Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/O1O2fGWkVV6E08WsUV0CUW9CRP8.roa
File: O1O2fGWkVV6E08WsUV0CUW9CRP8.roa (raw, json)
Hash identifier: llzepoppZzZeUJ8waoGDBqE50BLHo4Wn1KdsNmqvZv0=
Subject key identifier: 3B:53:B6:7C:65:A4:55:5E:84:D3:C5:AC:51:5D:02:51:6F:42:44:FF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0EDF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/O1O2fGWkVV6E08WsUV0CUW9CRP8.roa
Signing time: Tue 29 Sep 2020 09:56:14 +0000
ROA not before: Tue 29 Sep 2020 09:56:14 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.176.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3807 (0xedf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:14 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3B53B67C65A4555E84D3C5AC515D02516F4244FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c6:f5:c5:82:3d:2b:bd:07:af:cd:e4:25:eb:
56:6f:c8:a6:4a:8c:ab:14:f8:29:2d:83:1d:11:c6:
cb:d1:38:00:56:b8:76:18:e4:7b:e6:d2:d7:05:90:
0b:e1:49:7a:d9:b3:e4:14:1b:b5:03:6f:b2:c4:e0:
9d:87:7f:d7:f5:85:d2:7f:7c:c9:30:8e:fb:f2:ff:
0a:03:05:78:dc:49:f6:9a:46:b2:91:ef:9f:3c:76:
7a:aa:d8:9a:b2:a8:59:4e:a0:dd:75:cc:b2:e5:c0:
c1:90:a9:96:a6:ac:5c:fc:10:28:5b:18:03:54:69:
8e:d9:ab:dc:96:3c:ef:02:ae:d8:4d:4e:40:99:ef:
7a:26:14:9f:bc:6d:bb:77:f1:c7:ca:3d:d8:b0:3a:
67:d6:76:c5:aa:eb:10:cf:81:e5:c8:fc:4b:d4:88:
b1:8e:61:26:82:79:35:02:39:1d:f3:74:c1:20:9b:
43:10:72:0e:26:f6:e7:48:9d:f0:d1:b4:5c:d1:28:
12:e3:5d:0d:e6:12:ea:f4:48:9b:d2:a4:86:89:d8:
35:dc:ee:88:5b:cd:27:c8:af:13:07:96:3e:9a:48:
78:92:fb:30:66:71:0c:db:1d:86:81:57:a0:ea:8f:
b4:12:f1:28:69:28:e0:46:f6:1a:02:7f:19:55:1b:
b9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:53:B6:7C:65:A4:55:5E:84:D3:C5:AC:51:5D:02:51:6F:42:44:FF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/O1O2fGWkVV6E08WsUV0CUW9CRP8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.176.0/20
Signature Algorithm: sha256WithRSAEncryption
25:e6:54:43:ef:78:e1:2f:f1:37:85:bf:40:78:1c:38:f4:7d:
49:53:88:53:4b:fd:c0:32:a7:b4:d5:26:97:d8:8b:f7:a7:37:
01:21:97:2e:c1:70:2f:9f:4f:7d:5e:fb:e5:cf:06:b4:38:7c:
38:1f:85:2a:73:61:bc:9d:36:3a:2e:f2:ef:ba:9b:95:ef:3b:
12:7d:c8:0b:af:ca:ab:c8:ae:cf:37:5b:c1:99:02:0e:9c:b2:
df:97:4d:ce:e6:44:3a:b7:df:dd:e5:18:ef:5e:7c:17:45:92:
66:2e:c2:f9:df:75:a2:dc:28:71:93:9b:60:3f:e6:14:4f:01:
ea:ee:63:1a:84:96:e9:73:65:6b:95:59:67:64:4a:49:b5:37:
e2:f8:f9:d6:1f:ff:df:ff:0e:da:f4:c3:33:51:00:d6:ab:e4:
d9:97:ef:af:72:ad:75:3f:72:f0:2b:5c:90:9b:87:92:bc:e8:
00:f1:24:9a:63:06:ee:37:20:36:10:94:94:af:b2:d2:b3:d2:
94:bd:f7:18:8c:ab:20:b0:f8:be:17:58:6b:b3:ef:a6:f3:32:
88:fc:e5:b7:d6:2c:b3:3a:70:03:d5:09:63:da:a8:ad:45:d3:
84:b2:2f:96:16:9f:93:cd:22:70:50:2a:89:4b:ac:db:87:0c:
0d:90:39:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:29 2024 by rpki-client on console-ams.rpki-client.org