Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/H-ZIeKjO7OtjEUkiF43XHUWFvXo.roa
File: H-ZIeKjO7OtjEUkiF43XHUWFvXo.roa (raw, json)
Hash identifier: PyZRkYhRHZOUh/5ZUt6dE1eZkJXavQzqFudtWGjnYbI=
Subject key identifier: 1F:E6:48:78:A8:CE:EC:EB:63:11:49:22:17:8D:D7:1D:45:85:BD:7A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0D27
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/H-ZIeKjO7OtjEUkiF43XHUWFvXo.roa
Signing time: Tue 29 Sep 2020 09:54:15 +0000
ROA not before: Tue 29 Sep 2020 09:54:15 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.192.44.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3367 (0xd27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:15 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=1FE64878A8CEECEB63114922178DD71D4585BD7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ad:1e:eb:0e:a5:e4:b4:eb:52:92:77:63:32:
10:34:05:12:81:f0:d0:c0:0f:49:bf:c6:08:c4:09:
3e:f6:f3:0f:7d:d9:8a:5f:c8:5b:df:70:39:ec:82:
d2:f7:59:bc:66:5d:87:c2:85:86:2d:c0:f6:5a:e0:
59:ce:c1:8a:77:b3:fa:98:f5:e0:b7:b9:77:36:89:
77:28:70:42:c8:00:cf:ee:28:9b:0a:a1:da:5e:ae:
84:bc:7e:2d:c5:70:4e:9b:d1:5b:5d:4f:74:17:5a:
3f:e3:52:48:c2:8f:33:4e:48:43:0b:be:89:4a:71:
50:60:5e:65:10:4a:e3:fd:d5:fa:bb:4c:9a:7d:16:
9f:dc:c6:e4:f8:9e:ab:60:74:43:d3:e5:87:0d:0b:
4a:14:9f:2a:f8:6e:47:ca:47:6c:5d:e4:fa:0c:81:
f1:c6:24:c8:f0:ac:03:28:0d:be:a3:39:f5:75:fa:
a0:3b:9f:2c:b3:b2:e1:d5:73:96:6b:59:a3:a5:7e:
23:6a:80:8a:5c:33:66:0f:1a:31:bc:ca:e6:3b:36:
1a:dd:55:74:3f:31:5f:9e:44:3c:4d:fe:a4:9a:b1:
58:0d:13:8c:20:d2:ab:9d:19:7c:6a:b6:3c:d2:25:
30:69:c4:44:f2:0c:db:24:42:6e:d1:12:b9:2e:e9:
38:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E6:48:78:A8:CE:EC:EB:63:11:49:22:17:8D:D7:1D:45:85:BD:7A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/H-ZIeKjO7OtjEUkiF43XHUWFvXo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.44.0/22
Signature Algorithm: sha256WithRSAEncryption
38:ef:de:6e:c1:35:b3:cb:d8:b8:22:35:55:3a:57:5c:21:48:
09:e0:68:23:13:5e:3f:ca:68:59:28:0a:6b:9e:c7:b1:65:1e:
8c:55:54:2c:41:4d:70:f5:dc:86:76:51:aa:3c:d6:76:06:0d:
7d:bb:71:5f:15:43:5a:61:09:5e:ab:46:29:b1:94:d2:69:1c:
af:34:b9:5d:36:76:fd:50:6f:e2:de:17:67:91:3a:11:28:53:
d6:c5:f6:25:51:12:a8:11:41:40:a0:0d:98:2b:d0:6f:bf:74:
5f:c1:ac:56:cd:e3:87:5c:5f:08:48:da:bd:b4:ed:84:aa:26:
fa:b9:c3:4b:18:59:1c:03:25:57:c7:b4:bd:d9:15:51:9a:a9:
f4:39:a5:d4:db:31:b6:f1:ec:f8:c4:34:97:f9:a0:f7:92:01:
e9:c2:67:1c:c6:84:89:85:95:c6:74:cb:63:d3:fe:29:84:69:
d9:42:ad:c2:3b:62:30:09:e2:04:45:79:24:3b:b8:2c:ce:7c:
68:38:66:30:9f:a1:e2:ee:c8:db:16:b7:a7:f7:8b:7c:ed:b5:
c4:60:1b:3c:6e:fc:37:0f:b7:d4:71:ba:b3:c5:54:29:07:f7:
62:7d:99:7a:b1:c0:1d:37:cb:ef:62:bd:87:70:03:9d:37:75:
ac:30:98:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:27 2024 by rpki-client on console-ams.rpki-client.org