Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Gbx1KWMSuNUPbOwX7yTVY8zz0ro.roa
File: Gbx1KWMSuNUPbOwX7yTVY8zz0ro.roa (raw, json)
Hash identifier: BKusNiP1tYqe1z/f+GCeNSewe0i158xCr5fDxhoQ7P8=
Subject key identifier: 19:BC:75:29:63:12:B8:D5:0F:6C:EC:17:EF:24:D5:63:CC:F3:D2:BA
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0F74
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Gbx1KWMSuNUPbOwX7yTVY8zz0ro.roa
Signing time: Tue 29 Sep 2020 09:56:58 +0000
ROA not before: Tue 29 Sep 2020 09:56:58 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.192.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3956 (0xf74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:58 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=19BC75296312B8D50F6CEC17EF24D563CCF3D2BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f2:26:44:a8:5d:b4:d5:ab:56:d9:4f:84:5f:
4b:ba:0a:e5:7b:dc:ba:64:d8:22:bb:4a:3f:10:97:
98:df:dd:2c:b8:98:b6:aa:48:a7:ef:35:8c:38:0a:
3f:ba:32:e4:e6:42:3b:c0:e6:a7:bd:ea:b8:d5:0b:
fd:f9:e2:a3:35:67:8a:67:59:b7:74:ac:d9:81:21:
f6:65:60:8a:07:db:57:f6:b7:1e:82:90:3c:14:45:
01:a1:df:ed:34:b4:32:2a:f2:00:75:aa:b5:a5:2d:
a8:16:77:39:9c:b0:24:c6:9d:5a:2c:83:05:b1:88:
98:8c:e2:d1:4f:0e:17:89:e2:ae:ec:af:fa:cb:ec:
a8:65:1e:65:39:19:98:3f:18:39:af:69:06:8e:4e:
9f:43:e1:db:80:45:e8:6e:c7:c0:de:71:65:a2:37:
44:fc:03:69:2a:0e:ae:e5:5e:84:19:fd:b4:7b:01:
02:de:54:97:a4:39:2d:a7:fc:d8:c5:91:26:b4:5f:
70:6f:a8:cd:0f:4c:ea:5d:97:07:fd:5b:bf:b4:5e:
d2:cb:03:59:9f:60:02:59:84:fa:1c:45:bf:7c:28:
77:5f:46:fe:32:ef:96:9f:f6:4b:5b:ce:4e:f9:3a:
97:fc:d1:0d:79:df:94:f1:d7:b5:6a:ee:16:fc:5c:
4d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BC:75:29:63:12:B8:D5:0F:6C:EC:17:EF:24:D5:63:CC:F3:D2:BA
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Gbx1KWMSuNUPbOwX7yTVY8zz0ro.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.128.0/20
Signature Algorithm: sha256WithRSAEncryption
57:a6:2e:a7:06:8d:4a:cf:6e:98:6b:55:11:61:a8:84:ec:ed:
39:84:27:0c:30:70:f6:12:74:67:5e:3f:b0:23:b1:a0:86:db:
9c:27:c6:93:87:06:7d:b2:b0:9e:ba:16:98:14:2e:91:d0:b6:
cd:80:44:e6:c3:2a:9e:29:18:6e:c2:ef:91:c1:2f:12:0c:36:
3c:6b:32:19:2d:a0:0c:c7:bf:8c:b8:a6:ef:6c:af:1b:ad:a7:
f4:51:63:9c:40:4e:06:ba:16:e0:23:4c:a8:f8:59:7c:a4:41:
1d:62:79:ec:4d:8f:22:50:53:f5:aa:5c:5a:90:bd:ef:62:a0:
93:a9:0c:3a:37:4e:60:42:36:c3:56:b1:64:ee:70:04:2d:31:
62:a0:52:df:21:59:11:ff:c6:95:6b:73:a9:06:39:33:38:ca:
b0:b8:e1:ec:cd:43:01:1c:22:63:bb:47:50:10:ae:e1:2e:95:
67:66:07:89:92:c9:46:8d:36:85:59:46:c8:cf:19:ff:4b:13:
ab:61:e5:6b:4a:37:56:0f:c7:1c:3c:8d:90:bf:3d:4d:d0:d7:
13:03:90:8d:81:07:58:e9:30:96:6d:51:79:b8:4c:97:27:3a:
cd:1a:5f:83:ed:20:ad:d0:0c:c1:30:ae:86:68:d4:29:63:5f:
37:de:eb:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:50 2024 by rpki-client on console-fra.rpki-client.org