Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PQzXD8OO0Q5t4jMc9Ip2oUoyCYs.roa
File: PQzXD8OO0Q5t4jMc9Ip2oUoyCYs.roa (raw, json)
Hash identifier: FemL9liB357AGEeS2GNE3CrbO2Eey0tEM86QMAYDmKQ=
Subject key identifier: 3D:0C:D7:0F:C3:8E:D1:0E:6D:E2:33:1C:F4:8A:76:A1:4A:32:09:8B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0F68
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PQzXD8OO0Q5t4jMc9Ip2oUoyCYs.roa
Signing time: Tue 29 Sep 2020 09:56:55 +0000
ROA not before: Tue 29 Sep 2020 09:56:55 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.194.128.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3944 (0xf68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:55 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3D0CD70FC38ED10E6DE2331CF48A76A14A32098B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e2:63:ca:a7:f0:b9:1e:9a:ae:4d:c9:98:70:
80:2d:60:54:f4:3d:7c:05:1f:18:87:7f:e8:78:11:
b4:74:8a:1d:6d:ce:e6:d8:bd:6c:c4:a5:f0:cb:5e:
91:c1:cd:f6:44:a5:f8:08:25:c6:72:52:b7:db:72:
53:83:58:21:ce:bf:b9:45:c4:40:5d:fc:43:b0:57:
82:62:83:0c:42:f0:39:a6:11:3b:90:ac:c2:fd:5c:
56:18:cd:16:ea:3e:23:0d:b4:f9:7b:2c:69:62:36:
8f:ba:42:5b:91:a0:4f:ca:15:87:02:fd:de:87:72:
03:6c:aa:c4:68:db:fa:ca:c4:9a:07:98:5b:83:64:
d8:d0:42:b1:94:c3:35:9c:03:89:77:83:c3:84:85:
b0:fb:52:1c:5b:c6:50:81:f5:2f:d6:1a:cf:ce:89:
f6:2e:ff:ea:3f:88:0e:3d:78:11:98:2a:17:b8:de:
a1:70:f0:59:4e:85:f9:15:d8:d4:fa:ce:38:c6:19:
c8:cf:4a:28:0a:ff:61:99:ee:b0:d9:f5:05:12:f4:
0e:bd:fe:d5:17:00:60:37:7b:17:49:d2:fb:7a:18:
c9:a2:0e:9c:69:19:bc:24:e4:c8:07:20:a2:70:01:
94:8a:0a:90:53:e6:7d:4b:77:77:aa:b6:c8:a3:31:
89:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0C:D7:0F:C3:8E:D1:0E:6D:E2:33:1C:F4:8A:76:A1:4A:32:09:8B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PQzXD8OO0Q5t4jMc9Ip2oUoyCYs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.128.0/20
Signature Algorithm: sha256WithRSAEncryption
1a:e6:5b:5c:05:5c:96:3e:45:9b:48:39:60:76:f2:1e:67:96:
c5:dc:52:25:36:4a:2f:4a:18:9b:28:53:af:96:6b:c6:c0:51:
62:83:da:a3:9e:08:2e:9b:64:74:3a:8f:41:b0:a1:88:c1:7b:
21:f3:93:22:56:53:1b:43:2d:d2:2a:da:b2:6e:d8:76:ac:c9:
6c:1d:1c:27:22:81:5a:90:80:b3:94:a2:1a:6b:38:62:19:e3:
dc:f6:d2:be:45:05:83:40:97:2b:be:90:3e:26:67:01:4e:c5:
c3:6b:15:95:07:06:47:db:01:c6:59:c6:ef:03:79:29:ac:25:
bd:4b:79:26:90:17:88:07:2a:d1:38:8c:48:46:8b:0f:4d:ac:
e3:34:99:10:78:5f:38:78:48:03:2e:f1:33:89:a5:03:7b:b3:
04:a0:f1:bf:4f:f1:12:4c:1d:99:e1:84:9d:b3:a4:8f:c6:fe:
86:ee:98:c4:f7:4a:9c:2f:57:2e:eb:fd:ba:e0:c9:21:b7:6a:
ce:eb:97:f8:de:4a:27:2d:96:92:f7:9c:b4:09:b2:3d:94:54:
20:0d:99:48:ef:8e:ba:a0:9a:92:c4:92:10:4d:91:7e:d3:71:
4e:6b:b1:c4:7b:b9:9d:5c:b3:fc:a6:01:48:a4:c5:2b:81:12:
fe:52:bb:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:52 2024 by rpki-client on console-fra.rpki-client.org