Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IHSRqTGlojswsl-ffe5bmfnWpaY.roa
File: IHSRqTGlojswsl-ffe5bmfnWpaY.roa (raw, json)
Hash identifier: a768iikj93gsexqyuKwsAvES/mMQYfMVL4X+7JxGkzA=
Subject key identifier: 20:74:91:A9:31:A5:A2:3B:30:B2:5F:9F:7D:EE:5B:99:F9:D6:A5:A6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0E39
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IHSRqTGlojswsl-ffe5bmfnWpaY.roa
Signing time: Tue 29 Sep 2020 09:55:29 +0000
ROA not before: Tue 29 Sep 2020 09:55:29 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.178.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3641 (0xe39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:29 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=207491A931A5A23B30B25F9F7DEE5B99F9D6A5A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:05:fd:84:89:9e:86:20:79:ec:a3:90:c8:a2:
9e:44:3d:c7:0c:07:ba:c5:3b:e9:23:33:52:91:e8:
1f:ea:00:16:7f:27:43:74:e7:60:39:f2:26:89:48:
2e:57:e5:2f:41:16:30:cc:92:02:7a:54:c8:d4:e0:
1a:26:ee:7b:d0:3c:39:e8:da:be:d5:46:50:fd:6f:
0d:60:40:2e:82:61:23:b4:c0:67:0e:dc:42:8a:75:
2a:88:3b:09:e0:05:86:4e:4d:3f:39:ac:4c:a6:79:
2d:ba:37:0e:2e:df:c2:32:00:e3:c3:13:59:63:08:
26:e1:a3:fb:94:81:16:9b:3b:b1:f2:4e:fd:df:c9:
52:58:8b:27:cb:2e:10:d1:46:39:9c:1e:a7:07:d2:
dc:21:80:10:82:62:9e:96:2b:bc:f7:5d:5b:f6:36:
e7:7b:ef:78:93:22:25:33:d1:74:55:42:cd:80:76:
bf:fc:9e:69:aa:78:1b:cb:c0:81:f1:72:28:a2:c9:
1b:8d:86:1c:34:94:5d:43:82:c5:64:9c:23:c2:0e:
cb:0d:47:83:ae:8c:48:d4:08:fa:d1:cd:ab:4f:42:
cf:fd:d2:e3:0a:62:aa:1b:52:5b:75:7b:e1:33:95:
21:6b:16:95:46:b6:88:ef:40:a4:18:fd:a8:50:56:
7f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:74:91:A9:31:A5:A2:3B:30:B2:5F:9F:7D:EE:5B:99:F9:D6:A5:A6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IHSRqTGlojswsl-ffe5bmfnWpaY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.178.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:78:19:03:d2:5f:ed:e0:b2:75:12:f5:55:0e:89:e1:37:5a:
15:d4:6a:6c:2e:9f:f4:9d:d2:dd:80:d9:af:34:6d:ae:b5:6d:
62:ce:9e:fa:44:8e:e7:d2:24:b6:fe:ec:84:71:df:34:59:c0:
91:4d:41:f9:bb:a8:ca:20:bc:e2:24:50:47:cc:6e:73:41:7d:
0c:eb:3c:9c:7a:d6:d6:c8:50:53:df:fa:c2:6d:28:31:d7:1c:
a5:30:aa:fe:4c:51:ca:7f:3e:41:c9:bf:0a:3b:9a:81:73:ce:
32:0a:9c:a3:a9:2b:51:5c:6f:56:e1:d7:99:11:60:d4:04:25:
1c:9d:08:f8:8d:6d:9c:8e:12:d0:ae:e4:72:ba:9f:2d:15:5d:
29:9f:df:af:36:6a:fd:87:a2:fc:8f:25:37:d0:ec:75:21:65:
a6:78:e9:49:a9:6b:66:b8:23:14:5c:21:65:04:33:93:9e:ef:
a2:44:6d:33:c3:c3:ef:c9:4f:63:41:a3:d1:e4:ef:63:ff:fe:
10:c3:0d:a1:94:27:0c:c2:0a:13:60:e7:23:62:d8:1b:aa:6a:
ab:fc:20:a3:01:33:ef:70:fb:74:58:76:8f:b9:37:ea:f2:b7:
f6:4f:d4:8e:4d:aa:f9:d9:25:d3:cb:cb:37:3a:59:63:a7:eb:
69:23:4b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:25 2023 by rpki-client on console-fra.rpki-client.org