Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PDsm2K3lIs7NiLoBiZ-VIDcUBiM.roa
File: PDsm2K3lIs7NiLoBiZ-VIDcUBiM.roa (raw, json)
Hash identifier: /SDkiqPnS8//8XHYoID7ysyRc5Tsv+UTswu9IWhkzvY=
Subject key identifier: 3C:3B:26:D8:AD:E5:22:CE:CD:88:BA:01:89:9F:95:20:37:14:06:23
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 10A6
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PDsm2K3lIs7NiLoBiZ-VIDcUBiM.roa
Signing time: Wed 25 Nov 2020 03:44:05 +0000
ROA not before: Wed 25 Nov 2020 03:44:05 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.136.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4262 (0x10a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 03:44:05 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3C3B26D8ADE522CECD88BA01899F952037140623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:17:65:54:30:d1:fa:ce:46:5e:d6:0e:c0:d2:
4e:5e:f2:7f:9e:3a:01:2c:a4:b9:07:91:ca:d0:4e:
8b:79:22:28:1f:85:d7:bf:04:ae:0f:ca:55:39:67:
47:83:67:5f:74:7d:6f:35:34:b3:2b:cf:15:74:09:
6a:cb:1f:fc:07:11:9f:55:83:cc:d7:9a:ec:bc:b0:
08:60:5f:18:06:9a:a6:be:cf:31:a7:37:d8:49:cd:
38:e3:57:38:92:d5:85:6f:23:31:12:cc:5b:23:3d:
80:3f:33:43:7a:7c:9a:b0:5e:e4:a2:1b:09:e7:fa:
7f:5f:b5:b6:83:43:21:59:b2:b0:1a:f6:fe:a8:b7:
8a:33:74:59:1e:eb:58:3c:60:26:4b:7f:1b:99:08:
5d:a4:1b:12:ab:1a:df:8a:71:3e:bd:25:a0:1e:a9:
40:d9:61:00:a7:e2:0a:77:5e:e3:95:da:dc:c0:ef:
83:7a:1e:50:36:8f:1f:5c:79:3c:63:56:89:06:9e:
c7:7e:d1:65:8f:86:cf:12:5a:fa:d9:21:be:ca:af:
2a:50:0b:ca:38:33:60:29:62:65:f3:11:4c:a5:15:
d1:bd:76:6e:ec:c4:78:39:9a:d1:dd:ac:2d:cf:37:
3e:f2:90:3c:63:c6:74:91:0b:ee:5c:0c:ce:aa:45:
d5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3B:26:D8:AD:E5:22:CE:CD:88:BA:01:89:9F:95:20:37:14:06:23
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PDsm2K3lIs7NiLoBiZ-VIDcUBiM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.136.0/21
Signature Algorithm: sha256WithRSAEncryption
4b:d5:ef:5a:92:b1:dd:d9:d0:78:0f:9e:eb:76:8a:52:7e:aa:
25:69:51:ba:4b:66:7c:af:ce:5e:0d:38:89:c4:70:a9:ce:c2:
cd:06:22:14:80:c9:09:f9:16:da:a7:33:4a:8a:1d:35:e4:ae:
42:6e:91:31:4b:68:7a:d6:b1:2e:f6:5a:8a:0f:c1:f3:97:7b:
06:3e:52:07:29:02:dc:69:ab:09:16:6f:3d:ed:1a:60:a2:81:
c7:a6:9b:60:a6:da:b2:64:f3:07:fa:77:8c:28:fb:83:7c:56:
89:62:e9:b4:1f:15:54:72:ba:ac:c9:3a:ff:1a:da:ee:bd:2f:
29:79:e7:f0:f2:7f:8c:65:7e:6d:56:af:a7:04:32:c6:da:8a:
0e:31:2e:d3:43:a8:79:a2:78:b8:e6:85:51:b5:5d:a3:f3:03:
3b:7b:fc:c2:77:fd:b5:39:46:29:97:8f:b7:11:00:5d:7a:fa:
f4:05:4e:f3:23:6d:0e:50:32:f9:5b:80:eb:7d:4b:54:10:52:
ce:9c:3c:32:4f:39:61:c6:ab:0a:c1:fe:49:4a:80:e9:ab:59:
47:1e:a8:3a:60:72:17:14:73:b6:64:7a:c0:d4:a9:f2:92:bc:
d6:79:b1:63:9b:ac:3b:e1:35:e8:a0:c5:c6:27:8e:b6:48:99:
89:f1:c2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:52 2024 by rpki-client on console-fra.rpki-client.org