95:da:5d:
44:40:35:f7:8b:63:42:5a:21:51:0f:23:59:27:4b:f6:0d:b0:
18:33:30:7b:02:6f:f0:a6:ba:19:df:b6:ff:94:90:e1:d2:bd:
8d:31:08:fc:9e:75:48:d3:86:45:b1:3b:25:50:92:79:03:f7:
1c:4f:7f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:25 2023 by rpki-client on console-fra.rpki-client.org