Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RVkkkyxr_UvqYcxOyurpuzZ3qcs.roa
File: RVkkkyxr_UvqYcxOyurpuzZ3qcs.roa (raw, json)
Hash identifier: /KXQ1N7Jg5lnIi2RlFD/9rE0h4nDNrp+4wTn8ByPkR8=
Subject key identifier: 45:59:24:93:2C:6B:FD:4B:EA:61:CC:4E:CA:EA:E9:BB:36:77:A9:CB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0EE2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RVkkkyxr_UvqYcxOyurpuzZ3qcs.roa
Signing time: Tue 29 Sep 2020 09:56:15 +0000
ROA not before: Tue 29 Sep 2020 09:56:15 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.192.132.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3810 (0xee2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:15 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=455924932C6BFD4BEA61CC4ECAEAE9BB3677A9CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e0:c9:a6:60:cb:63:be:ce:71:36:b7:c7:15:
70:2a:4b:41:d3:1d:b8:26:fd:90:59:c5:d7:27:d7:
44:4a:39:61:09:69:b8:a7:4b:92:e7:bc:f6:59:2b:
61:5f:74:d2:91:fa:cb:ef:f5:82:59:17:22:cd:60:
59:4a:75:fd:d9:4c:3c:1f:63:38:17:22:62:11:3f:
cd:57:67:14:7f:95:d5:4d:05:d2:e5:71:09:e1:4e:
59:57:49:ff:ff:fa:a6:ae:b2:da:61:df:4e:85:43:
a9:af:56:10:28:bd:cf:58:a1:c8:eb:86:d8:fa:d9:
99:a5:6a:a5:0a:ed:c8:a7:8e:45:00:3c:a6:1c:9a:
57:2a:ac:3c:89:e3:13:f2:cb:76:74:74:e5:83:c2:
c6:83:78:62:98:e7:11:03:c9:df:50:da:d8:42:79:
34:e7:be:e2:2e:e3:a7:40:19:75:4b:a6:e1:f5:06:
d1:7f:c6:d2:a0:e6:fa:1e:28:28:e0:e5:e9:cd:df:
43:ee:6e:6d:8d:0c:d3:74:98:af:51:02:27:5e:91:
73:0d:55:2d:35:aa:52:bd:c3:87:73:4d:44:0d:a3:
f6:fe:67:4b:11:96:25:1e:42:e8:e5:94:06:7e:7a:
95:02:50:52:c8:88:8c:55:ac:50:f6:3e:c6:8e:5a:
90:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:59:24:93:2C:6B:FD:4B:EA:61:CC:4E:CA:EA:E9:BB:36:77:A9:CB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RVkkkyxr_UvqYcxOyurpuzZ3qcs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.132.0/22
Signature Algorithm: sha256WithRSAEncryption
47:1e:79:7b:b1:ea:b4:41:e9:29:54:9b:44:8b:e4:dd:f1:12:
e7:43:9a:71:ad:c7:99:f7:26:bc:e5:c3:2b:2c:45:6c:5e:aa:
da:3f:ea:fb:5e:4a:a2:c0:35:fb:6d:77:20:ec:2b:36:d7:ac:
69:94:f1:ab:10:59:d9:35:a4:31:7c:66:9f:39:11:09:59:78:
d0:50:2e:56:47:db:aa:d4:a7:82:e6:7f:ad:fa:de:4f:08:78:
9d:48:3f:bd:ca:60:3c:11:cb:da:16:0d:68:4e:23:b8:f7:c6:
f0:45:21:6c:b6:c4:d0:cc:db:dc:b5:df:ce:72:67:60:ac:25:
51:cd:ad:02:c5:25:6c:f0:4f:98:83:54:c9:02:20:49:29:33:
11:d2:fa:94:a9:9c:a9:b2:f9:cb:be:10:d9:72:ba:df:db:c4:
16:a9:15:fd:02:b8:bc:a6:b5:8b:2e:2a:fc:68:99:27:cc:04:
ff:84:10:bc:45:20:67:bd:57:a2:4c:18:cf:5c:13:34:54:15:
b7:1b:d9:78:12:fe:b2:70:72:dc:cf:bc:bf:6d:a0:9c:4d:47:
13:db:f8:f8:b9:51:f7:7b:a0:82:95:87:88:9b:5d:90:32:3f:
7a:a4:4f:4c:a6:37:fc:b1:20:c5:0f:0a:fd:6a:f1:4e:9a:18:
d1:74:2f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:52 2024 by rpki-client on console-fra.rpki-client.org