Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LD9q4QTfW6pm6DsGch6djgp1Fn0.roa
File: LD9q4QTfW6pm6DsGch6djgp1Fn0.roa (raw, json)
Hash identifier: BxLbgVZMufj8p619NSu7bx/Z90Q94vWO8c+GwuasHag=
Subject key identifier: 2C:3F:6A:E1:04:DF:5B:AA:66:E8:3B:06:72:1E:9D:8E:0A:75:16:7D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0E51
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LD9q4QTfW6pm6DsGch6djgp1Fn0.roa
Signing time: Tue 29 Sep 2020 09:55:35 +0000
ROA not before: Tue 29 Sep 2020 09:55:35 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.193.111.192/28 maxlen: 28
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3665 (0xe51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:35 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=2C3F6AE104DF5BAA66E83B06721E9D8E0A75167D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2b:14:77:a4:b9:7c:30:a5:d9:ad:b8:49:0e:
95:91:ae:e0:6e:12:e4:34:c0:77:2d:2e:35:7c:38:
5a:7a:20:bd:90:04:06:5e:ef:8d:40:50:fd:6f:e8:
00:d8:db:0b:b1:a5:cf:5b:4c:ae:e5:93:0e:e0:13:
7f:86:6f:a2:1d:8d:39:f9:73:73:fb:ea:47:c4:b4:
09:94:47:d4:bc:1f:b4:cf:44:a7:b1:02:b7:34:ce:
99:54:ec:f4:28:34:c6:22:1a:61:51:a6:22:b3:c4:
17:1b:e0:d7:0b:18:f6:63:c9:fd:9f:ee:a3:74:ae:
07:6b:44:d9:b7:6a:ff:5f:f3:71:4e:3c:7d:8d:ae:
97:14:ac:62:83:91:b2:04:a1:f6:c0:bc:d7:b5:13:
91:d3:be:8f:63:10:e5:b9:f3:eb:f0:0e:4b:97:27:
b8:d5:cf:4f:09:cf:62:d5:2c:27:21:16:6b:f3:47:
05:be:1d:39:82:d3:8b:0c:e5:4b:62:38:c4:27:f8:
e0:9d:9b:f1:02:c0:0a:d2:2d:6c:7f:e9:86:48:63:
3a:76:40:5a:06:0e:bf:6b:bf:5e:9f:32:3a:bc:4d:
03:48:bf:f7:63:2c:d4:fb:fb:71:88:76:a5:95:9c:
4c:40:48:02:a3:1d:95:34:d9:7f:5f:7a:e1:f6:70:
d1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3F:6A:E1:04:DF:5B:AA:66:E8:3B:06:72:1E:9D:8E:0A:75:16:7D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LD9q4QTfW6pm6DsGch6djgp1Fn0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.111.192/28
Signature Algorithm: sha256WithRSAEncryption
4b:bc:99:97:62:3a:d0:b9:c8:5b:99:db:8e:80:f8:33:45:32:
8e:27:30:2f:ec:ac:bf:c8:1a:89:37:76:e3:02:d0:e9:59:ed:
54:c9:99:ba:ae:ca:f3:72:53:af:80:0d:ce:fc:92:31:06:7a:
53:5b:18:4d:ed:24:ee:0f:f0:94:7d:79:bd:58:51:cf:b6:55:
85:3b:c7:fe:b4:4a:3f:ad:19:ba:46:4a:0d:a8:5e:65:09:41:
f8:02:ff:69:9f:51:b6:13:5c:1b:44:b6:f1:88:21:01:83:2e:
55:68:da:83:4f:79:fc:8b:c4:ce:f6:0a:6d:33:6e:ee:a2:18:
f2:1c:0d:84:a1:60:80:d7:1c:d7:ac:82:19:28:23:4a:46:69:
8e:bb:8b:98:ee:c2:a0:65:ea:54:fc:72:03:2c:53:45:90:6d:
02:4d:4a:e4:3d:83:e1:d8:f7:51:24:eb:43:4e:18:87:80:f2:
9f:85:d7:2e:30:d9:8d:28:94:1b:af:7a:38:5b:30:7f:e0:99:
ee:91:20:b9:be:7a:b4:81:d8:f3:a8:7f:88:55:28:b1:00:ce:
fc:aa:5e:20:dc:3a:b6:a6:c0:f2:eb:7b:30:c7:ad:d3:25:46:
51:b4:e4:f6:04:c7:3d:83:7a:23:88:ed:bd:5c:d4:dc:81:99:
8a:e9:f3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org