Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Jd-zPaQ7cGoPmxKO85uwdW8MKDY.roa
File: Jd-zPaQ7cGoPmxKO85uwdW8MKDY.roa (raw, json)
Hash identifier: m8jNJDdxG6qWUZGRYlIiyhlN8IxglaB1UjiwoZgTFlM=
Subject key identifier: 25:DF:B3:3D:A4:3B:70:6A:0F:9B:12:8E:F3:9B:B0:75:6F:0C:28:36
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1607
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Jd-zPaQ7cGoPmxKO85uwdW8MKDY.roa
Signing time: Sun 07 Feb 2021 12:07:54 +0000
ROA not before: Sun 07 Feb 2021 12:07:54 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.238.128/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5639 (0x1607)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:07:54 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=25DFB33DA43B706A0F9B128EF39BB0756F0C2836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b8:5a:d4:56:80:cd:ca:95:2f:c2:20:45:c4:
71:21:3f:0a:fe:5e:4a:7d:a9:4a:0d:f5:bb:fb:ea:
90:32:64:84:3c:fd:11:96:55:35:79:14:67:6d:b4:
b8:03:ab:7f:5f:76:4c:3a:ea:3f:3e:ec:a9:9e:9a:
94:92:ab:16:75:1c:70:b9:69:25:34:d9:b1:31:85:
87:6c:f0:d6:8d:ef:d7:b1:f5:df:90:34:85:38:f8:
06:6d:24:4c:57:63:4a:c8:cd:53:42:0b:23:dd:7e:
da:32:60:18:e0:49:ee:1c:a3:50:5d:17:4a:e4:5f:
42:97:0e:cd:e6:29:4f:ac:41:1c:3f:ff:de:12:98:
ab:bf:fa:f1:47:e6:9a:69:cd:78:d6:10:3f:c6:63:
e3:9b:54:75:f3:88:a4:2a:b2:ac:9a:4e:4e:10:9e:
ca:a7:02:9b:10:7f:2c:e8:ed:e6:f4:bb:77:ee:cf:
11:49:e3:3e:af:8f:b7:b4:46:e6:55:35:1f:f2:d7:
95:2e:3a:0f:91:5a:0a:9b:d1:35:5d:a3:07:d1:65:
40:14:d6:93:ef:5e:b6:9e:65:35:b5:33:d1:5a:ce:
88:6d:a6:89:68:66:ba:09:ee:81:8f:51:8c:64:a8:
0a:39:b5:fe:1e:cb:0f:f8:47:05:2f:59:46:70:47:
0b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DF:B3:3D:A4:3B:70:6A:0F:9B:12:8E:F3:9B:B0:75:6F:0C:28:36
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Jd-zPaQ7cGoPmxKO85uwdW8MKDY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.238.128/25
Signature Algorithm: sha256WithRSAEncryption
00:1a:7e:8d:32:48:aa:1d:fc:f5:72:7c:d7:7c:38:61:d0:27:
f9:6b:da:a0:1b:25:d2:2d:47:b1:32:b4:fb:3c:99:f9:45:6e:
86:fd:34:c5:14:e0:f5:fc:ad:be:ca:81:0d:fe:61:d4:ae:9b:
f1:ed:ec:cc:88:59:d2:bc:be:be:7c:8c:48:9a:a3:1a:2b:3f:
59:53:fb:10:20:ab:b9:91:0c:70:eb:91:01:07:d5:60:8d:5e:
fa:ab:9d:48:80:ea:f2:3f:5f:f5:b1:13:55:b8:0a:6b:7d:cb:
c1:10:c2:1d:f7:1e:fb:99:8f:c1:48:44:61:d7:16:ca:36:18:
33:8e:57:f8:8a:79:62:e8:a7:8f:f1:9d:d4:57:77:d0:80:dd:
61:a9:03:e4:fe:f3:4e:3d:11:14:b1:3b:ec:0a:8f:2b:cc:da:
05:17:34:9e:22:5f:f8:55:88:ea:60:84:1c:d5:d2:a4:8f:7b:
c8:a6:b5:d3:d9:0c:24:4a:a0:b8:c0:91:e1:44:83:9c:0f:37:
98:28:13:c3:e6:55:fb:d6:71:31:53:4a:ad:b8:11:02:2a:eb:
25:4c:51:00:42:7d:9f:79:3e:ff:e8:84:cb:7f:6e:d7:f5:42:
dd:2e:ae:55:f1:d5:58:37:81:0b:65:6f:4b:59:e0:71:b4:0a:
f0:14:72:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:50 2024 by rpki-client on console-fra.rpki-client.org