Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NoEBHnWlOhQXR3fCANkjMswPr-U.roa
File: NoEBHnWlOhQXR3fCANkjMswPr-U.roa (raw, json)
Hash identifier: 7oJuR0e4C0vbON3dK24bI1jpGZunXNB0uQBiu9fFBs8=
Subject key identifier: 36:81:01:1E:75:A5:3A:14:17:47:77:C2:00:D9:23:32:CC:0F:AF:E5
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0E79
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NoEBHnWlOhQXR3fCANkjMswPr-U.roa
Signing time: Tue 29 Sep 2020 09:55:46 +0000
ROA not before: Tue 29 Sep 2020 09:55:46 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.238.0/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3705 (0xe79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:46 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3681011E75A53A14174777C200D92332CC0FAFE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:68:63:f5:7f:54:0f:af:1e:8a:a8:ab:e6:1d:
fc:fa:01:78:56:c2:70:75:30:fb:d9:30:d0:9a:34:
19:b0:de:8e:41:87:2d:96:cd:51:b0:5a:68:30:4e:
2b:b2:14:f3:d5:10:76:9c:1e:d8:6f:2c:77:fa:b9:
2e:f3:a2:bf:45:fc:28:ae:b2:5a:9c:40:48:6d:64:
b8:a1:72:a9:0c:8a:07:3e:d5:8f:29:12:1f:ce:c0:
36:5f:d5:8a:6c:e6:0b:6d:39:4b:d6:4f:88:ce:2e:
cf:88:b4:ad:ec:c5:3d:50:67:de:69:d7:91:8f:66:
42:ef:d6:da:05:45:4f:93:33:4d:a4:86:d7:e7:ab:
b0:02:87:52:42:f4:cf:d9:89:04:71:aa:1c:e6:eb:
36:ab:1d:87:00:e6:c2:0e:af:35:42:de:8b:8d:e9:
61:3a:d0:bb:1c:b4:7b:e0:a4:6e:46:2d:ce:19:a0:
40:8a:61:b4:47:af:f3:11:e7:e1:1c:45:2d:ef:b3:
d5:36:00:08:04:a9:aa:7f:c0:5f:85:82:68:7f:51:
e4:ec:77:01:c8:0a:a0:98:dc:78:40:83:35:2d:7a:
7f:35:34:43:8e:4e:52:42:04:12:23:49:18:35:95:
a1:ef:39:b9:07:ae:e4:91:51:3d:6e:b6:08:5d:ee:
ae:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:81:01:1E:75:A5:3A:14:17:47:77:C2:00:D9:23:32:CC:0F:AF:E5
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NoEBHnWlOhQXR3fCANkjMswPr-U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.238.0/25
Signature Algorithm: sha256WithRSAEncryption
56:09:0a:72:9f:00:2b:cf:d6:8f:f7:53:85:86:07:3a:c7:fc:
a7:27:38:ca:62:79:eb:d8:c2:28:17:25:f1:3d:d6:0a:f1:21:
f1:17:76:7a:97:e2:f6:25:bf:37:cc:a7:8d:db:cb:7b:51:7c:
14:67:98:62:cc:b3:19:25:5a:eb:3f:2f:b2:13:5f:40:f1:47:
22:24:eb:3a:29:bd:ac:57:a3:89:92:cc:ed:64:b6:ce:66:7d:
1d:d4:95:80:59:6f:47:33:9e:34:c8:64:85:0f:e2:36:a6:e5:
6b:27:0c:11:8d:f3:25:de:98:91:a0:a2:e9:bf:d5:ef:a2:7e:
0d:1a:37:91:63:bf:4c:02:89:1a:c5:2c:9a:e2:07:45:fc:0a:
47:b8:61:34:d3:df:75:ac:3b:60:d1:9b:4a:41:bd:f6:ce:ab:
c6:58:3e:3d:68:0d:e9:55:31:68:5c:95:a9:8c:a0:35:e2:f9:
40:ee:b2:40:d5:93:21:15:9f:94:52:ca:56:e9:2f:aa:42:81:
25:d0:85:a4:c8:a6:83:a6:6b:a6:0b:d0:c2:48:94:fe:02:1a:
cc:d3:ec:26:7e:03:aa:67:92:32:c3:dd:8b:2e:7f:1b:f3:02:
42:3f:ea:5d:dd:a8:1c:29:ed:25:44:00:7e:f8:25:cd:f5:5f:
59:cd:72:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:29 2024 by rpki-client on console-ams.rpki-client.org