Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KbVlFwUhHvDGViqz7wCVQpr67Ms.roa
File: KbVlFwUhHvDGViqz7wCVQpr67Ms.roa (raw, json)
Hash identifier: HCg9beSOnKD8gXnYufOzA3baTF15+BLwGHv2tR+dSMI=
Subject key identifier: 29:B5:65:17:05:21:1E:F0:C6:56:2A:B3:EF:00:95:42:9A:FA:EC:CB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0EE6
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KbVlFwUhHvDGViqz7wCVQpr67Ms.roa
Signing time: Tue 29 Sep 2020 09:56:16 +0000
ROA not before: Tue 29 Sep 2020 09:56:16 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.172.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3814 (0xee6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:16 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=29B5651705211EF0C6562AB3EF0095429AFAECCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:67:34:b1:d9:2e:24:53:0d:8c:57:8d:85:cd:
02:48:c2:0b:4a:91:f8:37:94:76:5d:dc:69:76:66:
07:4f:e9:ab:d6:9b:3b:0a:bb:ab:03:25:79:20:a3:
8b:34:3f:e5:16:0b:cd:6b:d4:75:f1:59:8e:02:a2:
ff:36:a4:b8:9b:c6:13:75:c7:cc:67:1a:4b:88:0f:
54:8f:6f:5e:ce:7e:d1:36:5b:3f:e2:76:65:c7:27:
59:f5:a5:d2:6b:c8:31:4f:51:b4:74:c2:bf:14:79:
53:84:11:4c:e0:a5:b1:fb:8f:82:88:c4:1b:c1:92:
6b:8e:27:44:ff:d0:2d:f1:12:3a:c1:9c:01:7f:97:
9c:df:d7:a7:e4:f8:b8:55:09:45:66:bb:c7:eb:7e:
eb:77:df:ce:70:23:1d:b3:fa:08:13:37:c0:89:26:
23:9e:16:ed:c4:12:5c:f2:65:7c:b1:aa:c6:b2:c7:
ff:ce:65:c1:7d:4e:5c:2c:61:11:9b:74:d5:72:37:
3e:c4:4d:3d:fe:fa:2d:d3:d5:c5:fd:70:15:3d:96:
f5:88:cd:a1:06:aa:6f:63:d8:87:72:bf:38:b7:c8:
21:53:e7:4b:46:8f:0b:f9:62:96:35:c1:1a:c8:3e:
20:26:08:96:3e:c8:1c:e8:a5:55:53:61:d4:bf:14:
2b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B5:65:17:05:21:1E:F0:C6:56:2A:B3:EF:00:95:42:9A:FA:EC:CB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KbVlFwUhHvDGViqz7wCVQpr67Ms.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.172.0/22
Signature Algorithm: sha256WithRSAEncryption
39:85:7a:10:86:0b:2c:6a:8e:3a:49:49:f7:59:27:50:a1:be:
69:cb:49:cc:69:d6:73:98:29:5a:ae:a1:7d:90:94:57:46:ca:
32:a1:7d:03:d3:1b:e3:5b:af:41:b0:6a:ef:3f:b8:97:8d:da:
ff:b1:fa:56:84:3e:0a:76:cb:7d:67:af:c6:79:78:4b:cc:2b:
1a:cb:6a:27:e2:c6:38:4a:b4:54:8f:8c:ad:ef:54:c9:a9:81:
9b:35:50:5b:3d:aa:a5:26:a3:24:a7:93:4c:cf:b9:37:02:b8:
d3:7b:2c:39:bc:d8:54:b7:03:58:fb:e2:e5:09:c3:77:06:11:
1f:c3:ba:74:12:f1:b4:b7:10:13:cf:db:1c:c8:af:9e:76:13:
85:b4:12:64:91:14:42:5e:05:71:44:5b:7d:21:dd:4b:6d:ae:
0b:f2:b9:da:20:4d:5f:f1:e1:dc:c8:4b:7c:7d:79:5a:f4:46:
50:99:d5:27:5e:55:56:00:1a:08:f6:df:3f:68:a4:22:f2:c8:
61:fe:2f:ef:ab:dd:ef:2a:25:5d:07:90:f1:ee:92:f4:88:b1:
5e:0f:d3:8b:26:58:c7:38:d9:57:e5:0a:e8:0f:57:c9:e6:e8:
df:82:eb:ca:d7:d3:49:58:cf:4d:ef:66:43:18:f5:40:a6:33:
ac:33:6e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:26 2023 by rpki-client on console-fra.rpki-client.org