Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GztgKf7s3pJffV35A4hFdLtutZw.roa
File: GztgKf7s3pJffV35A4hFdLtutZw.roa (raw, json)
Hash identifier: 0GlIYvXW4dsDtLWeh4jKzHtdieC0dw6QCXmXBwSw7MM=
Subject key identifier: 1B:3B:60:29:FE:EC:DE:92:5F:7D:5D:F9:03:88:45:74:BB:6E:B5:9C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1605
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GztgKf7s3pJffV35A4hFdLtutZw.roa
Signing time: Sun 07 Feb 2021 12:07:51 +0000
ROA not before: Sun 07 Feb 2021 12:07:51 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.238.0/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5637 (0x1605)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:07:51 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1B3B6029FEECDE925F7D5DF903884574BB6EB59C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:49:9b:b4:2b:cf:10:0c:96:40:29:fd:7a:78:
dc:69:3b:1b:e9:90:fc:a5:ec:30:70:3a:de:a3:06:
be:2b:63:d5:af:27:28:e4:28:ce:4c:57:84:5a:ac:
e4:4c:be:0a:dc:f7:5d:9e:2e:ae:2a:19:ca:07:b6:
85:38:c0:7d:db:80:38:ac:b9:fe:5b:63:60:82:65:
7d:ed:82:4e:92:e8:8e:d3:f0:d8:b4:cf:3a:71:ed:
9c:d6:55:92:32:d8:78:bc:52:77:ba:62:c5:83:30:
40:55:0f:57:eb:2f:fb:b3:1f:3c:9e:77:ed:d9:96:
d8:6c:81:3d:63:bd:f3:6a:b5:b8:fd:d7:2e:fa:c8:
8d:7e:fb:24:9f:ea:32:81:7f:d8:c4:de:81:83:35:
4f:ef:74:4e:91:56:09:9a:d5:5a:f5:17:42:ea:55:
32:0c:17:cb:dc:41:61:88:59:43:ac:4d:22:e6:8b:
c3:df:eb:9d:e3:23:16:89:b2:39:73:26:54:45:55:
6c:34:d0:56:8c:68:e1:2a:ed:f9:ad:fa:e0:ae:b0:
aa:6f:b6:6a:84:20:a0:ff:fa:ab:45:d0:28:79:55:
41:e0:5b:a6:64:50:97:aa:7b:5d:db:b4:63:d7:75:
9d:7d:c3:d0:fe:8c:ac:03:83:5e:17:67:a1:5b:b1:
48:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3B:60:29:FE:EC:DE:92:5F:7D:5D:F9:03:88:45:74:BB:6E:B5:9C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GztgKf7s3pJffV35A4hFdLtutZw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.238.0/25
Signature Algorithm: sha256WithRSAEncryption
4e:4a:3e:e6:3f:de:05:a0:f3:e1:0c:bd:7d:44:f6:b9:80:a9:
15:9d:af:7b:c8:5b:8f:21:ca:54:8b:06:51:8e:8c:bf:58:25:
07:56:cb:02:4f:4f:b3:dd:27:2d:f5:75:1a:fd:53:b3:c8:33:
b7:37:ec:66:7c:a4:31:85:6e:7d:cc:ef:80:18:3b:ec:be:0c:
dd:07:f6:e0:c6:58:d0:27:f2:60:cc:9c:72:6e:3a:26:24:c0:
15:b4:22:81:25:12:c3:49:71:be:87:7a:5f:0c:d8:0c:3b:11:
6e:57:41:70:c6:b3:a7:e7:01:7e:f2:fe:bb:c1:3e:93:74:ca:
f3:67:42:06:d3:25:60:55:d0:59:8e:da:38:a1:38:40:eb:9e:
46:5d:8f:76:86:33:39:b4:5c:2e:5c:93:6c:c9:b9:bd:9c:bd:
a0:f5:af:31:70:08:63:ab:72:e7:44:49:f6:19:49:c9:47:c8:
52:6f:46:4a:fc:9f:c1:f9:03:ec:de:53:a0:82:cd:e0:cf:29:
8a:c1:ad:38:f0:8d:9d:0e:1c:a0:e9:c8:94:49:9a:5d:72:65:
d9:2d:7e:24:05:45:f1:41:01:aa:d6:cf:bd:a3:7e:01:07:7f:
f4:e1:88:34:99:48:d9:6d:1b:37:20:8e:76:0f:79:ba:e2:b1:
60:e4:78:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:27 2024 by rpki-client on console-ams.rpki-client.org