Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PFtdd8jyxbxdYWsXc8B-f77kqRM.roa
File: PFtdd8jyxbxdYWsXc8B-f77kqRM.roa (raw, json)
Hash identifier: xMGT8xsNK+prdwaZxUfL5XBi8kHziTXhRCqwrPyb/zQ=
Subject key identifier: 3C:5B:5D:77:C8:F2:C5:BC:5D:61:6B:17:73:C0:7E:7F:BE:E4:A9:13
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0DBF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PFtdd8jyxbxdYWsXc8B-f77kqRM.roa
Signing time: Tue 29 Sep 2020 09:54:56 +0000
ROA not before: Tue 29 Sep 2020 09:54:56 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 123.193.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3519 (0xdbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:56 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3C5B5D77C8F2C5BC5D616B1773C07E7FBEE4A913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c3:bb:14:cd:d7:fa:49:60:c9:84:61:d2:13:
3b:09:46:45:33:c2:53:64:1c:83:26:e1:e9:24:64:
5e:55:d1:5c:68:62:f6:22:35:2e:18:8c:99:3e:df:
c1:6c:92:45:2e:fd:ad:98:b4:59:4f:0d:f1:2e:6a:
5c:bc:3e:8e:48:58:a6:64:07:68:2b:92:c5:c6:29:
74:a8:20:02:d5:b1:aa:c8:59:f8:3d:c4:67:79:14:
01:bf:cd:19:ef:a6:b3:0e:be:cd:c0:6f:55:32:66:
cd:b8:ac:81:2e:ec:01:93:ba:3f:a0:dd:e1:de:9e:
95:26:96:d3:dd:bb:a5:70:43:84:c4:0b:fe:f6:7d:
f8:6b:4d:9e:9e:f9:f0:e3:51:83:24:31:21:ea:d6:
f4:43:25:ea:61:d2:85:2f:cd:96:3d:ca:98:4e:e5:
2b:0a:e5:7c:37:79:51:72:2e:76:6f:50:2a:d5:65:
4f:8f:cf:25:e3:f5:b2:63:7e:fb:f6:ed:a7:56:47:
ae:fc:43:07:f2:28:39:0f:e0:2d:02:0d:e4:79:34:
a4:a1:a8:92:42:8d:54:38:b8:a5:bd:ba:95:a7:0d:
29:84:e0:47:23:8e:71:94:4b:c9:e2:e3:c7:b0:cf:
e2:05:61:10:93:aa:57:d1:0c:bc:90:26:ae:c9:0b:
b7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:5B:5D:77:C8:F2:C5:BC:5D:61:6B:17:73:C0:7E:7F:BE:E4:A9:13
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PFtdd8jyxbxdYWsXc8B-f77kqRM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.125.0/24
Signature Algorithm: sha256WithRSAEncryption
57:34:e0:38:86:0e:3d:f9:c6:0e:d5:f0:83:56:74:d6:bb:b2:
e5:76:f3:93:64:91:5e:55:10:90:3d:b5:8b:e1:0f:39:51:01:
a6:4b:53:ff:08:0b:52:c7:2d:9a:06:1d:42:72:b3:1b:0a:60:
36:91:c5:f1:51:5f:09:ea:b4:d7:9f:b0:37:6b:60:73:d7:b5:
1e:cd:85:6d:d7:2b:65:0e:89:f0:f7:ff:94:6e:76:7f:18:25:
03:58:07:1a:f2:dd:da:4c:71:9c:3e:65:bf:ac:db:7b:dc:54:
85:5b:7b:bb:a9:cf:f4:61:cd:bc:c0:f2:0d:76:62:58:db:19:
15:20:28:85:79:34:08:d7:01:c7:dc:87:dc:bf:fa:bf:d2:49:
94:b0:26:59:44:74:91:ca:d9:01:75:6d:52:1f:72:ee:a8:ec:
27:d7:04:42:ae:43:51:59:19:51:83:a5:0e:d9:f8:51:3b:f7:
38:4d:72:b5:73:83:55:61:f8:6a:6a:34:10:1f:eb:2a:95:d0:
91:b6:6c:41:9b:79:98:d2:2a:7a:49:1f:49:26:a1:9e:23:2c:
01:90:11:36:16:7c:20:29:9f:57:b4:45:17:78:85:d9:fc:ff:
69:c3:fb:1b:72:0f:6f:71:46:6e:e7:0c:7e:e1:b7:d2:19:2a:
68:72:71:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:52 2024 by rpki-client on console-fra.rpki-client.org