Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PWp5rFUkjX_T1Q65jycNec7bp1k.roa
File: PWp5rFUkjX_T1Q65jycNec7bp1k.roa (raw, json)
Hash identifier: a/RwU9I6EWT5VEgSjeSt4T1/b6MxEg5MncWndm9KonY=
Subject key identifier: 3D:6A:79:AC:55:24:8D:7F:D3:D5:0E:B9:8F:27:0D:79:CE:DB:A7:59
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0E45
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PWp5rFUkjX_T1Q65jycNec7bp1k.roa
Signing time: Tue 29 Sep 2020 09:55:32 +0000
ROA not before: Tue 29 Sep 2020 09:55:32 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9924
IP address blocks: 123.195.192.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3653 (0xe45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:55:32 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=3D6A79AC55248D7FD3D50EB98F270D79CEDBA759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:29:0c:8c:74:eb:5c:b8:ca:1c:33:99:08:2e:
b5:4e:23:c6:bb:cb:da:97:8e:b4:1a:16:89:8f:7f:
e2:c8:a8:76:e5:ad:1f:95:95:eb:e6:3c:da:65:1c:
a6:56:1b:c3:b5:11:7f:60:f3:01:31:36:e2:9e:61:
d5:1b:a5:2a:08:2b:a0:df:f0:6d:0d:25:d9:ec:b0:
5e:36:76:1f:34:45:c2:21:ff:c9:3c:80:9a:9c:9c:
37:c2:9d:09:2a:ef:db:48:f2:47:ba:ea:74:53:ec:
11:1f:2a:80:c1:49:f4:81:fa:85:94:27:46:31:4a:
d7:56:a0:47:ee:e8:ad:af:8e:6a:94:9c:c3:ec:3b:
64:93:69:3f:5c:a7:c5:f2:c2:8a:83:8d:a4:0f:47:
85:f4:38:03:23:b3:87:53:3f:45:64:87:15:0e:00:
81:4e:e2:53:32:24:07:b3:a4:e7:80:e5:b0:e5:d5:
98:09:d3:f5:ab:50:3d:f7:6a:fa:18:17:de:97:5f:
8e:03:24:2d:17:71:7d:c5:24:14:04:83:72:10:55:
eb:13:63:f0:32:7e:01:4c:cd:a0:98:ff:5b:79:1f:
9c:3b:0e:0a:45:03:4b:63:78:12:18:a0:9e:4f:11:
16:9f:ce:55:90:3d:af:a2:e8:a5:aa:d9:cd:c0:06:
af:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6A:79:AC:55:24:8D:7F:D3:D5:0E:B9:8F:27:0D:79:CE:DB:A7:59
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PWp5rFUkjX_T1Q65jycNec7bp1k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.192.0/19
Signature Algorithm: sha256WithRSAEncryption
78:b9:69:08:10:3d:45:0d:a3:1c:10:06:7c:66:b1:80:6d:7d:
7f:c2:5e:5f:76:2b:5b:a0:b4:70:89:15:3b:d4:dc:81:13:ef:
26:00:90:b0:b2:ed:c8:c2:34:63:2c:40:30:88:14:75:0a:c0:
c7:55:9a:a4:f0:e7:05:90:18:bc:39:ed:b9:ae:38:f0:2e:cd:
b5:d2:76:97:15:84:cb:94:00:67:2e:61:4c:3b:dd:14:a7:ad:
d2:cf:67:47:50:78:a4:a3:b7:16:c5:f3:c4:e5:ff:be:c2:5b:
65:5b:6b:70:d6:b9:b7:ef:59:ff:6a:dc:c8:eb:79:f4:47:c6:
bb:fb:55:19:b7:be:28:c5:ba:79:87:06:68:61:2e:bf:af:0f:
ff:8d:5e:f3:99:b2:16:fb:03:27:4c:12:6e:4c:91:89:a0:2f:
e3:45:df:24:9a:75:af:4f:91:bc:7a:86:50:e0:2d:01:c9:2d:
f7:6a:d6:79:70:f9:a1:73:93:ef:1e:4c:0c:31:a1:f8:f8:7b:
4e:b5:13:8f:8c:a9:e8:92:10:2d:50:9f:03:96:b1:ab:24:60:
0f:2d:7e:a7:ec:1f:9c:59:68:fa:78:0c:07:04:8f:8b:d9:8b:
82:1a:c0:7e:1f:92:49:5c:c4:55:6b:a8:11:3a:b8:6b:2c:5f:
5a:52:ea:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:18 2023 by rpki-client on console-ams.rpki-client.org