Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OIwiLmw1xpW7xzANXOa1ZGJDUX8.roa
File: OIwiLmw1xpW7xzANXOa1ZGJDUX8.roa (raw, json)
Hash identifier: tCGlKWPVBVDw3nJrr2mcuOkmUQrtwyEeexeMGp+9Sm8=
Subject key identifier: 38:8C:22:2E:6C:35:C6:95:BB:C7:30:0D:5C:E6:B5:64:62:43:51:7F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0F82
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OIwiLmw1xpW7xzANXOa1ZGJDUX8.roa
Signing time: Tue 29 Sep 2020 09:57:03 +0000
ROA not before: Tue 29 Sep 2020 09:57:03 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.0.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3970 (0xf82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:57:03 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=388C222E6C35C695BBC7300D5CE6B5646243517F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:bd:32:b7:5f:96:01:bb:df:dd:f6:52:2f:40:
2b:c2:70:c9:c4:56:0e:e6:68:6f:1b:71:9a:78:dc:
38:a7:00:f5:41:aa:f6:c4:e9:22:8e:50:d5:06:9c:
12:82:d5:d3:fa:51:2c:7e:ec:28:c4:8a:f9:00:18:
eb:47:f3:3a:11:4f:e4:19:17:d1:b8:0f:17:9b:55:
87:02:d2:1f:41:00:20:2a:0e:72:6a:59:84:64:df:
27:84:8e:44:5c:e6:dd:38:7c:24:33:8b:fe:c7:72:
9f:ae:19:6a:ba:50:15:01:80:c5:9f:c9:bf:40:3f:
c0:34:d4:b2:70:94:16:a8:e2:af:6d:95:2c:6e:bb:
fe:d4:c3:e0:40:7c:b7:a6:65:c3:59:56:2d:03:4e:
c6:90:62:96:ca:31:1d:7b:68:92:6b:27:f5:63:4a:
04:44:d3:df:78:50:ca:e7:51:6a:15:3e:90:4c:8c:
37:75:e0:f1:f7:69:b0:a3:eb:db:52:4c:6c:af:0d:
bb:27:c9:77:6d:af:61:21:03:97:c5:a5:06:f0:a7:
e9:c2:46:b9:f2:b3:a0:ac:58:98:05:82:98:42:62:
0f:86:d7:0f:61:05:1e:05:30:6b:a8:ed:6d:40:4d:
c7:01:c2:bd:06:63:66:6a:65:54:cd:2f:4e:2b:f9:
b2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8C:22:2E:6C:35:C6:95:BB:C7:30:0D:5C:E6:B5:64:62:43:51:7F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OIwiLmw1xpW7xzANXOa1ZGJDUX8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.0.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:f6:49:18:aa:e4:ec:3e:c9:fc:69:5d:b2:0e:5e:e7:46:4b:
bb:ac:d6:3f:6c:10:73:a0:05:ef:d7:d5:6d:23:db:e3:1e:26:
9f:90:f0:23:fe:39:66:45:0a:cd:ae:27:cf:bd:48:bc:75:e2:
f9:8e:01:51:8b:fc:55:0b:0f:3c:26:40:be:d6:74:6a:79:dc:
87:5c:2a:bc:8a:0f:9e:bf:c3:23:7d:9c:10:c9:f2:ad:69:e1:
cd:8f:e0:48:0e:0b:12:97:78:28:22:4d:36:52:89:52:18:fe:
af:50:d4:72:e1:ed:1f:a7:94:14:54:ee:2b:22:40:24:f4:26:
e0:e6:87:7b:d2:7a:8a:13:48:0a:d3:72:54:04:a0:e9:29:da:
e3:1e:0f:10:c8:f7:9c:58:46:20:55:93:89:1b:05:6d:9b:38:
36:3b:ed:bf:bf:39:67:44:99:49:35:60:ae:cd:89:a6:fc:c9:
4b:60:ba:90:96:2a:28:05:4b:0b:1d:cb:2d:e7:a3:3a:29:56:
5d:cc:21:7c:5a:e4:d6:57:84:e5:36:6a:6e:4e:b7:34:c3:e7:
99:4f:85:e1:e9:cc:75:52:13:74:81:fc:40:6f:a6:b8:a1:9b:
5b:48:64:ba:32:a7:c0:d8:c2:b5:22:fc:6a:f8:18:f5:7a:50:
c9:e2:18:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:51 2024 by rpki-client on console-fra.rpki-client.org