Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MM7oxBtZZsJ6p2T_OzeP4L1DBkA.roa
File: MM7oxBtZZsJ6p2T_OzeP4L1DBkA.roa (raw, json)
Hash identifier: aUQ9ENB1VxFiD299nkjOIdNS+upAdFAhKcnC9Bvw1eU=
Subject key identifier: 30:CE:E8:C4:1B:59:66:C2:7A:A7:64:FF:3B:37:8F:E0:BD:43:06:40
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0F52
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MM7oxBtZZsJ6p2T_OzeP4L1DBkA.roa
Signing time: Tue 29 Sep 2020 09:56:48 +0000
ROA not before: Tue 29 Sep 2020 09:56:48 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.88.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3922 (0xf52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:48 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=30CEE8C41B5966C27AA764FF3B378FE0BD430640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f0:87:67:df:25:94:44:f8:65:9c:8f:24:3b:
ae:81:af:2f:b6:f7:38:2d:fa:e3:77:27:00:fd:f9:
c7:2b:88:de:bc:39:58:c8:b3:59:b7:ef:e7:02:a2:
92:8e:3b:21:3c:5a:99:46:05:ff:c0:8c:86:78:d4:
9d:9a:e7:24:c2:82:df:95:ac:38:ec:5d:05:b1:03:
03:22:4a:84:50:54:5c:c9:a2:41:18:94:b1:f3:81:
b9:de:92:03:b2:92:79:48:c7:9b:f8:43:b0:f7:0e:
d0:3e:de:bd:10:bf:eb:e0:ce:69:56:79:1a:78:7c:
f3:48:47:06:56:3f:7b:2f:16:cc:ff:6f:fa:3a:42:
c1:9a:5a:c5:10:63:b6:8b:fc:54:f2:a4:87:bf:52:
e3:9a:ab:5f:ad:35:ae:ce:ad:c1:ef:31:ab:c7:3a:
e3:8f:67:3d:5b:55:e8:ba:b8:bd:5b:7f:1c:b6:2b:
7b:34:64:b4:92:43:ab:71:8c:36:84:07:13:7b:1f:
0c:3e:f9:fe:9b:5e:a5:5e:bb:32:41:a6:7b:c4:54:
63:a7:9f:fd:2c:6d:28:7e:3e:a3:7a:6e:6c:82:b0:
34:b6:f7:1f:52:a2:0f:c1:26:37:da:95:2b:ff:91:
92:f9:ac:18:3e:3a:ed:ee:93:74:8a:84:d6:a5:cf:
de:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:CE:E8:C4:1B:59:66:C2:7A:A7:64:FF:3B:37:8F:E0:BD:43:06:40
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MM7oxBtZZsJ6p2T_OzeP4L1DBkA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.88.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:26:7b:72:0b:fa:ed:5b:6b:34:e1:4a:2c:12:96:90:e7:3d:
d3:93:e1:35:81:28:b8:12:fa:87:a0:ce:2e:12:1a:01:06:df:
4e:5b:9f:a3:49:60:69:45:14:36:dc:d7:45:3e:bd:7e:f0:95:
e9:f9:f0:b3:20:7a:84:99:60:6f:69:7d:20:7c:b5:07:e8:37:
bc:b9:93:31:26:9c:68:3c:03:35:af:74:92:c7:6e:d3:2d:da:
79:2d:5d:52:4a:75:66:bf:ee:5f:60:81:b3:06:63:f7:a5:0f:
39:e1:ce:b7:60:ad:e6:5b:25:5e:24:09:71:ce:f0:c8:eb:41:
ad:ac:2f:94:e4:5b:2e:44:c4:e2:f3:a1:f0:da:17:f1:59:82:
28:d2:e7:18:d6:10:60:31:72:e0:de:8c:bf:da:d4:bd:34:f8:
95:46:bc:f7:93:ee:a8:6e:3c:3c:1f:c2:94:62:35:91:40:29:
14:2c:a8:34:0d:d8:3d:c4:06:82:b2:0f:ea:7d:89:42:1f:01:
3e:26:4c:b1:81:38:1a:01:e4:25:78:93:44:25:ba:70:80:45:
3c:e8:88:ee:04:0a:aa:40:d1:d0:d5:03:8a:fd:a4:d6:f1:e7:
53:0f:60:df:8e:89:fb:0c:2f:04:28:fa:5a:01:76:03:bf:2a:
4a:be:3e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:29 2024 by rpki-client on console-ams.rpki-client.org