Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Om0hCf0-OOrXcAMlCxRa6CqrAdI.roa
File: Om0hCf0-OOrXcAMlCxRa6CqrAdI.roa (raw, json)
Hash identifier: k5yV885t7r7u4bnMQpNlTO2BRgos6LiXUsW9RLUaUl8=
Subject key identifier: 3A:6D:21:09:FD:3E:38:EA:D7:70:03:25:0B:14:5A:E8:2A:AB:01:D2
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1909
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Om0hCf0-OOrXcAMlCxRa6CqrAdI.roa
Signing time: Sun 07 Feb 2021 12:56:25 +0000
ROA not before: Sun 07 Feb 2021 12:56:25 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 123.195.236.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6409 (0x1909)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 7 12:56:25 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3A6D2109FD3E38EAD77003250B145AE82AAB01D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1c:d5:00:fe:8a:a5:99:25:a4:eb:a3:ae:b5:
17:fe:5f:d9:b0:ac:4c:77:92:91:da:f5:37:5c:be:
b7:ad:4a:ee:2b:4c:4c:55:f6:10:71:70:c3:a6:75:
6f:d3:39:c6:18:19:c4:a7:84:5e:7d:af:58:08:e7:
b1:3f:c3:27:34:8c:07:28:f5:76:9c:dd:b5:54:76:
a0:83:b3:d1:2b:3b:d8:1c:21:83:53:78:c7:c1:f3:
33:ad:12:a2:fd:05:70:06:ea:2b:da:a9:56:d9:e3:
e8:ff:02:bc:69:d5:04:0a:91:1b:10:92:00:c3:0a:
60:6b:21:d4:63:76:b9:34:cf:5d:45:8d:13:12:89:
77:a3:c8:c4:00:b2:7b:f7:27:1a:f3:94:c7:ef:7a:
57:ca:d8:7a:02:db:98:2a:67:1f:db:27:78:81:05:
7d:35:87:d8:be:b4:77:1a:7a:70:63:a2:ad:e3:49:
af:b1:7f:eb:3f:0f:e8:fb:3b:da:26:54:29:76:d5:
84:de:31:86:f6:c2:c5:bb:ff:c4:de:a9:76:c8:50:
e0:fb:53:fd:e8:85:3b:ee:3d:b0:20:aa:c9:9c:a9:
97:81:e8:e6:a4:0e:70:be:78:f1:61:dc:41:bb:84:
66:a7:d4:1b:5e:81:97:85:5b:e9:5c:ab:e1:2b:bb:
59:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6D:21:09:FD:3E:38:EA:D7:70:03:25:0B:14:5A:E8:2A:AB:01:D2
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Om0hCf0-OOrXcAMlCxRa6CqrAdI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.236.0/24
Signature Algorithm: sha256WithRSAEncryption
94:bf:3a:df:18:f0:9c:d3:00:b4:0e:4b:53:dd:3c:20:3b:8c:
ce:7a:11:2f:88:81:39:1e:1b:8c:32:db:1b:15:9c:8a:14:03:
aa:7b:36:73:0a:6d:7f:38:c3:5c:da:c2:b9:08:d7:91:d1:5d:
6f:19:61:26:10:70:bd:d8:4a:dd:21:4e:98:92:ee:f7:4c:16:
1f:27:d2:9c:34:32:57:e0:d9:f7:6b:86:fc:42:9a:af:3c:bd:
bb:e4:94:fd:ab:e0:21:5e:b5:ae:a6:17:ab:93:bc:8b:b5:90:
ca:95:94:d9:8c:ee:40:20:bd:82:67:f0:1f:4a:0a:d1:a6:1f:
42:da:bf:85:b0:30:05:72:0f:11:46:b2:83:5b:d8:7d:56:54:
44:b6:9e:3e:41:7b:5a:db:37:b6:06:32:b7:38:d7:1e:32:fa:
97:b1:df:fc:38:cf:f1:57:d9:9d:9f:50:7d:ad:84:49:5b:f7:
1a:8a:44:ad:5c:8f:43:41:7e:6b:b7:28:7e:92:ea:19:ea:bd:
2f:92:a2:ae:11:fe:c5:49:d6:f6:50:70:32:c1:59:a2:47:23:
e7:64:86:09:e1:65:49:f4:55:0b:df:06:6a:70:09:cb:c6:75:
27:bf:d7:8f:b5:eb:52:33:47:f1:c4:c0:bf:e7:d9:a3:92:bc:
e6:82:07:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:52 2024 by rpki-client on console-fra.rpki-client.org