Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S_PtBo6ZRlpskalLsotB0sao6Dk.roa
File: S_PtBo6ZRlpskalLsotB0sao6Dk.roa (raw, json)
Hash identifier: 5pmFvF0BZgjyBt9oRTBiAgObr9tIjV9zyjOs10cEID4=
Subject key identifier: 4B:F3:ED:06:8E:99:46:5A:6C:91:A9:4B:B2:8B:41:D2:C6:A8:E8:39
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0D07
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S_PtBo6ZRlpskalLsotB0sao6Dk.roa
Signing time: Tue 29 Sep 2020 09:54:06 +0000
ROA not before: Tue 29 Sep 2020 09:54:06 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 123.195.240.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3335 (0xd07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:54:06 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4BF3ED068E99465A6C91A94BB28B41D2C6A8E839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:75:6f:79:87:fd:41:b9:72:a8:3f:89:15:0c:
4c:5a:69:db:cb:48:ce:fa:43:a8:dc:bb:7e:e0:0a:
f2:d7:c4:62:5c:c6:54:fd:25:e8:e9:97:f9:9b:a6:
c6:11:c9:e1:fd:c2:76:36:03:6c:b9:66:5d:f8:86:
5f:e8:79:fe:6f:af:97:1e:5b:bf:2b:ad:2d:d5:f0:
33:1b:a9:34:44:10:51:88:31:28:62:d2:fe:31:74:
4e:de:60:35:22:5f:d7:43:42:c2:86:ff:3c:80:b7:
fa:9d:ee:5b:1b:e9:f5:36:b9:67:40:5d:88:a8:e1:
d4:80:9d:56:8c:ab:3b:b1:28:c0:86:27:41:be:63:
c8:7f:69:5a:50:99:ff:23:a6:df:4c:d1:fb:f1:1a:
ec:d2:70:87:fb:60:60:7d:2d:e0:eb:65:96:95:5d:
f6:61:1a:ec:76:97:f8:72:b6:5c:1d:c1:af:c7:36:
7e:d6:d9:19:0a:1f:59:fb:33:c6:03:93:9a:8c:57:
4e:af:3e:05:80:6c:7c:07:73:0c:9c:bb:c1:4c:4d:
0f:52:00:3a:10:4a:df:c2:ac:d2:d1:77:b2:f7:77:
9f:33:1d:62:5a:02:91:5e:db:1a:bd:21:32:74:54:
d4:99:61:a7:a5:16:af:38:69:ed:c5:8f:1d:ca:e6:
dc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F3:ED:06:8E:99:46:5A:6C:91:A9:4B:B2:8B:41:D2:C6:A8:E8:39
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S_PtBo6ZRlpskalLsotB0sao6Dk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.240.0/21
Signature Algorithm: sha256WithRSAEncryption
72:0b:49:2f:e1:57:fa:a3:39:a8:14:05:60:ff:88:5a:ff:77:
95:37:b5:31:fd:6f:37:53:1f:82:b2:0b:1d:71:57:07:8f:51:
9e:1a:90:1e:1c:63:61:87:6e:73:77:23:10:18:73:b6:e4:4e:
ad:89:3a:2c:95:1d:08:a0:4b:63:da:76:da:30:59:fc:84:a0:
aa:9d:c6:77:ed:26:7e:a0:5c:6f:d4:84:3b:82:89:0f:88:06:
59:a8:8a:c9:ef:6b:b0:84:86:61:bd:b1:8f:21:eb:29:35:cc:
26:a3:a5:e1:d6:90:50:57:1c:39:29:13:48:85:44:06:b8:5a:
c2:26:92:5a:2a:6b:bb:ab:4d:65:95:c9:ae:fc:a9:af:bd:9d:
55:bd:ed:ba:a1:a5:a1:8e:24:c4:75:f4:d8:c1:1c:5f:22:c2:
fe:65:67:1d:63:c6:d1:d2:d8:b7:69:db:46:7e:fa:ff:8c:16:
dc:dc:23:63:97:bc:fa:41:19:78:05:54:d3:45:80:1f:cf:50:
fe:7c:cb:5e:f4:b0:c9:7a:ec:87:b5:42:73:a1:a1:0b:b8:b5:
a1:5e:4e:30:76:44:cf:38:03:19:cb:62:36:ea:82:84:20:30:
8c:24:60:9e:37:c3:e1:9b:dc:29:37:e8:ac:33:d4:fa:0c:0b:
ff:02:bb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:53 2024 by rpki-client on console-fra.rpki-client.org